Differences between PLDs and FPGAs
Field Programmable Gate Arrays (FPGAs) are integrated circuits that can be programmed and reprogrammed to perform a wide range of digital functions. They are designed to be flexible and customizable, making them ideal for use in applications where hardware needs to be adapted to specific requirements.
Programmable Logic Devices (PLDs) and FPGAs are both digital logic devices that can be programmed to perform various functions. Still, there are some differences to consider.
PLDs are simpler devices that typically have a fixed architecture and limited programmability. They are designed to implement simple combinational or sequential logic functions, such as logic gates or flip-flops.
On the other hand, FPGAs are much more complex and offer greater flexibility and functionality. With their matrix of programmable logic blocks, interconnects, and I/O pins, FPGAs can be programmed to implement a range of digital circuits, from simple gates to complex systems-on-chip. They are often used in high-performance applications where fast prototyping and customization are essential.
Field Programmable Gate Arrays (FPGAs) and their role in security
FPGAs are widely used in a variety of industries, including telecommunications, high-performance computing, and defense. They have become an essential tool for designers and engineers who need to create custom digital circuits quickly and efficiently.
How FPGAs work
FPGAs are ideal for safety-critical or high-reliability applications due to their responsive and deterministic characteristics. Implementing the processing solution in logic enables each stage of the algorithm to be implemented in parallel, achieving the response time because the calculation path does not share resources. FPGAs are often used within aerospace, automotive, railway, and process control applications where certifications to standards such as DO254, ISO26262, and IEC61508 are required.
FPGAs provide millions of configurable logic blocks (CLBs) to developers and offer advanced features such as DSP elements, Block RAM, transceivers, PCIe endpoints, and embedded Arm® and RISC-V processors.
Examples of FPGA use include image processing and safety-critical systems, as well as video transcoding and protocol conversion. As FPGA technology and development tools evolve, FPGAs are becoming increasingly common in many applications.
What about FPGAs in the defense industry?
One of the key advantages of FPGAs is their flexibility. Unlike Application-Specific Integrated Circuits (ASICs), which are designed for a specific purpose, FPGAs can be programmed and reprogrammed to perform a wide range of tasks. This makes them ideal for use in applications where flexibility is critical, such as in military and defense systems.
In the defense industry, FPGAs are used in a variety of applications, including radar systems, electronic warfare systems, and secure communications systems. One of the key advantages of FPGAs in these applications is their ability to be reprogrammed in the field. This means that if a vulnerability is discovered in a system, the FPGA can be reprogrammed to address the vulnerability, without the need for costly hardware changes.
However, this flexibility also makes FPGAs vulnerable to attack. Because FPGAs can be reprogrammed, they are susceptible to malicious code injection, which can compromise the security of the system. In addition, because FPGAs are often used in critical systems, such as military and defense systems, any vulnerability in an FPGA can result in serious consequences.
To address these vulnerabilities, a number of products and solutions have been developed. For example, some FPGAs now include built-in security features, such as secure boot and encryption. In addition, there are a number of third-party solutions available that can be used to secure FPGAs, such as secure boot loaders and secure programming tools.
In the context of FPGAs, a boot loader is a program that is used to configure the FPGA with the desired bitstream or firmware.
There are many different boot loader solutions available for FPGAs, and they vary depending on the specific FPGA platform and the application requirements. Some examples of boot loaders for FPGAs are:
- Xilinx Bootgen: This is a tool provided by Xilinx that allows users to create boot images for Xilinx FPGAs. It supports various boot modes, such as JTAG, SPI, and SD Card.
- Altera Quartus Programmer: This is a tool provided by Intel (formerly Altera) that can be used to program the FPGA with the desired bitstream or firmware. It supports various programming modes, such as JTAG, USB, and Ethernet.
- OpenOCD: This is an open-source tool that can be used to program and debug various embedded systems, including FPGAs. It supports various JTAG adapters and interfaces, and it can be integrated with various IDEs and development tools.
- Digilent Adept: This is a tool provided by Digilent that can be used to program various FPGA platforms, such as Xilinx and Altera. It supports various programming modes, such as JTAG, SPI, and USB.
Main security threats today
With the rise of 5G environments, IoT devices, and the increasing use of unsecured Wi-Fi connections, Programmable Logic Devices (PLDs) are more vulnerable to attack than ever before. Malware is also a major threat, with hackers using a variety of techniques to inject malicious code. Let’s take a closer look at these and other trending security threats:
5G: smart but risky
5G environments are particularly vulnerable to attack due to their complex network of interconnected devices. The emergence of connected industrial control systems has transformed digital and physical systems: connected devices such as embedded digital controls, cameras, and sensors have ushered in an environment of “smart” everything—from buildings and transportation to manufacturing and many other industries. However, this has created numerous endpoints vulnerable to cyber threats.
Securing the network is challenging, as any vulnerability in one device can compromise the entire network. Moreover, the high-speed nature of 5G networks makes it easier for hackers to inject malicious code into PLDs. By introducing a simple two-port firewall between the corporate and control networks, companies can achieve significant security improvements. If properly configured, such a firewall reduces the chance of a successful external attack on the control network.
