English
Menu

Hardware Security: Advanced Topics and Trends

Which correctly describes a hardware bill of materials (HBOM)?

  1. AA list of the chips and components in a device, their manufacturers and part numbers, firmware versions and so on, used to investigate the impact of vulnerabilities and counterfeits
  2. BA list of the power consumption measured for each component of a device, used to estimate the battery life of battery-powered devices and to study heat generation
  3. CA table listing the license terms and fees for each piece of software in a device, used in calculations when setting the product price
Show answer and explanation

Answer: A. A list of the chips and components in a device, their manufacturers and part numbers, firmware versions and so on, used to investigate the impact of vulnerabilities and counterfeits

Whereas a list of software components (such as libraries) is called an SBOM, an HBOM is a list summarizing the hardware configuration of a device. When a vulnerability is found in a chip or counterfeits are found in circulation, an HBOM makes it possible to find quickly which devices of which products are affected. With the US CISA publishing an HBOM framework in 2023, among other moves, it is being developed as a means of managing supply-chain risk. It is important to manage items on the boundary between hardware and software, such as firmware, as well.

  • A. Correct. It makes it possible to trace what is used where.
  • B. It is not a list of power consumption.
  • C. It is not a table of license fees.
Practice this topic Back to topic

Books on Hardware Security: Advanced Topics and Trends Ad

As an Amazon Associate I earn from qualifying purchases.

More Hardware Security: Advanced Topics and Trends questions

  1. Which is an appropriate way to think about security when combining chiplets from several companies in one package?
  2. Which correctly pairs techniques that protect semiconductor designs with the untrusted party each mainly assumes?
  3. Assuming reverse engineering that reads the circuit by removing a chip's layers one at a time and imaging them with an electron microscope, or by imaging its interior with X-rays, which is an appropriate design approach?
  4. Regarding security levels 1 to 4 of FIPS 140-3, the certification standard for cryptographic modules, which correctly describes the requirements for physical security?
  5. What does the EAL (evaluation assurance level) of Common Criteria (ISO/IEC 15408), the international standard for evaluating security products, represent?