BaseStable

CWE-1331Improper Isolation of Shared Resources in Network On Chip (NoC)

Category: logic

Description

The Network On Chip (NoC) does not isolate or incorrectly isolates its on-chip-fabric and internal resources such that they are shared between trusted and untrusted agents, creating timing channels.

Common consequences· 1

  • Confidentiality / Availability — DoS: Resource Consumption (Other), Varies by Context, Other
    Attackers may infer data that belongs to a trusted agent. The methods used to perform this attack may result in noticeably increased resource consumption.

Potential mitigations· 1

  • [Architecture and Design, Implementation]Implement priority-based arbitration inside the NoC and have dedicated buffers or virtual channels for routing secret data from trusted agents.

Related CAPEC attack patterns· 1

CAPEC-124

References

  1. https://cwe.mitre.org/data/definitions/1331.html

Exploits (incoming)1

TypeTargetConfidenceTier
AttackPatternShared Resource Manipulationcapec-124100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
CWE
Missing Support for Security Features in On-chip Fabrics or Buses
CWE
Improper Management of Sensitive Trace Data
CWE
Insecure Security Identifier Mechanism
CWE
Hardware Logic Contains Race Conditions
CWE
Non-Transparent Sharing of Microarchitectural Resources
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.