2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)最新文献_第4页

Partial Reconfiguration for Run-time Memory Faults and Hardware Trojan Attacks Detection 运行时内存故障和硬件木马攻击检测的部分重构

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9840090

Ying Li, Lan Chen, Jian Wang, Guanfei Gong

引用次数: 0

WiP: Applicability of ISO Standard Side-Channel Leakage Tests to NIST Post-Quantum Cryptography WiP: ISO标准侧信道泄漏测试对NIST后量子加密的适用性

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9839849

Markku-Juhani O. Saarinen

{"title":"WiP: Applicability of ISO Standard Side-Channel Leakage Tests to NIST Post-Quantum Cryptography","authors":"Markku-Juhani O. Saarinen","doi":"10.1109/HOST54066.2022.9839849","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9839849","url":null,"abstract":"FIPS 140–3 is the main standard defining security requirements for cryptographic modules in U.S. and Canada; commercially viable hardware modules generally need to be compliant with it. The scope of FIPS 140–3 will also expand to the new NIST Post-Quantum Cryptography (PQC) standards when migration from older RSA and Elliptic Curve cryptography begins. FIPS 140–3 mandates the testing of the effectiveness of “non-invasive attack mitigations”, or side-channel attack coun-termeasures. At higher security levels 3 and 4, the FIPS 140–3 side-channel testing methods and metrics are expected to be those of ISO 17825, which is based on the older Test Vector Leakage Assessment (TVLA) methodology. We discuss how to apply ISO 17825 to hardware modules that implement lattice-based PQC standards for public-key cryptography - Key Encapsulation Mechanisms (KEMs) and Digital Signatures. We find that simple “random key” vs. “fixed key” tests are unsatisfactory due to the close linkage between public and private components of PQC keypairs. While the general statistical testing approach and requirements can remain consistent with older public-key algorithms, a non-trivial challenge in creating ISO 17825 testing procedures for PQC is the careful design of test vector inputs so that only relevant Critical Security Parameter (CSP) leakage is captured in power, electromagnetic, and timing measurements.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"158 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121481966","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Safeguarding Unmanned Aerial Vehicles Against Side Channel Analysis Via Motor Noise Injection 通过电机噪声注入保护无人机免受侧通道分析

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9839837

Timothy Radtke, Cristinel Ababei

{"title":"Safeguarding Unmanned Aerial Vehicles Against Side Channel Analysis Via Motor Noise Injection","authors":"Timothy Radtke, Cristinel Ababei","doi":"10.1109/HOST54066.2022.9839837","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9839837","url":null,"abstract":"We first investigate the efficacy of side channel anal-ysis (SCA) based attacks to recover the encryption key from an unmanned aerial vehicle (UAV). We then propose a method based on noise injection to safeguard against this type of attack. The proposed noise injection method is unique because it prioritizes low power consumption and uses as a noise source the motors of the UAV system. The effectiveness of the proposed method is demonstrated through experiments on a real quadcopter. It is found that when noise injection is not applied, the encryption key can be recovered through correlation power analysis. In contrast, the same key is not recoverable when the proposed noise injection method is applied. The implemented solution is efficient and does not negatively effect the flight stability or control of the UAV because its execution time overhead is negligible inside the control loop. In addition, it consumes a negligible amount of power. These results demonstrate that mitigation of SCA attacks without expanding the complexity or negatively effecting the flight operations of drones is achievable.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123892443","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

SpecPref: High Performing Speculative Attacks Resilient Hardware Prefetchers SpecPref:高性能投机攻击弹性硬件预取器

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9839828

Tarun Solanki, Biswabandan Panda

{"title":"SpecPref: High Performing Speculative Attacks Resilient Hardware Prefetchers","authors":"Tarun Solanki, Biswabandan Panda","doi":"10.1109/HOST54066.2022.9839828","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9839828","url":null,"abstract":"With the inception of the Spectre attack in 2018, microarchitecture mitigation strategies propose secure cache hi-erarchies that do not leak the speculative state. Among many mitigation strategies, MuonTrap, proposes an efficient, secure cache hierarchy that provides speculative attack resiliency with minimum performance slowdown. Hardware prefetchers play a significant role in improving application performance by fetching and bringing data and instructions into caches before time. To prevent hardware prefetchers from leaking information about the speculative blocks brought into the cache, MuonTrap trains and triggers hardware prefetchers on the committed instruction streams, eliminating speculative state leakage. We find that on-commit prefetching can lead to significant performance slowdown as high as 20.46 % (primarily because of prefetch timeliness issues), making hardware prefetchers less effective. We propose Speculative yet Secure Prefetching (SpecPref), enhancements on top of the MuonTrap hierarchy that allows prefetching both on-commit and speculatively. We focus on improving the performance slowdown with the state-of-the-art hardware prefetchers without compromising the security guarantee provided by the MuonTrap implementation and provide an average performance slowdown of 1.17%.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114973617","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Efficient Targeted Bit-Flip Attack Against the Local Binary Pattern Network 针对局部二进制模式网络的高效定向比特翻转攻击

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9839959

A. Roohi, Shaahin Angizi

引用次数: 5

A Novel Attack on Machine-Learning Resistant Physical Unclonable Functions 对机器学习抵抗物理不可克隆函数的新攻击

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9839670

D. Canaday, W. A. S. Barbosa, A. Pomerance

引用次数: 0

Secuirty Metrics for Logic Circuits 逻辑电路的安全度量

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9840239

Ruben Purdy, Danielle Duvalsaint, R. D. Blanton

引用次数: 1

Security Threats and Countermeasure Deployment Using Partial Reconfiguration in FPGA CAD Tools FPGA CAD工具中部分重构的安全威胁与对策部署

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9839731

Sandeep Sunkavilli, Qiaoyan Yu

引用次数: 1

A Modeling Attack on the Sub-threshold Current Array PUF 亚阈值电流阵列PUF的建模攻击

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9839861

Yun Liu, Yongliang Chen, Xiaole Cui

引用次数: 2

On the Feasibility of Training-time Trojan Attacks through Hardware-based Faults in Memory 基于内存硬件故障的训练时间木马攻击的可行性研究

2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) Pub Date : 2022-06-27 DOI: 10.1109/HOST54066.2022.9840266

Kunbei Cai, Zhenkai Zhang, F. Yao

{"title":"On the Feasibility of Training-time Trojan Attacks through Hardware-based Faults in Memory","authors":"Kunbei Cai, Zhenkai Zhang, F. Yao","doi":"10.1109/HOST54066.2022.9840266","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9840266","url":null,"abstract":"Training-time trojan attacks have been one of the major security threats that can tamper integrity of deep learning models. Existing trojan attacks either require poisoning of the training dataset or depend on control of the training process. In this paper, we investigate the practicality of leveraging hardware-based fault attacks to introduce trojan in deep neural networks (DNNs) at training time. Specifically, we consider a memory-based fault injection using the rowhammer attack vector. We propose a new attack framework where the adversary injects faults to the feature map of DNN models during training. We investigate the impact of bit flips in feature maps and derive a bit flip strategy that enables the victim model to associate a perturbed feature map pattern with a target label without impacting the prediction of normal inputs. We further propose an input trigger identification algorithm that obtains the trigger pattern for the trojaned model at inference time. Our evaluation shows that our attack can trojan DNN models with very high attack success rate. Our work highlights the importance of understanding the impact of hardware-based fault attacks in machine learning training.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114710525","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5