Abstract:<p>In the field of image recognition, machine learning technologies, especially deep learning, have been rapidly advancing alongside the advances of hardware such as GPUs. In image recognition, in general, large numbers of labeled images to be identified are input to a neural network, and repeatedly learning the images enables the neural network to identify objects with high accuracy. A new profiling side-channel attack method, the deep learning side-channel attack (DL-SCA), utilizes the neural network's high identifying ability to unveil a cryptographic module's secret key from side-channel information. In DL-SCAs, the neural network is trained with power waveforms captured from a target cryptographic module, and the trained network extracts the leaky part that depends on the secret. However, at this stage, the main target of investigation has been software implementation, and studies regarding hardware implementation, such as ASIC, are somewhat lacking. In this paper, we first depict deep learning techniques, profiling side-channel attacks, and leak models to clarify the relation between secret and side channels. Next, we investigate the use of DL-SCA against hardware implementations of AES and discuss the problem derived from the Hamming distance model and ShiftRow operation of AES. To solve the problem, we propose a new network training method called "mixed model dataset based on round-round XORed value." We prove that our proposal solves the problem and gives the attack capability to neural networks. We also compare the attack performance and characteristics of DL-SCA to conventional analysis methods such as correlation power analysis and conventional template attack. In our experiment, a dedicated ASIC chip for side-channel analysis is utilized and the chip is also equipped with a side-channel countermeasure AES. We show how DL-SCA can recover secret keys against the side-channel countermeasure circuit. Our results demonstrate that DL-SCA can be a more powerful option against side-channel countermeasure implementations than conventional SCAs.</p>

A Practical Side-Channel Attack of a LoRaWAN Module Using Deep Learning

Adversarial Attacks on LoRa Device Identification and Rogue Signal Detection with Deep Learning

LoPhy: A Resilient and Fast Covert Channel over LoRa PHY

Research on Side-Channel Analysis Based on Deep Learning with Different Sample Data

Selective Jamming of LoRaWAN using Commodity Hardware

Security Issues of Low Power Wide Area Networks in the Context of LoRa Networks

Adversarial Attack Based Countermeasures against Deep Learning Side-Channel Attacks

Deep learning side-channel attack against hardware implementations of AES

Investigating Efficient Deep Learning Architectures For Side-Channel Attacks on AES

Practical aspects on non-profiled deep-learning side-channel attacks against AES software implementation with two types of masking countermeasures including RSM

Deep Learning Side-Channel Collision Attack

Impersonating LoRaWAN gateways using Semtech Packet Forwarder

IoT Network Security from the Perspective of Adversarial Deep Learning

Deep-Learning-Based Radio-Frequency Side-Channel Attack on Quantum Key Distribution

Amplitude-modulated EM side-channel attack on provably secure masked AES

LoRA-as-an-Attack! Piercing LLM Safety Under The Share-and-Play Scenario

A Survey of Electromagnetic Side-Channel Attacks and Discussion on their Case-Progressing Potential for Digital Forensics

Open DNN Box by Power Side-Channel Attack

Power side-channel leakage localization through adversarial training of deep neural networks

Authenticated Preambles for Denial of Service Mitigation in LPWANs

SoC It to EM: ElectroMagnetic Side-Channel Attacks on a Complex System-on-Chip