Abstract:Fault injection (FI) is a powerful attack methodology allowing an adversary to entirely break the security of a target device. As finite-state machines (FSMs) are fundamental hardware building blocks responsible for controlling systems, inducing faults into these controllers enables an adversary to hijack the execution of the integrated circuit. A common defense strategy mitigating these attacks is to manually instantiate FSMs multiple times and detect faults using a majority voting logic. However, as each additional FSM instance only provides security against one additional induced fault, this approach scales poorly in a multi-fault attack scenario. In this paper, we present SCFI: a strong, probabilistic FSM protection mechanism ensuring that control-flow deviations from the intended control-flow are detected even in the presence of multiple faults. At its core, SCFI consists of a hardened next-state function absorbing the execution history as well as the FSM's control signals to derive the next state. When either the absorbed inputs, the state registers, or the function itself are affected by faults, SCFI triggers an error with no detection latency. We integrate SCFI into a synthesis tool capable of automatically hardening arbitrary unprotected FSMs without user interaction and open-source the tool. Our evaluation shows that SCFI provides strong protection guarantees with a better area-time product than FSMs protected using classical redundancy-based approaches. Finally, we formally verify the resilience of the protected state machines using a pre-silicon fault analysis tool.

FFI4SoC: a Fine-Grained Fault Injection Framework for Assessing Reliability Against Soft Error in SoC

Simics-based System Level Fault Injection Platform

Fault Injection Attack Emulation Framework for Early Evaluation of IC Designs

A Hierarchical Fault Injection System for RISC-V Processors Targeting Single Event Upsets in Flip-Flops

Software Simulation-Based Fault Injection Tool of Virtual Machine System

Improving the Accuracy of IR-Level Fault Injection

Hardware-Assisted Control-Flow Integrity Enhancement for IoT Devices

Analog Circuit Simulation Approach with Multi-Fault Injector

A survey on fault injection methods of digital integrated circuits

Study of Fault-Injection for FPGA Based Fault-Tolerant Computer

Study of an Automated Precise SEU Fault Injection Technique

A Micro Architectural Events Aware Real-Time Embedded System Fault Injector

Electromagnetic fault injection against a System-on-Chip, toward new micro-architectural fault models

A Flexible Soft Error Mitigation Framework Leveraging Dynamic Partial Reconfiguration Technology

Enhanced Compiler Technology for Software-based Hardware Fault Detection

Towards a Fault-Injection Benchmarking Suite

SCFI: State Machine Control-Flow Hardening Against Fault Attacks

MicroFI: Non-Intrusive and Prioritized Request-Level Fault Injection for Microservice Applications

An Accurate Fault Location Method Based on Configuration Bitstream Analysis

Towards Formal Fault Injection for Safety Assessment of Automated Systems

Testing Error Handling Code with Software Fault Injection and Error-Coverage-Guided Fuzzing