Systematic Classification of Side-Channel Attacks: A Case Study for Mobile Devices

Abstract

Abstract-Side-channel attacks on mobile devices have gained increasing attention since their introduction in 2007. While traditional side-channel attacks, such as power analysis attacks and electromagnetic analysis attacks, required physical presence of the attacker as well as expensive equipment, an (unprivileged) application is all it takes to exploit the leaking information on modern mobile devices. Given the vast amount of sensitive information that are stored on smartphones, the ramifications of side-channel attacks affect both the security and privacy of users and their devices.In this paper, we propose a new categorization system for sidechannel attacks, which is necessary as side-channel attacks have evolved significantly since their scientific investigations during the smart card era in the 1990s. Our proposed classification system allows to analyze side-channel attacks systematically, and facilitates the development of novel countermeasures. Besides this new categorization system, the extensive survey of existing attacks and attack strategies provides valuable insights into the evolving field of side-channel attacks, especially when focusing on mobile devices. We conclude by discussing open issues and challenges in this context and outline possible future research directions.

Nowhere to Hide: Cross-modal Identity Leakage between Biometrics and Devices

“…The second type is known as a combined side channels attack, which could improve the accuracy of existing attacks or cope with more sophisticated attack scenarios. Some research recently started to explore the attacks from combined side channels [20,36,37,55]. However, these work only focus on a single domain, which has limitations in employing the information from both sides.…”

Tracking the Human Mobility Using Mobile Device Sensors

“…The phase of side-channel attacks on mobile devices usually consists of three steps [11]. (1) A malicious application is spread through popular app markets.…”

Tunnel FET‐based ultralow‐power and hardware‐secure circuit design considering p‐i‐n forward leakage

“…Meanwhile, the globalization of IC design and manufacturing introduces hardware security threats such as hardware trojans, side-channel analysis, and IC reverse engineering (RE). [19][20][21] Hardware-oriented security offers new Compementary metal-oxide semiconductor (CMOS)-based security primitives like true random number generators (TRNGs), physically unclonable functions, and other circuit design methodologies to make systems robust against security attacks. [22][23][24] However, CMOS-based security primitives consume high power and area and require additional source/drain doping variations to create stealthy manipulations for obfuscation.…”