Abstract:Physical unclonable functions (PUFs) have been adopted in many resource-constrained Internet of Things (IoT) applications to provide effective and lightweight solutions for device authentication. However, an attacker can collect challenge–response pairs (CRPs) of a strong PUF, to build a machine learning (ML) model and mimic its behavior, i.e., predicting the responses of unseen challenges with high accuracy. Although several PUFs have been proposed to resist such modeling attacks, they incur high hardware overhead. Developing a PUF primitive with low hardware cost and high resistance to ML attacks is thus a crucial task. In this article, we propose the first response–feedback-based lightweight anti-ML-attack PUF (FLAM-PUF). It is only composed of one arbiter PUF (APUF) and one Galois linear-feedback shift register (LFSR), with some basic logic gates, reducing more than 62% hardware cost compared with the state-of-the-art robust strong PUFs. Specifically, FLAM-PUF leverages a cost-effective feedback loop structure to dynamically control and update the LFSR configuration. FLAM-PUF has two main characteristics: 1) it feeds back a 1-bit response in every cycle to intentionally poison the data of the CRP set for training. To resist ML-based modeling attacks, the 1-bit response can randomly update one coefficient of the feedback polynomial to implant more complex correlations into the model built by attackers and 2) it takes advantage of an $n-$ bit response feedback-controlled reconfigurable Galois LFSR to enlarge the original challenge space of the APUF. Extensive experimental results show that the proposed FLAM-PUF achieves near-optimal uniformity, uniqueness, and reliability. Our scheme works well under standard attack models with public crucial initial information. In particular, the prediction accuracy of modeling attacks against FLAM-PUF is nearly 50% under the four widely used ML algorithms, i.e., support vector machines (SVMs), logistic regression (LR), covariance matrix adaptation evolution strategy (CMA-ES), and deep neural networks (DNNs), indicating excellent resistance against these ML attacks.

A Probability-Based Strong Physical Unclonable Function with Strong Machine Learning Immunity

A Strong Physical Unclonable Function with Machine Learning Immunity for Internet of Things Application

A Novel Configurable RO-Obfuscated PUF Design with Machine Learning Immunity

Designing a Photonic Physically Unclonable Function Having Resilience to Machine Learning Attacks

CT PUF: Configurable Tristate PUF Against Machine Learning Attacks

A Dynamically Configurable LFSR-based PUF Design Against Machine Learning Attacks.

A Strong Subthreshold Current Array PUF Resilient to Machine Learning Attacks

A Response-Feedback-Based Strong PUF with Improved Strict Avalanche Criterion and Reliability

A Photonic Physically Unclonable Function's Resilience to Multiple-Valued Machine Learning Attacks

Strong Subthreshold Current Array PUF with 265 Challenge-Response Pairs Resilient to Machine Learning Attacks in 130nm CMOS

A Strong Physical Unclonable Function With Virgin State Embedded Phase Change Memory

Coin Flipping PUF: A Novel PUF with Improved Resistance Against Machine Learning Attacks

DMOS-PUF: Dynamic Multi-key-selection Obfuscation for Strong PUFs against Machine Learning Attacks.

SCD-PUF: Shuffled Chaotic-dual-PUF with High Machine Learning Attack Resilience

A Reconfigurable and Machine Learning Attack Resistant Strong PUF Based on Arbiter Mechanism and SOT-MRAM.

LRR-DPUF

A Modeling Attack Resilient Physical Unclonable Function Based on STT-MRAM

Ferroelectric FET-based strong physical unclonable function: a low-power, high-reliable and reconfigurable solution for Internet-of-Things security

SD-PUF: Spliced Digital Physical Unclonable Function

A Reconfigurable Arbiter MPUF With High Resistance Against Machine Learning Attack

FLAM-PUF: A Response–Feedback-Based Lightweight Anti-Machine-Learning-Attack PUF