Bonjour,
Voici le programme de la prochaine session du Seminaire SemSecuElec qui aura lieu le 27/06/2025.
Le programme de cette session est le suivant :
-
10:00 - 11:00 - Gaudin Nicolas (Trasna)
Fine-grained dynamic partitioning against cache-based side channel attacks
The growth of embedded systems takes advantage of architectural advances from modern processors to increase performance while maintaining a low power consumption. Among these advances is the introduction of cache memory into embedded systems. These memories speed up the memory accesses by temporarily storing data close to the execution core. Furthermore, data from different applications share the same hardware resources, so the execution of one application affects the others. These interactions between applications give rise to cache-based side-channel attacks. This threat takes advantage of memory accesses to extract secret data executed by cryptographic applications. These attacks are well known on modern processors and have led to countermeasures designed for modern processors. These solutions are either not feasible on embedded systems due to their requirements or result in high additional costs. In this context, we present a countermeasure based on a fine-grained partitioning, so that an application can dynamically lock its data into the cache. Once a data is locked, no application can infer information about the memory accesses made to it. It provides strong security guarantees for critical program sections while introducing a low performance overhead (<4%) through a new hardware/software contract.
-
11:00 - 12:00 - Maillard Julien (CEA)
Side-Channel Based Disassembly on Complex Processors: From Microachitectural Characterization to Probabilistic Models
Side-Channel Based Disassembly (SCBD) is a category of Side-Channel Analysis (SCA) that aims at recovering information on the code executed by a processor through the observation of physical side-channels such as power consumption or electromagnetic radiations. While traditional SCA often targets cryptographic keys, SCBD focuses on retrieving assembly code that can hardly be extracted via other means. A typical example is bootloader code, which is the first program executed by a processor at a device startup. Finding vulnerabilities in bootloader code could allow an attacker to compromise the entire device. SCBD has been shown feasible on microcontrollers with simple microachitectural complexity and small Instruction Sets Architecture (ISA). However, as System-on-Chips (SoCs) become ubiquitous in various systems such as smartphones, automotive or avionics, the threat posed by SCBD on these devices needs to be evaluated. In this presentation, we investigate the feasibility of SCBD on SoCs. We first study the impact of the microachitectural complexity of SoC's processors on existing SCBD techniques. This brings us to the observation that the latter struggle to provide accurate predictions on small-scale phenomena, leaving a high amount of uncertainty from an attacker's perspective. However, coarse-grained events, such as accesses to the main memory, can be accurately distinguished. In the second part of this presentation, we deal with the uncertainty inherent to SCBD on SoCs by developing a generic and flexible Soft-Analytical Side-Channel Attack (SASCA) framework. This tool leverages factor graphs and the Belief Propagation (BP) algorithm to efficiently handle probabilistic information. This framework allows us to introduce the concept of Soft-Analytical Side-Channel Based Disassembly (SASCBD), which leverages the aforementioned framework to efficiently aggregate imperfect predictions from SCBD. This new approach efficiently exploits the structure of ISA and supports the addition of rich knowledge, such as behaviors at the scale of full programs.
-
Le séminaire est ouvert à tous en présentiel et en distanciel.
Pour assister au séminaire en présentiel, l'inscription est obligatoire au moins 48h à l'avance pour tous les participants en présentiel auprès de Nadia Derouault nadia [*] derouault
inria [*] fr (nadia[dot]derouault[at]inria[dot]fr) . Les participants externes devront se présenter à l'accueil avec une pièce d'identité.