NDLI: Hardware Trojans and Other Threats against Embedded Systems

Please wait, while we are loading the content...

Hardware Trojans and Other Threats against Embedded Systems

Detecting Privileged Side-Channel Attacks in Shielded Execution with Déjà Vu

To Update or Not to Update: Insights From a Two-Year Study of Android App Evolution

Lightweight Swarm Attestation: A Tale of Two LISA-s

Strict Virtual Call Integrity Checking for C++ Binaries

Functional Encryption with Oblivious Helper

DoS Attacks on Your Memory in Cloud

VTBPEKE: Verifier-based Two-Basis Password Exponential Key Exchange

Pinpointing Vulnerabilities

Understanding Human-Chosen PINs: Characteristics, Distribution and Security

Proofs of Data Residency: Checking whether Your Cloud Files Have Been Relocated

Scaling and Effectiveness of Email Masquerade Attacks: Exploiting Natural Language Generation

Secure Wallet-Assisted Offline Bitcoin Payments with Double-Spender Revocation

The Role of Hosting Providers in Fighting Command and Control Infrastructure of Financial Malware

SPOKE: Scalable Knowledge Collection and Attack Surface Analysis of Access Control Policy for Security Enhanced Android

Secure Integration of Web Content and Applications on Commodity Mobile Operating Systems

Securing Memory Encryption and Authentication Against Side-Channel Attacks Using Unprotected Primitives

DRIVE: Dynamic Runtime Integrity Verification and Evaluation

Group Signatures with Time-bound Keys Revisited: A New Model and an Efficient Construction

SECRET: On the Feasibility of a Secure, Efficient, and Collaborative Real-Time Web Editor

BRIDEMAID: An Hybrid Tool for Accurate Detection of Android Malware

POSTER: Enabling End-Users to Protect their Privacy

Advanced Security Research in the Era of the Internet of Things

SGX-Log: Securing System Logs With SGX

Toward Detecting Collusive Ranking Manipulation Attackers in Mobile App Markets

Model-based Attack Detection Scheme for Smart Water Distribution Networks

BinSequence: Fast, Accurate and Scalable Binary Code Reuse Detection

Mis-operation Resistant Searchable Homomorphic Encryption

Side Channels in Deduplication: Trade-offs between Leakage and Efficiency

Boosting the Guessing Attack Performance on Android Lock Patterns with Smudge Attacks

Extracting Conditional Formulas for Cross-Platform Bug Search

Evaluating Behavioral Biometrics for Continuous Authentication: Challenges and Metrics

EncKV: An Encrypted Key-value Store with Rich Queries

On the Detection of Kernel-Level Rootkits Using Hardware Performance Counters

Privacy-preserving and Optimal Interval Release for Disease Susceptibility

Automatically Inferring Malware Signatures for Anti-Virus Assisted Attacks

Android Database Attacks Revisited

DroidForensics: Accurate Reconstruction of Android Attacks via Multi-layer Forensic Logging

Don't Skype & Type!: Acoustic Eavesdropping in Voice-Over-IP

An Attack Against Message Authentication in the ERTMS Train to Trackside Communication Protocols

Almost Universal Forgery Attacks on the COPA and Marble Authenticated Encryption Algorithms

WedgeTail: An Intrusion Prevention System for the Data Plane of Software Defined Networks

How Discover a Malware using Model Checking

POSTER: Detecting Inter-App Information Leakage Paths

CoverUp: Privacy Through "Forced" Participation in Anonymous Communication Networks

The Circle Game: Scalable Private Membership Test Using Trusted Hardware

Collusive Data Leak and More: Large-scale Threat Analysis of Inter-app Communications

Towards Formal Security Analysis of Industrial Control Systems

PrivWatcher: Non-bypassable Monitoring and Protection of Process Credentials from Memory Corruption Attacks

A Ciphertext-Policy Attribute-based Encryption Scheme With Optimized Ciphertext Size And Fast Decryption

Sharing Proofs of Retrievability across Tenants

What You See is Not What You Get: Leakage-Resilient Password Entry Schemes for Smart Glasses

Discovering Logical Vulnerabilities in the Wi-Fi Handshake Using Model-Based Testing

Pass-O: A Proposal to Improve the Security of Pattern Unlock Scheme

MoPS: A Modular Protection Scheme for Long-Term Storage

Gossip: Automatically Identifying Malicious Domains from Mailing List Discussions

Towards Extending Noiseless Privacy: Dependent Data and More Practical Approach

PayBreak: Defense Against Cryptographic Ransomware

TriFlow: Triaging Android Applications using Speculative Information Flows

DroidPill: Pwn Your Daily-Use Apps

Hit by the Bus: QoS Degradation Attack on Android

Using Program Analysis to Synthesize Sensor Spoofing Attacks

A Terrorist-fraud Resistant and Extractor-free Anonymous Distance-bounding Protocol

The Case for In-Network Replay Suppression

POSTER: Detection of Information Leaks via Reflection in Android Apps

Control-Flow Hijacking: Are We Making Progress?

