Side Channel Monitoring of Embedded Secure and Safety Critical Devices in IoT

物联网中嵌入式安全和安全关键设备的侧通道监控

• 批准号: RGPIN-2017-03915
• 负责人: Gebotys, Catherine
• 金额: $ 2.4万
• 依托单位: University of Waterloo
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2018
• 资助国家: 加拿大
• 起止时间: 2018-01-01 至 2019-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=651657
• 关键词: Side; Channel; Monitoring; Embedded; Secure

The adoption of embedded systems for handling sensitive and private data is becoming increasingly widespread. Currently, embedded devices can be found in chip cards, smart phones, automobile, pacemakers, and many home automation and industrial control systems. New threats to these embedded devices include malware, malicious firmware updates, and physical threats. In general, software defenses designed to detect some of these threats have not been widely used in the embedded field largely because of associated high overheads and unsuitability. There is a need to research monitoring approaches for embedded systems to identify their state and to enable early response to threats. The proposed research program aims to establish the foundations for near-field and far-field monitoring of embedded devices using their electromagnetic (EM) emanations, also referred to as EM side channel. A statistical methodology for extracting features from EM emanations will be employed. Unlike previous work, this proposal will research detailed placement of near-field multiple probes based on the system architecture, which has not previously been considered. Enhancing carriers using intentional EM interference for acquiring more reliable far-field EM emanations will also be researched for the first time. The proposed near-field research will pave the way for the development of a monitoring device within the package of the chip. Research on far-field monitoring, has the potential to lead to a generic monitoring chip integrated with programmable directional antenna that can receive enhanced EM emanations from different parts of multiple embedded system boards. The far-field monitoring will be generic and applicable to a wider range of embedded applications. In both the proposed near- and far-field monitoring devices, functions include signal processing to extract and transmit features from the received EM emanations for offline processing to confirm activity or detect threats. This research is crucial for mitigating threats to critical embedded devices, particularly relevant to those within safety-critical and secure domains. Graduate students will gain in-depth skills in hardware, side channel, security, firmware, and software, and will be highly sought after in industry and academia. Security is an important field, critical for Canada, especially in the future IoT where experts will require an in-depth understanding of security, hardware and software. Advances in this area will help Canada stay in the forefront of future technology. The proposed research program represents an important step towards providing advanced training and establishing foundations for increased embedded security which is critical for the more pervasive future IoT environment. **

采用嵌入式系统来处理敏感和私有数据正变得越来越普遍。目前，嵌入式设备可以在芯片卡、智能手机、汽车、起搏器以及许多家庭自动化和工业控制系统中找到。这些嵌入式设备面临的新威胁包括恶意软件、恶意固件更新和物理威胁。一般来说，为检测其中一些威胁而设计的软件防御在嵌入式领域尚未广泛使用，这主要是因为相关的高管理费用和不适合。需要研究嵌入式系统的监控方法以识别它们的状态，并使其能够及早响应威胁。拟议的研究计划旨在为使用嵌入式设备的电磁(EM)发射(也称为EM侧通道)对其进行近场和远场监控奠定基础。将采用从电磁发射中提取特征的统计方法。与以往的工作不同，该方案将研究基于系统架构的近场多探头的详细布局，这是以前没有考虑过的。利用故意电磁干扰增强载波以获得更可靠的远场电磁发射也将是第一次研究。拟议的近场研究将为开发芯片封装内的监控设备铺平道路。对远场监测的研究，有可能导致一种通用的监测芯片，该芯片集成了可编程的定向天线，可以从多个嵌入式系统板的不同部分接收增强的电磁辐射。远场监控将是通用的，适用于更广泛的嵌入式应用。在拟议的近场和远场监测设备中，功能包括信号处理，以从接收的电磁发射中提取和传输特征，用于离线处理，以确认活动或检测威胁。这项研究对于缓解对关键嵌入式设备的威胁至关重要，尤其是与安全关键和安全域中的设备相关的威胁。研究生将在硬件、侧通道、安全、固件和软件方面获得深入的技能，并将在工业界和学术界受到高度追捧。安全是一个重要领域，对加拿大至关重要，特别是在未来的物联网中，专家需要深入了解安全、硬件和软件。这一领域的进步将帮助加拿大保持在未来技术的前沿。拟议的研究计划代表着朝着提供高级培训和为增强嵌入式安全性奠定基础迈出的重要一步，而嵌入式安全性对于更普遍的未来物联网环境至关重要。**