Abstract:This paper proposes and evaluates the applications of different DL techniques including the Convolutional Neural Network (CNN) and the multilayer perceptron (MLP) models for non‐profiled attacks on the AES‐128 encryption implementation. Along with the designed models, a dataset reconstruction and labelling technique for the proposed model has also been performed for solving the high dimension data and imbalanced dataset problem. As a result, the DL‐based SCA with our reconstructed dataset for different targets of ASCAD, RISC‐V microcontroller, and ChipWhisperer boards has achieved a higher performance of non‐profiled attacks. The experimental results have clarified that the exponential linear unit (ELU) function is better than the rectified linear unit (ReLU) in taking the correct key with the presence of the Gaussian noise. In modern embedded systems, security issues including side‐channel attacks (SCAs) are becoming of paramount importance since the embedded devices are ubiquitous in many categories of consumer electronics. Recently, deep learning (DL) has been introduced as a new promising approach for profiled and non‐profiled SCAs. This paper proposes and evaluates the applications of different DL techniques including the Convolutional Neural Network and the multilayer perceptron models for non‐profiled attacks on the AES‐128 encryption implementation. Especially, the proposed network is fine‐tuned with different number of hidden layers, labelling techniques and activation functions. Along with the designed models, a dataset reconstruction and labelling technique for the proposed model has also been performed for solving the high dimension data and imbalanced dataset problem. As a result, the DL based SCA with our reconstructed dataset for different targets of ASCAD, RISC‐V microcontroller, and ChipWhisperer boards has achieved a higher performance of non‐profiled attacks. Specifically, necessary investigations to evaluate the efficiency of the proposed techniques against different SCA countermeasures, such as masking and hiding, have been performed. In addition, the effect of the activation function on the proposed DL models was investigated. The experimental results have clarified that the exponential linear unit function is better than the rectified linear unit in fighting against noise generation‐based hiding countermeasure.

Dual-Path Hybrid Residual Network for Profiled Side-Channel Analysis

Industrial Scale Privacy Preserving Deep Neural Network

Design of Convolutional Neural Networks Architecture for Non-Profiled Side-Channel Attack Detection

Research on Side-Channel Analysis Based on Deep Learning with Different Sample Data

On the performance of non‐profiled side channel attacks based on deep learning techniques

RE-Specter: Examining the Architectural Features of Configurable CNN with Power Side-Channel

Adversarial Attack Based Countermeasures against Deep Learning Side-Channel Attacks

A Review and Comparison of AI Enhanced Side Channel Analysis

Back to the Basics: Seamless Integration of Side-Channel Pre-Processing in Deep Neural Networks

InfoNEAT: Information Theory-based NeuroEvolution of Augmenting Topologies for Side-channel Analysis

Dual-Rail Precharge Logic-Based Side-Channel Countermeasure for DNN Systolic Array

Deep learning side-channel attack against hardware implementations of AES

Deep Learning Side-Channel Collision Attack

Investigating Efficient Deep Learning Architectures For Side-Channel Attacks on AES

Practical aspects on non-profiled deep-learning side-channel attacks against AES software implementation with two types of masking countermeasures including RSM

DeepTheft: Stealing DNN Model Architectures through Power Side Channel

A Desynchronization-Based Countermeasure Against Side-Channel Analysis of Neural Networks

SCNet: A Neural Network for Automated Side-Channel Attack

A Hard-Label Cryptanalytic Extraction of Non-Fully Connected Deep Neural Networks using Side-Channel Attacks

Stealing Neural Network Structure Through Remote FPGA Side-Channel Analysis

Precise Extraction of Deep Learning Models via Side-Channel Attacks on Edge/Endpoint Devices