Memory Safety for Embedded Devices with nesCheck

Breaking Ad-hoc Runtime Integrity Protection Mechanisms in Android Financial Apps

On the Robustness of RSA-OAEP Encryption and RSA-PSS Signatures Against (Malicious) Randomness Failures

Cache-Based Application Detection in the Cloud Using Machine Learning

Updatable Block-Level Message-Locked Encryption

Practical Black-Box Attacks against Machine Learning

BlindIDS: Market-Compliant and Privacy-Friendly Intrusion Detection System over Encrypted Traffic

SCM: Secure Code Memory Architecture

Heterogeneous Rainbow Table Widths Provide Faster Cryptanalyses

Taming Asymmetric Network Delays for Clock Synchronization Using Power Grid Voltage

POSTER: Localization of Spoofing Devices using a Large-scale Air Traffic Surveillance System

Security in Personal Genomics: Lest We Forget

DataShield: Configurable Data Confidentiality and Integrity

LINCOS: A Storage System Providing Long-Term Integrity, Authenticity, and Confidentiality

An Efficient KP-ABE with Short Ciphertexts in Prime OrderGroups under Standard Assumption

Accurate Manipulation of Delay-based Internet Geolocation

POSTER: Traffic Analysis Attacks in Anonymity Networks

The Case for System Command Encryption

POSTER: Quantitative Security Assessment Method based on Entropy for Moving Target Defense

POSTER: A Behavioral Biometric Authentication Framework on Smartphones

POSTER: A Secure, Practical & Safe Packet Spoofing Service

Hardware Trojans and Other Threats against Embedded Systems

Content Provider	ACM Digital Library
Author	Paar, Christof
Abstract	Countless systems ranging from consumer electronics to military equipment are dependent on integrated circuits (ICs). A surprisingly large number of such systems are already security- critical, e.g., automotive electronics, medical devices, or SCADA systems. If the underlying ICs in such applications are maliciously manipulated through hardware Trojans, the security of the entire system can be compromised. In recent years, hardware Trojans have drawn the attention of the scientific community and government. Initially, the primary attacker model was a malicious foundry that could alter the design, i.e., introduce hardware Trojans which could interfere with the functionality of a chip. Many other attacker models exist too. For instance, a legitimate IC manufacturer, such as a consumer electronics company, might be in cohort with a national intelligence agency and could alter its products in a way that compromises their security. Even though hardware Trojans have been studied for a decade or so in the literature, little is known about how they might look, and what the "use cases" for them is. We describe two applications for low-level hardware manipulations. One introduces an ASIC Trojans by sub-transistor changes, and the other is a novel type of fault-injection attacks against FPGAs. As an example for an extremely stealthy manipulations, we show how a dangerous Trojans can be introduced by merely changing the dopant polarity of selected existing transistors of a design. The Trojan manipulates the digital post-processing of Intel's cryptographically secure random number generator used in the Ivy Bridge processors. The adversary is capable of exactly controlling the entropy of the RNG. For example, the attacker can reduce the RNG's entropy to 40 bits of randomness. Due to the AES-based one-way function after the entropy extracting, the Trojan is very difficult to detect. Crucially, this approach does not require to add new circuits to the IC. Since the modified circuit appears legitimate on all wiring layers (including all metal and polysilicon), our family of Trojans is resistant to many detection techniques, including fine-grain optical inspection and checking against "golden chips". As a second "use case", we show how an adversary can extract cryptographic keys from an unknown FPGA design. The attack, coined bitstream fault injection (BiFI), systematically manipulates the bitstream by changing random LUT contents, configures the target device, and collects the resulting faulty ciphertexts. The ciphertexts are used to recover the key by testing a set of hypotheses, e.g., that the ciphertext is the plaintext XORed with the key. The attack only needs a black-box assumption about the bitstream structure and format. It was verified by considering a set of 3 rd party AES designs on different standard FPGAs. In 15 out of 16 designs, we were able to extract the AES key.
Starting Page	1
Ending Page	1
Page Count	1
File Format	PDF
ISBN	9781450349444
DOI	10.1145/3052973.3053885
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-04-02
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Trng Embedded systems Fpga security Backdoor Hardware trojans
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in