Abstract:Embedded systems are prone to leak information via side-channels associated with their physical internal activity, such as power consumption, timing, and faults. Leaked information can be analyzed to extract sensitive data and devices should be assessed for such vulnerabilities. Side-channel power-supply leakage from embedded devices can also provide information regarding instruction-level activity for control code executed on these devices. Methods proposed to disassemble instruction-level activity via side-channel leakage have not addressed issues related to pipelined multi-clock-cycle architectures, nor have proven robustness or reliability. The problem of detecting malicious code modifications while not obstructing the sequence of instructions being executed needs to be addressed. In this article, instruction sequences being executed on a general-purpose pipelined computing platform are identified and instructions that make up these sequences are classified based on hardware utilization. Individual instruction classification results using a fine-grained classifier is also presented. A dynamic programming algorithm was applied to detect the boundaries of instructions in a sequence with a 100 percent accuracy. A unique aspect of this technique is the use of multiple power supply pin measurements to increase precision and accuracy. To demonstrate the robustness of this technique, power leakage data from ten target FPGAs programmed with a prototype of the pipelined architecture was analyzed and classification accuracies averaging 99 percent were achieved with instructions labeled based on hardware utilization. Individual instruction classification accuracies above 90 percent were achieved using a fine-grained classifier. Classification accuracies were also verified when a target FPGA was subjected to different controlled temperatures. The classification accuracies on discrete (ASIC) pipelined-architecture microcontrollers was 97 percent.

SDCInfer: Inference of Silent Data Corruption Causing Instructions

Silent Data Corruptions at Scale

Understanding Silent Data Corruptions in a Large Production CPU Population

Understanding Silent Data Corruption in Processors for Mitigating Its Effects

Improving the Accuracy of IR-Level Fault Injection

Software countermeasures against the multiple instructions skip fault model

Demystifying and Mitigating Cross-Layer Deficiencies of Soft Error Protection in Instruction Duplication

Characterizing the Effects of Intermittent Faults on a Processor for Dependability Enhancement Strategy

Differential Testing of X86 Instruction Decoders with Instruction Operand Inferring Algorithm

Micro-Architectural features as soft-error induced fault executions markers in embedded safety-critical systems: a preliminary study

InsectACIDE: Debugger-Based Holistic Asynchronous CFI for Embedded System

Instruction Sequence Identification and Disassembly Using Power Supply Side-Channel Analysis

A High-Coverage and Efficient Instruction-Level Testing Approach for X86 Processors

A Micro Architectural Events Aware Real-Time Embedded System Fault Injector

Fault Injection on Embedded Neural Networks: Impact of a Single Instruction Skip

Soft Error Effects on Arm Microprocessors: Early Estimations versus Chip Measurements

Detection of Silent Data Corruptions in Smoothed Particle Hydrodynamics Simulations

Characterizing System-Level Vulnerability for Instruction Caches Against Soft Errors

MDCI: Hardware Fault Localization Based on Multi-Granularity Dynamic Control Flow Invariants

FastFlip: Compositional Error Injection Analysis

On a Consistency Testing Model and Strategy for Revealing RISC Processor's Dark Instructions and Vulnerabilities