Power, Performance, and Area of HPC-Based Malware Detectors: An FPGA and Open-PDK ASIC Study
FPGA and ASIC study finds tree-based HPC malware detectors use far less area and energy than function-based models.
The paper measures area, power, and timing of hardware malware detectors that classify programs from hardware performance counters. A pipeline rebuilds trained models into synthesizable RTL, checks them against a bit-accurate golden model, and evaluates FPGA and open-PDK ASIC implementations. Tree- and rule-based ensembles use nearly an order of magnitude less area and several times less energy than function-based classifiers. Cutting HPC inputs to a processor's concurrent-counter limit keeps detection performance while further reducing area, power, and delay.
- Ensemble HPC detectors lead prior detection metrics.
- Tree and rule models need far less area and energy.
- Fewer concurrent counters preserve detection while cutting delay.
- Designs were validated against bit-accurate golden RTL models.
From the original article
1 min read at arxiv.orgHardware malware detectors (HMDs) classify programs as benign or malicious based on hardware performance counter (HPC) data. Previous studies have shown that ensemble classifiers outperform other classifiers on detection metrics. However, the area, power, and timing costs of HMDs remain open questions.
By Alireza Abolhasani Zeraatkar · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.