Abstract:Cloud computing environments increasingly provision field-programmable gate arrays (FPGAs) for their programmability and hardware-level parallelism. While FPGAs are typically used by one tenant at a time, multitenant schemes supporting spatial sharing of cloud FPGA resources have been proposed in the literature. However, the spatial multitenancy of FPGAs opens up new attack surfaces. Investigating potential security threats to multitenant FPGAs is thus essential for better understanding and eventually mitigating the security risks. This work makes a notable step forward by systematically analyzing the combined threat of FPGA power wasters and satisfiability don’t-care hardware Trojans in shared cloud FPGAs. We demonstrate a successful remote undervolting attack that activates a hardware Trojan concealed within a victim FPGA design and exploits the payload. The attack is carried out entirely remotely, assuming two spatially colocated FPGA users isolated from one another. The victim user’s circuit is infected with a Trojan, triggered by a pair of don’t-care signals that never reach the combined trigger condition during regular operation. The adversary, targeting the exploitation of the Trojan, deploys power waster circuits to lower the supply voltage of the FPGA. The assumption is that, under the effect of the lowered voltage, don’t-care signals may reach the particular state that triggers the Trojan. We name this exploit X-Attack and demonstrate its feasibility on an embedded FPGA and real-world cloud FPGA instances. Additionally, we study the effects of various attack tuning parameters on the exploit’s success. Finally, we discuss potential countermeasures against this security threat and present a lightweight self-calibrating countermeasure. To the best of our knowledge, this is the first work on undervolting-based fault-injection attacks in multitenant FPGAs to demonstrate the attack on commercially available cloud FPGA instances.

DVFS as a Security Failure of TrustZone-enabled Heterogeneous SoC

DVFSspy: Using Dynamic Voltage and Frequency Scaling As a Covert Channel for Multiple Procedures

VoltJockey: ABUSING THE PROCESSOR VOLTAGE TO BREAK ARM TrustZone

VoltJockey: Breaching TrustZone by Software-Controlled Voltage Manipulation over Multi-core Frequencies

Noise-Aware DVFS for Efficient Transitions on Battery-Powered IoT Devices

A Deep Investigation on Stealthy DVFS Fault Injection Attacks at DNN Hardware Accelerators

VoltJockey: Breaking SGX by Software-Controlled Voltage-Induced Hardware Faults

A DVFS Design and Simulation Framework Using Machine Learning Models

Oops..! I Glitched It Again! How to Multi-Glitch the Glitching-Protections on ARM TrustZone-M

Power Reduction Through Measurement and Modeling of Users and CPUs: Summary

DF-SCA: Dynamic Frequency Side Channel Attacks are Practical

MVAM: Multi-variant Attacks on Memory for IoT Trust Computing

Balancing Security and Efficiency: System-Informed Mitigation of Power-Based Covert Channels

DATE: Defense Against TEmperature Side-Channel Attacks in DVFS Enabled MPSoCs

The Forgotten Threat of Voltage Glitching: A Case Study on Nvidia Tegra X2 SoCs

VoltJockey: A New Dynamic Voltage Scaling based Fault Injection Attack on Intel SGX

X-Attack 2.0: The Risk of Power Wasters and Satisfiability Don’t-Care Hardware Trojans to Shared Cloud FPGAs

One Glitch to Rule Them All: Fault Injection Attacks Against AMD's Secure Encrypted Virtualization

Injecting Software Vulnerabilities with Voltage Glitching

SoC It to EM: ElectroMagnetic Side-Channel Attacks on a Complex System-on-Chip

On Runtime Software Security of TrustZone-M based IoT Devices