IC security evaluation against fault injection attack based on FPGA emulation

2016 ◽  
Author(s):  
Song Xu ◽  
Qiang Liu ◽  
Tao Li ◽  
Hongxiang Fan
Keyword(s):  
Fault Injection ◽  
Security Evaluation ◽  
Fault Injection Attack

Physical security of deep learning on edge devices: Comprehensive evaluation of fault injection attack vectors

2021 ◽  
Vol 120 ◽  
pp. 114116
Author(s):  
Xiaolu Hou ◽  
Jakub Breier ◽  
Dirmanto Jap ◽  
Lei Ma ◽  
Shivam Bhasin ◽  
...  
Keyword(s):  
Deep Learning ◽  
Comprehensive Evaluation ◽  
Fault Injection ◽  
Physical Security ◽  
Fault Injection Attack

scholarly journals A Review on Evaluation and Configuration of Fault Injection Attack Instruments to Design Attack Resistant MCU-Based IoT Applications

Electronics ◽  
2020 ◽  
Vol 9 (7) ◽  
pp. 1153
Author(s):  
Zahra Kazemi ◽  
David Hely ◽  
Mahdi Fazeli ◽  
Vincent Beroulle
Keyword(s):  
Fault Injection ◽  
Low Cost ◽  
Security And Privacy ◽  
Production Cycle ◽  
Fault Attacks ◽  
Primary Means ◽  
Level Of Knowledge ◽  
Iot Devices ◽  
Fault Injection Attack ◽  
Evaluation Platform

The Internet-of-Things (IoT) has gained significant importance in all aspects of daily life, and there are many areas of application for it. Despite the rate of expansion and the development of infrastructure, such systems also bring new concerns and challenges. Security and privacy are at the top of the list and must be carefully considered by designers and manufacturers. Not only do the devices need to be protected against software and network-based attacks, but proper attention must also be paid to recently emerging hardware-based attacks. However, low-cost unit software developers are not always sufficiently aware of existing vulnerabilities due to these kinds of attacks. To tackle the issue, various platforms are proposed to enable rapid and easy evaluation against physical attacks. Fault attacks are the noticeable type of physical attacks, in which the normal and secure behavior of the targeted devices is liable to be jeopardized. Indeed, such attacks can cause serious malfunctions in the underlying applications. Various studies have been conducted in other research works related to the different aspects of fault injection. Two of the primary means of fault attacks are clock and voltage fault injection. These attacks can be performed with a moderate level of knowledge, utilizing low-cost facilities to target IoT systems. In this paper, we explore the main parameters of the clock and voltage fault generators. This can help hardware security specialists to develop an open-source platform and to evaluate their design against such attacks. The principal concepts of both methods are studied for this purpose. Thereafter, we conclude our paper with the need for such an evaluation platform in the design and production cycle of embedded systems and IoT devices.

scholarly journals Fault Attacks Made Easy: Differential Fault Analysis Automation on Assembly Code

2018 ◽  
pp. 96-122 ◽  
Author(s):  
Jakub Breier ◽  
Xiaolu Hou ◽  
Yang Liu
Keyword(s):  
Fault Injection ◽  
Fault Analysis ◽  
Data Flow Graph ◽  
Assembly Code ◽  
The Past ◽  
Injection Attacks ◽  
Differential Fault Analysis ◽  
Software Implementations ◽  
Fault Injection Attack ◽  
Fault Injection Attacks

Over the past decades, fault injection attacks have been extensively studied due to their capability to efficiently break cryptographic implementations. Fault injection attack models are normally determined by analyzing the cipher structure and finding exploitable spots in non-linear and permutation layers. However, this level of abstraction is often too high to distinguish vulnerable parts of software implementations, due to specific operations and optimizations. On the other hand, manually analyzing the assembly code requires non-negligible amount of time and expertise. In this paper, we propose an automated approach for analyzing cipher implementations in assembly. We represent the whole assembly program as a data flow graph so that the vulnerable spots can be found efficiently. Fault propagation is analyzed in a subgraph constructed from each vulnerable spot, allowing equations for Differential Fault Analysis (DFA) to be automatically generated. We have created a tool that implements our approach: DATAC – DFA Automation Tool for Assembly Code. We have successfully used this tool for attacking PRESENT- 80, being able to find implementation-specific vulnerabilities that can be exploited in order to recover the last round key with 16 faults. Our results show that DATAC is useful in finding attack spots that are not visible from the cipher structure, but can be easily exploited when dealing with real-world implementations.

Sign in / Sign up

Export Citation Format

Share Document