Masking the energy behavior of DES encryption [smart cards]

Saputra, H.; Narayanan, Vijaykrishnan; Kandemir, Mahmut; Irwin, M.J.; Brooks, Richard; Kim, S.; Zhang, W.

doi:10.1109/date.2003.1253591

Cited by 56 publications

(37 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This approach is capable of mimicking all the major mobile code paradigms, as shown in [3]. Furthermore, its polymorphic code selection system permits us to use the optimal algorithm on a given system without significant user interaction.…”

Section: Node Design and Implementationmentioning

confidence: 99%

See 1 more Smart Citation

Mobile Ubiquitous Security Environment (MUSE)

Phoha¹

2004

View full text Add to dashboard Cite

EXECUTIVE SUMMARYThis is the final report of the Mobile Ubiquitous Security Environment (MUSE) Critical Infrastructure Protection University Research Initiative (CIP/ URI) project. MUSE was proposed to research "understanding mobile code" in the context of Critical Infrastructure Protection (CIP). It made significant advances in this area. Mobile code differs from other software systems in that it uses networks to autonomously move code from one host to another.Many common CIP threats, such as Trojan horses and viruses, pre-date widespread use of the Internet and are not specific to mobile code. Issues such as insuring program correctness, enforcing security policies, avoiding buffer overflows, and detecting malicious code also exist for non-networked software. Our emphasis is on researching how code migration affects infrastructure protection.Viruses, worms, and Denial of Service (DoS) attacks are difficult to counteract in large part because they are highly distributed. Fortifying the defenses of individual processors, or even sub-nets, cannot sufficiently neutralize these threats. Our game theory analysis of DoS attacks contains examples of the limitations of firewalls for protecting distributed systems. Fortifying individual processors is in some ways similar to building a stronger Maginot line after World War II.MUSE studied both the threat posed by malicious mobile code, and the promise of mobile code to adapt when attacked and neutralize threats. Distributed adaptation can put attacked systems on an equal footing with their attackers. The project Statement of Work (SoW) consisted of four tasks: "* Develop a theoretical model "* Study the interface between mobile code and the host computer. "* Study system adaptation "* Create an adaptive network infrastructure. Significant results include:"* A theoretical model for mobile code was developed by integrating mobile agent and cellular automata concepts. Using a simulation tool (CANTOR), that we developed for this model, we found important behavioral differences among mobile code paradigms. "• CANTOR simulations were found to trend like other network simulators. The CANTOR models are simpler and contain fewer factors. They also execute more quickly than traditional approaches. "* A taxonomy of mobile code paradigms was created combining our theoretical model with an existing taxonomy of network attack vulnerabilities. "* Our existing mobile code daemons were integrated with peer-to-peer (P2P) indexing to create an initial adaptive infrastructure. Cryptographic key management has been integrated into this approach. "* We proved that cryptographic primitives can be used with a tamper-proof co-processor to verify bilateral trust between a host and a mobile code package. An application to multi-level security was given.

show abstract

Section: Node Design and Implementationmentioning

confidence: 99%

“…3 , can be found in [Barabasi 19991. Barabesi's use of positive feedback plausibly explains how SF systems emerge and why they are widespread.…”

Section: Analysis Of Random Network Designsmentioning

confidence: 99%

Mobile Ubiquitous Security Environment (MUSE)

Phoha¹

2004

View full text Add to dashboard Cite

show abstract

“…There have been several attacks that exploit weaknesses in caches [5,8,19,21,48,49,50,51,51,52] and branch prediction [6,7,9]. Some countermeasures against these threats include self-destructing keys [32,35,62,72] and new circuit styles that consume the same operational power irrespective of input values [27,38,58,64,65] and microarchitectural techniques [11,22,63,66,69].…”

Section: Related Workmentioning

confidence: 99%

Tamper Evident Microprocessors

Waksman

Sethumadhavan

2010

2010 IEEE Symposium on Security and Privacy

View full text Add to dashboard Cite

Abstract-Most security mechanisms proposed to date unquestioningly place trust in microprocessor hardware. This trust, however, is misplaced and dangerous because microprocessors are vulnerable to insider attacks that can catastrophically compromise security, integrity and privacy of computer systems. In this paper, we describe several methods to strengthen the fundamental assumption about trust in microprocessors. By employing practical, lightweight attack detectors within a microprocessor, we show that it is possible to protect against malicious logic embedded in microprocessor hardware.We propose and evaluate two area-efficient hardware methods -TRUSTNET and DATAWATCH -that detect attacks on microprocessor hardware by knowledgeable, malicious insiders. Our mechanisms leverage the fact that multiple components within a microprocessor (e.g., fetch, decode pipeline stage etc.) must necessarily coordinate and communicate to execute even simple instructions, and that any attack on a microprocessor must cause erroneous communications between microarchitectural subcomponents used to build a processor. A key aspect of our solution is that TRUSTNET and DATAWATCH are themselves highly resilient to corruption. We demonstrate that under realistic assumptions, our solutions can protect pipelines and on-chip cache hierarchies at negligible area cost and with no performance impact. Combining TRUSTNET and DATAWATCH with prior work on fault detection has the potential to provide complete coverage against a large class of microprocessor attacks. 1Index Terms-hardware security, backdoors, microprocessors, security based on causal structure and division of work.

show abstract

“…The first approach attempts to make the power consumption constant regardless of what intermediate result being produced. A straightforward method is to use the dual rail logic [7,10,12,14], that represents a data bit by a pair of complementary wires and takes the same number of transitions regardless of what data value it transfers.…”

Section: Introductionmentioning

confidence: 99%