Abstract:The security of integrated circuits (ICs) can be broken by sophisticated physical attacks relying on failure analysis methods. Optical probing is one of the most prominent examples of such attacks, which can be accomplished in a matter of days, even with limited knowledge of the IC under attack. Unfortunately, few countermeasures are proposed in the literature, and none has been fabricated and tested in practice. These countermeasures usually require changing the standard cell libraries and, thus, are incompatible with digital and programmable platforms, such as field programmable gate arrays (FPGAs). In this work, we shift our attention from preventing the attack to detecting and responding to it. We introduce LaserEscape, the first fully digital and FPGA-compatible countermeasure to detect and mitigate optical probing attacks. LaserEscape incorporates digital delay-based sensors to reliably detect the physical alteration on the fabric caused by laser beam irradiations in real time. Furthermore, as a response to the attack, LaserEscape deploys real-time hiding approaches using randomized hardware reconfigurability. It realizes 1) moving target defense (MTD) to physically move the sensitive circuity under attack out of the probing field of focus to protect secret keys and 2) polymorphism to logically obfuscate the functionality of the targeted circuit to counter function extraction and reverse engineering attempts. We demonstrate the effectiveness and resiliency of our approach by performing optical probing attacks on protected and unprotected designs on a 28-nm FPGA. Our results show that optical probing attacks can be reliably detected and mitigated without interrupting the chip's operation.

Exploring Fault Injection Attack Resilience of Secure IC Chips : Invited Paper

An IC-level countermeasure against laser fault injection attack by information leakage sensing based on laser-induced opto-electric bulk current density

Electromagnetic fault injection against a System-on-Chip, toward new micro-architectural fault models

Physical Attack Protection Techniques for IC Chip Level Hardware Security

Sensitivity of Standard Library Cells to Optical Fault Injection Attacks in IHP 250 nm Technology

Fault Injection and Failure Analysis on Xilinx 16nm FinFET Ultrascale+ MPSoC

Laser Fault Injection Attacks against Radiation Tolerant TMR Registers

Evaluation of Parameter-based Attacks against Embedded Neural Networks with Laser Injection

Experimental evaluation of two software countermeasures against fault attacks

An Automated FPGA-Based Fault Injection Platform for Granularly-Pipelined Fault Tolerant CORDIC

Fault Injection Attacks Utilizing Waveform Pattern Matching against Neural Networks Processing on Microcontroller

Electromagnetic fault injection: towards a fault model on a 32-bit microcontroller

Optical Fault Injection Attacks against Radiation-Hard Registers

A Micro Architectural Events Aware Real-Time Embedded System Fault Injector

A survey on fault injection methods of digital integrated circuits

Fault Injection on Embedded Neural Networks: Impact of a Single Instruction Skip

An Overview of Laser Injection against Embedded Neural Network Models

A Kind of Low-cost Non-intrusive Autonomous Fault Emulation System

Fiddling the Twiddle Constants - Fault Injection Analysis of the Number Theoretic Transform.

Metal Fillers as Potential Low Cost Countermeasure against Optical Fault Injection Attacks

LaserEscape: Detecting and Mitigating Optical Probing Attacks