Leveraging EM Side-Channel Information to Detect Rowhammer Attacks

作者: Zhenkai Zhang , Zihao Zhan , Daniel Balasubramanian , Bo Li , Peter Volgyesi

DOI: 10.1109/SP40000.2020.00060

关键词: Software bugCryptographyComputer scienceOverhead (computing)EncryptionReal-time computingSide channel attack

摘要: The rowhammer bug belongs to software-induced hardware faults, and has been exploited form a wide range of powerful attacks. Yet, how effectively detect such attacks remains challenging problem. In this paper, we propose novel approach named RADAR (Rowhammer Attack Detection via A Radio) that leverages certain electromagnetic (EM) signals particular, have found there are recognizable hammering-correlated sideband patterns in the spectrum DRAM clock signal. As inevitable physical side effects hammering DRAM, they can "expose" any potential including extremely elusive ones hidden inside encrypted isolated environments like Intel SGX enclaves. However, interest may become unapparent due common use spread-spectrum clocking (SSC) computer systems. We de-spreading method reassemble scattered by SSC. Using classification technique, achieve both effective robust detection-based defense against attacks, as evaluated on prototype under various scenarios. addition, our does not impose performance overhead protected system. There little prior work uses side-channel information perform defenses, best knowledge, is first investigation leveraging EM for purpose.

参考文章(59)
Johann Heyszl, Stefan Mangard, Benedikt Heinz, Frederic Stumpf, Georg Sigl, Localized Electromagnetic Analysis of Cryptographic Implementations Lecture Notes in Computer Science. pp. 231- 244 ,(2012) , 10.1007/978-3-642-27954-6_15
Manfred Pinkal, Markus Dürmuth, Caroline Sporleder, Sebastian Gerling, Michael Backes, Acoustic side-channel attacks on printers usenix security symposium. pp. 20- 20 ,(2010)
Karine Gandolfi, Christophe Mourtel, Francis Olivier, Electromagnetic Analysis: Concrete Results cryptographic hardware and embedded systems. ,vol. 2162, pp. 251- 261 ,(2001) , 10.1007/3-540-44709-1_21
Dakshi Agrawal, Bruce Archambeault, Josyula R. Rao, Pankaj Rohatgi, The EM Side-Channel(s) cryptographic hardware and embedded systems. pp. 29- 45 ,(2002) , 10.1007/3-540-36400-5_4
Markus G. Kuhn, Electromagnetic eavesdropping risks of flat-panel displays privacy enhancing technologies. pp. 88- 107 ,(2004) , 10.1007/11423409_7
Alexander Schlösser, Dmitry Nedospasov, Juliane Krämer, Susanna Orlic, Jean-Pierre Seifert, Simple photonic emission analysis of AES: photonic side channel analysis for the rest of us cryptographic hardware and embedded systems. pp. 41- 57 ,(2012) , 10.1007/978-3-642-33027-8_3
Jean-Jacques Quisquater, David Samyde, ElectroMagnetic Analysis (EMA): Measures and Counter-Measures for Smart Cards Lecture Notes in Computer Science. ,vol. 2140, pp. 200- 210 ,(2001) , 10.1007/3-540-45418-7_17
Takeshi Sugawara, Daisuke Suzuki, Minoru Saeki, Mitsuru Shiozaki, Takeshi Fujino, On Measurable Side-Channel Leaks Inside ASIC Design Primitives Cryptographic Hardware and Embedded Systems - CHES 2013. ,vol. 2013, pp. 159- 178 ,(2013) , 10.1007/978-3-642-40349-1_10
Georg T Becker, Markus Kasper, Amir Moradi, Christof Paar, None, Side-channel based watermarks for integrated circuits hardware oriented security and trust. pp. 30- 35 ,(2010) , 10.1109/HST.2010.5513117
Robert Callan, Alenka Zajić, Milos Prvulovic, FASE: finding amplitude-modulated side-channel emanations international symposium on computer architecture. ,vol. 43, pp. 592- 603 ,(2015) , 10.1145/2749469.2750394