CWE-1331 — Improper Isolation of Shared Resources in Network On Chip (NoC)
CWE-1331: Improper Isolation of Shared Resources in Network On Chip (NoC)
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Stable |
| Likelihood of exploit | — |
Description
The Network On Chip (NoC) does not isolate or incorrectly isolates its on-chip-fabric and internal resources such that they are shared between trusted and untrusted agents, creating timing channels.
Typically, network on chips (NoC) have many internal resources that are shared between packets from different trust domains. These resources include internal buffers, crossbars and switches, individual ports, and channels. The sharing of resources causes contention and introduces interference between differently trusted domains, which poses a security threat via a timing channel, allowing attackers to infer data that belongs to a trusted agent. This may also result in introducing network interference, resulting in degraded throughput and latency.
Common consequences
- Confidentiality, Availability: DoS: Resource Consumption (Other), Varies by Context, Other
Mitigations
Architecture and Design — Implement priority-based arbitration inside the NoC and have dedicated buffers or virtual channels for routing secret data from trusted agents.
References
- CWE page: https://cwe.mitre.org/data/definitions/1331.html
- CWE list: https://cwe.mitre.org/data/index.html