Abstract:Physical unclonable functions (PUFs) have been adopted in many resource-constrained Internet of Things (IoT) applications to provide effective and lightweight solutions for device authentication. However, an attacker can collect challenge–response pairs (CRPs) of a strong PUF, to build a machine learning (ML) model and mimic its behavior, i.e., predicting the responses of unseen challenges with high accuracy. Although several PUFs have been proposed to resist such modeling attacks, they incur high hardware overhead. Developing a PUF primitive with low hardware cost and high resistance to ML attacks is thus a crucial task. In this article, we propose the first response–feedback-based lightweight anti-ML-attack PUF (FLAM-PUF). It is only composed of one arbiter PUF (APUF) and one Galois linear-feedback shift register (LFSR), with some basic logic gates, reducing more than 62% hardware cost compared with the state-of-the-art robust strong PUFs. Specifically, FLAM-PUF leverages a cost-effective feedback loop structure to dynamically control and update the LFSR configuration. FLAM-PUF has two main characteristics: 1) it feeds back a 1-bit response in every cycle to intentionally poison the data of the CRP set for training. To resist ML-based modeling attacks, the 1-bit response can randomly update one coefficient of the feedback polynomial to implant more complex correlations into the model built by attackers and 2) it takes advantage of an $n-$ bit response feedback-controlled reconfigurable Galois LFSR to enlarge the original challenge space of the APUF. Extensive experimental results show that the proposed FLAM-PUF achieves near-optimal uniformity, uniqueness, and reliability. Our scheme works well under standard attack models with public crucial initial information. In particular, the prediction accuracy of modeling attacks against FLAM-PUF is nearly 50% under the four widely used ML algorithms, i.e., support vector machines (SVMs), logistic regression (LR), covariance matrix adaptation evolution strategy (CMA-ES), and deep neural networks (DNNs), indicating excellent resistance against these ML attacks.

SCD-PUF: Shuffled Chaotic-dual-PUF with High Machine Learning Attack Resilience

A Novel Configurable RO-Obfuscated PUF Design with Machine Learning Immunity

DMOS-PUF: Dynamic Multi-key-selection Obfuscation for Strong PUFs against Machine Learning Attacks.

A Reconfigurable Arbiter MPUF With High Resistance Against Machine Learning Attack

A Dynamically Configurable LFSR-based PUF Design Against Machine Learning Attacks.

A Machine Learning Attack Resistant Dual-mode PUF

CT PUF: Configurable Tristate PUF Against Machine Learning Attacks

A Reconfigurable and Machine Learning Attack Resistant Strong PUF Based on Arbiter Mechanism and SOT-MRAM.

A Response-Feedback-Based Strong PUF with Improved Strict Avalanche Criterion and Reliability

SD-PUF: Spliced Digital Physical Unclonable Function

FLAM-PUF: A Response–Feedback-Based Lightweight Anti-Machine-Learning-Attack PUF

Strong Subthreshold Current Array PUF with 265 Challenge-Response Pairs Resilient to Machine Learning Attacks in 130nm CMOS

A Strong Subthreshold Current Array PUF Resilient to Machine Learning Attacks

Multiclass Classification-Based Side-Channel Hybrid Attacks on Strong PUFs

A New Security Boundary of Component Differentially Challenged XOR PUFs Against Machine Learning Modeling Attacks

A novel PUF against machine learning attack: Implementation on a 16 Mb RRAM chip

A Machine Learning Attack-Resilient Strong PUF Leveraging the Process Variation of MRAM

Designing a Photonic Physically Unclonable Function Having Resilience to Machine Learning Attacks

A Probability-Based Strong Physical Unclonable Function with Strong Machine Learning Immunity

Masked AES PUF: a New PUF Against Hybrid SCA/MLAs

Modeling Attack Resilient Reconfigurable Latent Obfuscation Technique for PUF based Lightweight Authentication