The rapid evolution of electronics to provide for modernization in US government platforms has driven the use of complex System in Packages (SiP) and chiplets to address critical system needs. This new approach has caused new challenges for the supply chain. The modularization of these subcomponents, their expanded reuse, and the diversity of requirements from these systems has resulted in a new set of approaches to determine integrity of the end system. An introduction to supply chain and various analysis techniques will be discussed, highlighting the technologies, tools, and new standards that are being developed through ongoing efforts within our Supply Chain Risk Management practice.

Saverio Fazzari works for Booz Allen acting as a senior technical advisor to DARPA and other government agencies for numerous programs. His specialty is advanced circuit design and development strategies with a focus on hardware cyber security issues including trusted design and fabrication. Mr. Fazzari' s experience includes extensive commercial experience, leading production innovation and development across all facets of the electronic design process. Mr. Saverio Fazzari has over 25 years of experience covering the entire electronic product development flow. He has a BSEE from Johns Hopkins, and MSEE from the University of Pittsburgh. He has published over 14 papers in industry journals and technical conferences.

Supply Chain security extends across all tiers, operations and work groups of semiconductor operations. This presentation will share a data driven solution approach to policies, technology and practices. This presentation will also share focus areas that need combined efforts across multiple partners to accelerate industry wide solutions.

Sridhar Swamy is Director, Data Engineering at AMD, responsible for data science and analytics strategy in Global Operations. In this role, Sridhar leads the development of new architectures and platforms to solve the emerging problems in product engineering, manufacturing and supply chain. Sridhar brings over 20 years of experience leading data-driven transformation in Technology, Energy and Financial Services industry.

Akash Malhotra is Director, Security Product Management at AMD. He is responsible for defining AMD product security strategy, create technical roadmap and engaging with customers and industry partners to bring innovative security technologies to AMD products and platforms.

Akash has more than 18 years of industry experience and has held senior leadership position in engineering, alliances, and product management.Akash holds a bachelor’s degree in Electrical Engineering from Bangalore University, India, and master’s in electrical engineering from University of Minnesota (Twin Cities), USA.

The U.S. share of the global chip production market has plummeted from 37 percent in 1990 to 12 percent today, and the free fall is not over, according to industry estimates. Very recently, President Biden referred to this shortage of trustworthy in-house chip manufacturing as a “21st-century horseshoe nail”. He stated: “For want of that nail, the horseshoe was lost, followed by the horse, the rider, his message, the battle and ultimately, the kingdom. Even small failures at one point in the supply chain can cause outside impacts further up the chain.” As a result of this significant concern, the administration and Congress are pushing for a whopping $37 billion bill to address chip manufacturing shortage and trustworthiness.

In this talk, I will briefly overview the current challenges in securing the semiconductor supply chain. Specifically, I will describe the main threat in this domain: Hardware Trojans - malicious hardware modifications to ASICs and computing systems made by untrusted third parties. Further, I will outline why protecting the supply chain against Hardware Trojans are even more challenging in the era of emerging manufacturing/packaging technologies such as heterogeneous integration (i.e., dielets/chiplets). I will conclude the talk by providing some potential solutions to tackle this very critical and urgent problem.

Nader Sehatbakhsh is an Assistant Professor in the Electrical and Computer Engineering Department at UCLA. His research interests are Hardware Security, Computer Architecture, and Security and Privacy in IoT Systems. Prior to joining to UCLA, he received his PhD from Georgia Tech working on mitigating side-channel leakages in computing systems. His work has been recognized with several awards and honors including the MICRO-49 Best Paper Award and Micro Top-Picks Honorable Mention.

One of the ongoing threats to the microelectronic supply chain involves the introduction of counterfeit parts. Conventional counterfeits are typically created for financial gain, but clones and tampered parts are categories of counterfeit parts that may represent a security threat. These devices may contain malicious functionality or their design or processing may have been altered to cause premature aging and failure.

Michael H. Azarian, Ph.D.

