FIA

Fault Injection Attacks (FIA)

This is a grad-level introduction to Fault Injection Attacks (FIA). The main target audience is grad students from CS and ECE, e.g., CS grads with some knowledge about security in general but looking to expand their security knowledge to hardware, and ECE grads with knowledge of digital circuits and VLSI but wondering what hardware security, especially fault injection, looks like. After taking this course, students should have a better understanding of the difference and connection between software security and hardware security, and major topics in fault injection, including both research and applied techniques. Undergrads are welcome to audit this course with permission from the instructor.

Prerequisite (ideal but not mandatory):

• General knowledge of computer security
• General knowledge of digital circuits
• General knowledge of computer architecture
• General knowledge of hardware security

Syllabus:

• Intro
  • SoK: A Beginner-Friendly Introduction to Fault Injection Attacks
• Rowhammer Attacks
  • Flipping Bits in Memory Without Accessing Them: An experimental Study of DRAM Disturbance Errors
  • Drammer: Deterministic Rowhammer Attacks on Mobile Platforms
  • …
  • From Lab to Fleet: Building and Developing a Practical Rowhammer Defense in Cloud SoCs
• Voltage/Clock Glitching
  • CLKScrew: Exposing the Perils of Security-Oblivious Energy Management
• Electromagnatic Fault Injections (EMFI)
• Laser Fault Injection (LFI)

Lab Assignments:

1. Rowhammer on DDR3
2. Voltage glitching using ChipWhispereNano
3. EMFI probe design