CORSICA: A Framework for Conducting Real-World Side-Channel Analysis

Schlumberger J, Wildermann S, Teich J (2021)

Publication Language: English

Publication Status: Accepted

Publication Type: Conference contribution, Conference Contribution

Future Publication Type: Article in Edited Volumes

Publication year: 2021

Edited Volumes: 2nd IFIP NTMS Workshop on CyberSecurity on Hardware 2021 (CyberSECHARD'21)

Pages Range: 1-5

Edition: 2

Conference Proceedings Title: 11th IFIP International Conference on New Technologies, Mobility and Security (NTMS)

Event location: Paris, France FR

DOI: 10.1109/NTMS49979.2021.9432644

Abstract

With the abundance of computing devices in our everyday life such as IoT
devices, improving their security has become a number one priority. While
the major focus lies on software security, hardware vulnerabilities are
often not considered. Here, particularly side-channel attacks pose a
realistic threat to such systems. However, conducting Side-Channel Analysis
(SCA) to evaluate those threats currently requires deep expert knowledge, a
lab environment, and numerous manual steps. Therefore, it is often ignored
in security considerations. 
In this paper, we analyze the challenges when conducting SCA on
consumer-grade devices using template-matching based triggering techniques.
By introducing a three-staged framework called CORSICA, we elaborate the
obstacles and deficiencies of current state-of-the-art techniques and
provide potential solutions for them. Moreover, we validate our claims by
introducing a method for semi-automatic extraction of a waveform template
of an AES 128 encryption that can be used in combination with a
template-matching triggering system. This extraction is based on generic
meta information and is demonstrated on a consumer-grade ARM processor board.

Authors with CRIS profile

Jens Trautmann Sonderforschungsbereich/Transregio 89 Invasives Rechnen Stefan Wildermann Lehrstuhl für Informatik 12 (Hardware-Software-Co-Design) Jürgen Teich Lehrstuhl für Informatik 12 (Hardware-Software-Co-Design)

Related research project(s)

Cybercrime and Forensic Computing -- Hardware Security (GRK 2475) GRK2475: Cyberkriminalität und Forensische Informatik Oct. 1, 2019 - Oct. 1, 2028 Cyberkriminalität und forensische Informatik (Cybercrime) Oct. 1, 2019 - March 31, 2024

How to cite

APA:

Schlumberger, J., Wildermann, S., & Teich, J. (2021). CORSICA: A Framework for Conducting Real-World Side-Channel Analysis. In IEEE (Eds.), 11th IFIP International Conference on New Technologies, Mobility and Security (NTMS) (pp. 1-5). Paris, France, FR.

MLA:

Schlumberger, Jens, Stefan Wildermann, and Jürgen Teich. "CORSICA: A Framework for Conducting Real-World Side-Channel Analysis." Proceedings of the 11th IFIP International Conference on New Technologies, Mobility and Security (NTMS), Paris, France Ed. IEEE, 2021. 1-5.

BibTeX: Download