The security of the modern supply chain has seen a massive increase in scrutiny and mistrust. Customers are more concerned now than ever about the security and authenticity of the products they purchase. The issues related to supply chain have, in fact, become so numerous and concerning that many in Industry have changed to adopting a zero-trust approach to the products they procure. This is primarily due to lack of confidence in providers to either understand all the threats that exist again their supply chain or to be able to successfully mitigate the threats. This became painfully obvious after the discovery of the attack against products from Solar Winds.

Dr Matthew Areno is a Principal Engineer at Intel Corporation in the Intel Product Assurance and Security (IPAS) group. Dr. Areno completed his Bachelor’s and Master’s degrees at Utah State University in 2007 and took a position with Sandia National Laboratories. At Sandia, he focused on vulnerability assessment and reverse engineering of embedded systems primarily utilizing ARM-core processors. During this time, he also completed his Ph.D. at the University of New Mexico with dissertation work on strengthening embedded system security through the use of PUF-enhanced cryptographic units. In 2013, Dr. Areno took a position with Raytheon Cyber Security Innovations in Austin, TX; he served as a Chief Architect for a number of anti-tamper solutions, with specific expertise in establishing trust in COTS equipment. He joined Intel in 2019 and is now the lead of the Security Assurance and Cryptography group. Dr. Areno holds several patents and has numerous publications in the area of hardware security, system design, and PUF technologies.

Automotive component traceability requirements have existed for several decades. Generally, traceability refers to tracking and tracing each component that comprises every sub-system in a car. Traditionally, this has been achieved with direct part marking on mechanical or electronic components using 1D or 2D barcodes or radio frequency identification (RFID). The motivation for component traceability from automotive original equipment manufacturers (OEMs) and their Tier 1 suppliers arises from either warranty reasons (field failures) or 0 km or 0 hr (infant mortality) failures. Since vehicle recalls are costly, this process was developed to expeditiously capture the origins of the critical components. The commonly used functional safety standard ISO 26262 created by the automotive industry mandates traceability. The traceability underpinning ISO 26262 traces hardware, software and firmware back to the system-level design, validation and test reports.

Ajay joined Amkor in 2018 and is Sr. Manager, Automotive Product Marketing at Amkor Technology, Inc. He is focused on automotive electrification, ADAS and infotainment product marketing and strategy. Prior to joining Amkor, he worked for Infineon, managing technology and product development of wide-bandgap semiconductors. Ajay has published more than ten articles and presented at several conferences in the emerging technologies area of GaN and SiC. He holds a Ph.D. in electrical engineering from University of South Carolina and an MBA from UCLA Anderson.

Globalization has made the semiconductor industry more susceptible to trust and security issues. Hardware Trojans, i.e., malicious modification to electronic systems, can violate the root of trust when the device or systems are fabricated/assembled in untrusted facilities. As the imaging and failure analysis tools excel in the resolution and capability, physical inspection based methods become more attractive in verifying such trust issues. On the contrary, such physical inspection methods are opening new capabilities for an adversary to extract sensitive information like secret keys, memory content or intellectual property (IP) compromising confidentiality and integrity. Different countermeasures have been proposed, however, there are still many unanswered questions. This talk will focus on the state of the art physical inspection/assurance methods, the existing countermeasures, related challenges to develop new countermeasures and a research roadmap for this emerging field.

Navid Asadi is an assistant professor in the department of electrical and computer engineering at university of Florida. His research is mainly focused on physical inspection of electronics from device to system level. He investigates novel techniques for integrated circuits counterfeit detection/prevention, system and chip level reverse engineering, anti-reverse engineering, invasive and semi-invasive physical attacks, integrity analysis, etc. using advanced inspection methods including but not limited to 3D X-ray microscopy, Optical imaging, scanning electron microscopy (SEM), focused ion beams (FIBs), THz imaging, etc. in combination with image processing and machine learning algorithms to make the inspection process intelligent and independent from human. He has recived several best paper awards and is the co-founder of IEEE-PAINE conference.