Levels of Assurance for DoD Microelectronics
The NSA has has published criteria for evaluating levels of assurance required for DoD microelectronics.
The introductory report in a DoD microelectronics series outlines the process for determining levels of hardware assurance for systems and custom microelectronic components, which include application-specific integrated circuits (ASICs), field programmable gate arrays (FPGAs) and other devices containing reprogrammable digital logic.
The levels of hardware assurance are determined by the national impact caused by failure or subversion of the top-level system and the criticality of the component to that top-level system. The guidance helps programs acquire a better understanding of their system and components so that they can effectively mitigate against threats.
The report was published last month, but I only just noticed it.
Clive Robinson • August 29, 2022 12:57 PM
@ Bruce, ALL,
I was thinking about this some days back.
If people hunt back on this blog they will find that the DoD issued an open bid for people with ideas about how to limit if not stop hardware subversion.
At the time @Nick P pointed out a likely scenario as to what would happen.
In short any prospective candidates to limit or stop the subversion of hardware that were non-destructive and potentially mass deployable, would get made secret or higher in classification.
As it turns out any research into this area of anti-subvertion does appear to have dropped off of the radar. Which is odd when you consider just how valuable such research would be…
Any way that was then this is now, and as most will realise the electronics industry sucks at hardware security for various reasons without having to even think of deliberate subversion.