Gray-Box Software Integrity Checking via Side-Channels

Liu, Hong; Vasserman, Eugene Y.

doi:10.1007/978-3-319-78813-5_1

Cited by 2 publications

(1 citation statement)

References 45 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Sections 4.3 and 5) 2. Our preliminary experiments on power consumption and the idea of side-channel programming were first presented in[19], and[20] briefly mentioned our experiments on electromagnetic radiation.…”

mentioning

confidence: 99%

Side-channel Programming for Software Integrity Checking

Liu¹,

Vasserman²

2021

ICST Transactions on Security and Safety

Self Cite

View full text Add to dashboard Cite

Verifying software integrity for embedded systems, especially legacy and deployed systems, is very challenging. Ordinary integrity protection and verification methods rely on sophisticated processors or security hardware, and cannot be applied to many embedded systems due to cost, energy consumption, and inability of update. Furthermore, embedded systems are often small computers on a single chip, making it more difficult to verify integrity without invasive access to the hardware.In this work, we propose "side-channel programming", a novel method to assist with non-intrusive software integrity checking by transforming code in a functionality-preserving manner while making it possible to verify the internal state of a running device via side-channels. To do so, we first need to accurately profile the side-channel emanations of an embedded device. Using new black-box side-channel profiling techniques, we show that it is possible to build accurate side-channel models of a PIC microcontroller with no prior knowledge of the detailed microcontroller architecture. It even allows us to uncover undocumented behavior of the microcontroller. Then we show how to "side-channel program" the target device in a way that we can verify its internal state from simply measuring the passive side-channel emanations.

show abstract

mentioning

confidence: 99%