Transparently attached flash memory security
An apparatus includes an interface circuit and a monitor circuit communicatively coupled to the interface circuit. The monitor circuit is configured to identify a command issued to a memory communicatively coupled to the monitor circuit through the interface circuit, determine whether the command is authorized, and, based on a determination that the command is not authorized, cancel the command.
1. A method, comprising:
identifying a command issued to a memory;
determining that the command is not authorized; and
based on a determination that the command is not authorized, cancelling the command;
wherein cancelling the command includes resetting a source of the command before issuance of a completed chip select signal to the memory.
2. The method of claim 1 , wherein cancelling the command includes:
delaying or completing a received chip select signal to yield a modified chip select signal; and
sending the modified chip select signal to the memory.
3. The method of claim 1 , wherein cancelling the command includes:
adding a clock pulse to a clock bus used by the memory before issuance of a completed chip select signal to the memory.
4. The method of claim 3 , wherein cancelling the command includes:
resetting the source of the command before the clock pulse is added to the clock bus used by the memory.
5. The method of claim 1 , wherein cancelling the command includes:
delaying issuance of a completed chip select signal to the memory after completion of a received chip select signal from the source of the command.
6. The method of claim 1 , wherein cancelling the command includes:
delaying issuance of a completed chip select signal to the memory after completion of a received chip select signal from the source of the command, in response to a determination that the identified command is a write command or an erase command.
7. The method of claim 1 , wherein cancelling the command includes:
issuing a completed chip select signal to the memory before completion of a received chip select signal from the source of the command.
8. The method of claim 1 , wherein cancelling the command includes:
receiving a chip select signal from the source; and
issuing a completed chip select signal to the memory before completion of the chip select signal from the source of the command, based on a determination that the identified command is a read command.
9. An apparatus, comprising:
an interface circuit; and
a monitor circuit communicatively coupled to the interface circuit, the monitor circuit to:
identify a command issued to a memory communicatively coupled to the monitor circuit through the interface circuit, the command issued from a source through the interface circuit to the memory;
determine that the command is not authorized; and
based on the determination that the command is not authorized, cancel the command;
wherein to cancel the command includes to reset the source of the command before issuance of a completed chip select signal to the memory.
10. The apparatus of claim 9 , wherein to cancel the command includes:
to delay or complete a received chip select signal to yield a modified chip select signal; and
to send the modified chip select signal to the memory.
11. The apparatus of claim 9 , wherein to cancel the command includes to add a clock pulse to a clock bus used by the memory before issuance of a completed chip select signal to the memory.
12. The apparatus of claim 11 , wherein to cancel the command includes to reset the source of the command before the clock pulse is added to the clock bus used by the memory.
13. The apparatus of claim 9 , wherein to cancel the command includes to complete the modified chip select signal after issuance of a completed chip select signal to the memory.
14. The apparatus of claim 9 , wherein to cancel the command includes to delay issuance of a completed chip select signal to the memory in response to a determination that the command is a write command or an erase command.
15. The apparatus of claim 9 , wherein to cancel the command includes to issue a completed chip select signal to the memory before issuance of an expected completed chip select signal from the source of the command.
16. The apparatus of claim 9 , wherein to cancel the command includes to issue a completed chip select signal to the memory before receiving the completed chip select signal from the source of the command based on a determination that the command is a read command.
17. The apparatus of claim 9 , wherein the monitor circuit is to:
identify the command issued to the memory as a read command;
compare content from the memory with a trusted copy to determine whether the content from the memory and the trusted copy are identical; and
based on a determination that the content from the memory is not identical to the trusted copy, take corrective action.
18. The apparatus of claim 9 , wherein the monitor circuit includes:
a processor; and
a non-transitory, machine-readable medium, the medium including instructions, the instructions, when loaded and executed by the processor, cause the monitor circuit to identify the command issued to the memory communicatively coupled to the monitor circuit, determine whether the command is not authorized, and cancel the command.