2019 IEEE 4th International Verification and Security Workshop (IVSW)最新文献_第2页

On a Low Cost Fault Injection Framework for Security Assessment of Cyber-Physical Systems: Clock Glitch Attacks 用于网络物理系统安全评估的低成本故障注入框架:时钟故障攻击

2019 IEEE 4th International Verification and Security Workshop (IVSW) Pub Date : 2019-07-01 DOI: 10.1109/IVSW.2019.8854391

Z. Kazemi, Athanasios Papadimitriou, I. Souvatzoglou, Ehsan Aerabi, Mosabbah Mushir Ahmed, D. Hély, V. Beroulle

{"title":"On a Low Cost Fault Injection Framework for Security Assessment of Cyber-Physical Systems: Clock Glitch Attacks","authors":"Z. Kazemi, Athanasios Papadimitriou, I. Souvatzoglou, Ehsan Aerabi, Mosabbah Mushir Ahmed, D. Hély, V. Beroulle","doi":"10.1109/IVSW.2019.8854391","DOIUrl":"https://doi.org/10.1109/IVSW.2019.8854391","url":null,"abstract":"Fault injection methods as a type of physical attack have gained significant importance in the security of MCU-based Internet-of-Things (IoTs) systems and they continue to become more and more important as the value of assets continues to increase. These attacks can pose severe security risks to the entire IoT system and their effects can quickly lead to security breaches. However, embedded software developers most often do not have the necessary expertise concerning existing vulnerabilities against such attacks. This makes it necessary to have a practical evaluation platform for measuring the degree of security, in a rapid and accurate way. These platforms are important not only from the performance and capability point of view, but also they need to be cost-effective, which is a critical factor to consider during their design. We present in this work a generic low cost and open platform, called HackMyMCU framework. While this platform offers both side channel and fault injection capabilities, this paper focuses on its clock glitch attacks. A first review of existing clock-based fault injectors is initially performed. Then we present two different clock glitchers and we use them to evaluate a modern MCU. The suggested methods consider the necessary parameters for the development of cost-effective and easy to use evaluation platforms which utilize easily accessible equipment. The findings show that a common and low-cost evaluation platform can be implemented with the goal to validate appropriate countermeasures against such attacks.","PeriodicalId":213848,"journal":{"name":"2019 IEEE 4th International Verification and Security Workshop (IVSW)","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-07-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114717324","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

Nonlinear Product Codes for Reliability and Security 可靠性和安全性的非线性产品代码

2019 IEEE 4th International Verification and Security Workshop (IVSW) Pub Date : 2019-07-01 DOI: 10.1109/IVSW.2019.8854455

Batya Karp, O. Amrani, O. Keren

引用次数: 1

Keynotes 主题演讲

2019 IEEE 4th International Verification and Security Workshop (IVSW) Pub Date : 2019-07-01 DOI: 10.1109/IVSW.2019.8854417

D. Fellner

引用次数: 0

About IVSW 关于IVSW

2019 IEEE 4th International Verification and Security Workshop (IVSW) Pub Date : 2018-07-01 DOI: 10.1109/IVSW.2019.8854435

引用次数: 0

2019 IEEE 4th International Verification and Security Workshop (IVSW 2019) 2019 IEEE第四届国际验证与安全研讨会(IVSW 2019)

2019 IEEE 4th International Verification and Security Workshop (IVSW) Pub Date : 1900-01-01 DOI: 10.1109/ivsw.2019.8854382

引用次数: 0