Side Channel Monitoring of Embedded Secure and Safety Critical Devices in IoT

物联网中嵌入式安全和安全关键设备的侧通道监控

• 批准号: RGPIN-2017-03915
• 负责人: Gebotys, Catherine
• 金额: $ 2.4万
• 依托单位: University of Waterloo
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2022
• 资助国家: 加拿大
• 起止时间: 2022-01-01 至 2023-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=751588
• 关键词: Side; Channel; Monitoring; Embedded; Secure

The adoption of embedded systems for handling sensitive and private data is becoming increasingly widespread. Currently, embedded devices can be found in chip cards, smart phones, automobile, pacemakers, and many home automation and industrial control systems. New threats to these embedded devices include malware, malicious firmware updates, and physical threats. In general, software defenses designed to detect some of these threats have not been widely used in the embedded field largely because of associated high overheads and unsuitability. There is a need to research monitoring approaches for embedded systems to identify their state and to enable early response to threats. The proposed research program aims to establish the foundations for near-field and far-field monitoring of embedded devices using their electromagnetic (EM) emanations, also referred to as EM side channel. A statistical methodology for extracting features from EM emanations will be employed. Unlike previous work, this proposal will research detailed placement of near-field multiple probes based on the system architecture, which has not previously been considered. Enhancing carriers using intentional EM interference for acquiring more reliable far-field EM emanations will also be researched for the first time. The proposed near-field research will pave the way for the development of a monitoring device within the package of the chip. Research on far-field monitoring, has the potential to lead to a generic monitoring chip integrated with programmable directional antenna that can receive enhanced EM emanations from different parts of multiple embedded system boards. The far-field monitoring will be generic and applicable to a wider range of embedded applications. In both the proposed near- and far-field monitoring devices, functions include signal processing to extract and transmit features from the received EM emanations for offline processing to confirm activity or detect threats. This research is crucial for mitigating threats to critical embedded devices, particularly relevant to those within safety-critical and secure domains. Graduate students will gain in-depth skills in hardware, side channel, security, firmware, and software, and will be highly sought after in industry and academia. Security is an important field, critical for Canada, especially in the future IoT where experts will require an in-depth understanding of security, hardware and software. Advances in this area will help Canada stay in the forefront of future technology. The proposed research program represents an important step towards providing advanced training and establishing foundations for increased embedded security which is critical for the more pervasive future IoT environment.

采用嵌入式系统来处理敏感和私人数据正变得越来越普遍。目前，嵌入式设备可以在芯片卡、智能手机、汽车、心脏起搏器以及许多家庭自动化和工业控制系统中找到。这些嵌入式设备面临的新威胁包括恶意软件、恶意固件更新和物理威胁。一般来说，设计用于检测这些威胁的软件防御在嵌入式领域没有得到广泛使用，主要是因为相关的高开销和不适用性。 有必要研究嵌入式系统的监测方法，以确定其状态，并使早期响应的威胁。拟议的研究计划旨在建立近场和远场监测嵌入式设备使用其电磁（EM）发射，也被称为EM侧通道的基础。将采用统计方法从EM发射中提取特征。与以前的工作不同，该建议将研究基于系统架构的近场多个探头的详细放置，这是以前没有考虑过的。还将首次研究使用有意的电磁干扰来增强载波，以获得更可靠的远场电磁辐射。拟议的近场研究将为开发芯片封装内的监测设备铺平道路。远场监测的研究，有可能导致一个通用的监测芯片集成可编程定向天线，可以接收增强的EM辐射从不同部分的多个嵌入式系统板。远场监测将是通用的，适用于更广泛的嵌入式应用。在所提出的近场和远场监测设备中，功能包括信号处理，以从所接收的EM发射中提取和发送特征，用于离线处理，以确认活动或检测威胁。这项研究对于减轻对关键嵌入式设备的威胁至关重要，特别是与安全关键和安全领域相关的设备。研究生将获得硬件，侧通道，安全，固件和软件方面的深入技能，并将在工业界和学术界备受追捧。安全是一个重要的领域，对加拿大至关重要，特别是在未来的物联网中，专家将需要深入了解安全，硬件和软件。这一领域的进步将有助于加拿大保持在未来技术的前沿。拟议的研究计划代表了为增强嵌入式安全性提供高级培训和奠定基础的重要一步，这对未来更普遍的物联网环境至关重要。