Vulnerable IoT
IoT devices can also be subject to important threats, especially when used in critical systems such as medical devices and industrial control systems. Many IoT devices are not designed with security in mind, making them easy targets for hackers.
You can learn more about IoT security in this article created together with Mouser Electronics.
Malware
Malware is another major threat to PLDs. Hackers use various techniques to inject malicious code into PLDs, including exploiting firmware vulnerabilities and using social engineering techniques to trick users into installing malware. Once installed, the malware can be used to steal sensitive data or take control of the device.
Weak Wi-Fi security
Unsecured Wi-Fi connections are also a significant threat to PLDs. Hackers can use these to gain access to PLDs and inject malicious code. Furthermore, unsecured Wi-Fi connections can be used to steal sensitive data or take control of the device.
To address these threats, a multi-layered approach to security is necessary. This includes using secure boot and encryption, implementing secure programming practices, keeping firmware up to date, and using secure Wi-Fi connections whenever possible. By taking these steps, it is possible to improve the security of PLDs and reduce the risk of cyber attacks.
To further bolster the cross-functional team and its mission, organizations also need to create a cybersecurity culture:
• Establish a cybersecurity culture across the entire extended enterprise.
• Provide thorough training and education to all personnel.
• Implement two-factor authentication policies throughout the organization.
• Enforce cybersecurity clearance processes for contractors, vendors, and other tiered organizations.
Even organizations with a robust cybersecurity culture are prone to security threats because cybersecurity is a constantly evolving field, and new threats are constantly emerging. Hackers and other malicious actors are always finding new ways to exploit vulnerabilities especially in IoT and 5G scenarios.
Innovations and solutions for today’s challenges
The versatile FPGAs are gaining a reputation. With the ability to program FPGAs to solve an array of tasks, their usage spans numerous domains. For instance, cybersecurity is one such arena where FPGAs can shine. Implementing personalized security algorithms on FPGAs is more secure than off-the-shelf security solutions.
Intel’s Stratix
Intel’s Stratix is a family of FPGAs that are designed for high-performance computing. These FPGAs are ideal for use in cybersecurity applications, as they offer high-speed processing and low-latency communication. The Stratix family includes a range of devices, from low-cost, low-power FPGAs to high-performance, high-density FPGAs.
Dev Kit solution
Infineon’s Trust Dev Kit is designed to help developers create secure IoT devices. The kit includes a PSoC microcontroller, which is a programmable system-on-chip device that combines a microcontroller with programmable logic. The PSoC device can be programmed to perform a wide range of tasks, including security functions such as encryption and decryption.
In addition to these products, there are a variety of other solutions available to improve the security of PLDs. These include secure boot and encryption solutions, as well as secure programming practices. By using a combination of these solutions, it is possible to improve the security of PLDs and reduce the risk of cyber attacks.
Open source tools
Furthermore, there are several open-source tools available that can be used to improve the security of PLDs. Here are some examples:
1. OpenOCD is an open-source tool that can be used to program and debug PLDs. It supports a wide range of PLDs, including FPGAs and microcontrollers. OpenOCD can be used to perform secure programming of PLDs, ensuring that the firmware is not tampered with during programming.
2. GnuPG is an open-source encryption tool that can be used to encrypt and decrypt data. It can be used to encrypt firmware images before they are programmed into PLDs, ensuring that the firmware is not tampered with during programming.
3. OpenSSL is an open-source encryption library that can be used to implement secure communication between PLDs and other devices. It can be used to implement secure Wi-Fi connections, ensuring that PLDs are not vulnerable to attack through unsecure Wi-Fi connections.
4. Wireshark is an open-source network protocol analyzer that can be used to monitor network traffic. It can be used to detect and analyze network attacks on PLDs, helping to identify vulnerabilities and improve security.
5. TrueCrypt is an open-source encryption tool that can be used to encrypt data stored on PLDs. It can be used to encrypt sensitive data, such as firmware images and configuration files, ensuring that they are not accessible to unauthorized users.
By using these open source tools, it is possible to improve the security of PLDs and reduce the risk of cyber attacks. These tools are freely available and can be customized to meet the specific needs of individual users.
Conclusions
The security of Programmable Logic Devices (PLDs) is becoming increasingly important in today’s connected world. With the rise of 5G environments, IoT devices, and unsecure Wi-Fi connections, PLDs are more vulnerable to attack than ever before. However, there are several solutions available to improve the security of PLDs, including FPGAs, secure boot and encryption solutions, and secure programming practices.
FPGAs are becoming increasingly popular for reconfigurable computing and are ideal for use in cybersecurity applications. Intel’s Stratix family of FPGAs and Infineon’s Trust Dev Kit are just a few examples of the latest innovations in this field. In addition, there are several open source tools available that can be used to improve the security of PLDs, including OpenOCD, GnuPG, OpenSSL, Wireshark, and TrueCrypt.
In today’s increasingly connected environments, both industrial and domestic, it is important to take a multi-layered approach to PLD security. By using a combination of these solutions, it is possible to improve the security of PLDs and reduce the risk of cyber attacks. As technology continues to evolve, staying up to date with the latest advancements in PLD security is key.
Mouser offers a wide range of devices and technical guides to help you build your infrastructure and any solution you may need, focusing on performance and security.
