Abstract:Embedded system technologies are increasingly being incorporated into manufacturing, smart grid, industrial control systems, and transportation systems. However, the vast majority of today's embedded platforms lack the support of built-in security features which makes such systems highly vulnerable to a wide range of cyber-attacks. Specifically, they are vulnerable to malware injection code that targets the power distribution system of an ARM Cortex-M-based microcontroller chipset (ARM, Cambridge, UK). Through hardware exploitation of the clock-gating distribution system, an attacker is capable of disabling/activating various subsystems on the chip, compromising the reliability of the system during normal operation. This paper proposes the development of an Intrusion Detection System (IDS) capable of detecting clock-gating malware deployed on ARM Cortex-M-based embedded systems. To enhance the robustness and effectiveness of our approach, we fully implemented, tested, and compared six IDSs, each employing different methodologies. These include IDSs based on K-Nearest Classifier, Random Forest, Logistic Regression, Decision Tree, Naive Bayes, and Stochastic Gradient Descent. Each of these IDSs was designed to identify and categorize various variants of clock-gating malware deployed on the system. We have analyzed the performance of these IDSs in terms of detection accuracy against various types of clock-gating malware injection code. Power consumption data collected from the chipset during normal operation and malware code injection attacks were used for models' training and validation. Our simulation results showed that the proposed IDSs, particularly those based on K-Nearest Classifier and Logistic Regression, were capable of achieving high detection rates, with some reaching a detection rate of 0.99. These results underscore the effectiveness of our IDSs in protecting ARM Cortex-M-based embedded systems against clock-gating malware.

MaliGNNoma: GNN-Based Malicious Circuit Classifier for Secure Cloud FPGAs

FP-GNN: A Graph Neural Network for Hardware Trojan Detection in Gate-Level Netlist

DeepStrike: Remotely-Guided Fault Injection Attacks on DNN Accelerator in Cloud-FPGA

Meta-Scanner: Detecting Fault Attacks via Scanning FPGA Designs Metadata

Power Side-Channel Attacks on BNN Accelerators in Remote FPGAs

Graph Neural Networks for Hardware Vulnerability Analysis -- Can you Trust your GNN?

PoisonedGNN: Backdoor Attack on Graph Neural Networks-based Hardware Security Systems

Imperceptible Misclassification Attack on Deep Learning Accelerator by Glitch Injection

HWGN2: Side-channel Protected Neural Networks through Secure and Private Function Evaluation

AttackGNN: Red-Teaming GNNs in Hardware Security Using Reinforcement Learning

SoK: On the Security Challenges and Risks of Multi-Tenant FPGAs in the Cloud

A Deep Investigation on Stealthy DVFS Fault Injection Attacks at DNN Hardware Accelerators

One for All and All for One: GNN-based Control-Flow Attestation for Embedded Devices

Hardware Trojan Attacks on the Reconfigurable Interconnections of Field-Programmable Gate Array-Based Convolutional Neural Network Accelerators and a Physically Unclonable Function-Based Countermeasure Detection Technique

Dynamic FPGA Detection and Protection of Hardware Trojan: A Comparative Analysis

Contrastive Graph Convolutional Networks for Hardware Trojan Detection in Third Party IP Cores

Detection of Malicious Threats Exploiting Clock-Gating Hardware Using Machine Learning

DSE-Based Hardware Trojan Attack for Neural Network Accelerators on FPGAs.

Deep-Dup: An Adversarial Weight Duplication Attack Framework to Crush Deep Neural Network in Multi-Tenant FPGA

Securing Cloud FPGAs Against Power Side-Channel Attacks: A Case Study on Iterative AES

GNNReveal: A Novel Graph Neural Network-based Attack Method for IC Logic Gate De-Camouflaging