PUF VE HSM TEKNOLOJİLERİNDE ARAŞTIRMA EĞİLİMLERİ, GÜVENLİK YAKLAŞIMLARI VE GELECEK PERSPEKTİFLERİ: TEMATİK BİR LİTERATÜR ANALİZİ

Çolak F.

International Journal of Original Educational Research, cilt.4, sa.3, ss.167-184, 2026 (Hakemli Dergi)

Özet

The growing prevalence of digital transformation, IoT (Internetof Things), cloud computing, Industry 4.0, and cyber-physical systems has brought increasing demand for hardware-based security solutions. Thus, the conventional security mechanisms that are software-oriented rather than hardware-based are becoming a prime target foradvanced attacks, physical tampering, side-channel attacks and unauthorized key extraction, and the importance of secure hardware architecture is increasing. Out of the emerging technologies that manage these challenges, Physical Unclonable Functions (PUFs) and Hardware Security Modules (HSMs) gained substantial attention as promising solutions in the areas of secure device authentication, cryptographic key generation, secure key storage, hardware rooted trustestablishment and more. Unlike PUFs which rely on inherent manufacturing variances to form
168unique and non-cloneable device identifiers, HSMs are tamper-resistant devices that perform cryptographic process and manage the lifecycle of sensitive cryptographic materialover time. Although considerable research has been conducted on these techniques individually, work addressing how they might compliment each other, be integrated and new potential researchdirections is rather sporadic. This review intends to provide a comprehensive analysis of the research status of PUF and HSM techniques by revealing key research trends, prevalent security approaches, new application areas,and possible future research in this fieldThe search was carried out between 2015–2026 using studiesthat are peer-reviewed from internationally acknowledged scientific databases such as Scopus, Web of Science, IEEE Xplore, ACM Digital Library, SpringerLink, and ScienceDirect. This reviewwas conducted in accordance with the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) statement to enhance the transparency of the selection process. The process fromthis point involved conducting the six-phase approach to thematic analysis as described by Braun and Clarke, and identifying patterns and themes that re-occurred in the literature. Specifically, the study results identifysix main research topics: hardware trust architectures, device authentication based on PUFs, cryptographic key management over HSMs, IoT and edge device security, physical (fault) and side-channel attacks resistant, and novel hardware security paradigms, such as post-quantum cryptography and ai-assisted security schemes. The results also reveal an increasing interest towards thefusion of the PUF and HSM technologies in order to devise security frameworks that are scalable, lightweight and robust, while being capable of serving the next generation distributed computing paradigms. Nevertheless, there are still a number of open challengesespecially in relation to standardized integration architectures, interoperability across dissimilar HW platforms, large-scale deployment in resource-constrained IoT ecosystems, and resistance against emerging AI-aided attack methods