arrow
Return

Compromising device security via NVM controller vulnerability

delete2020-12-15
delete2
PRE
AI
S
Sergei Skorobogatov *
DOI:10.1109/PAINE49178.2020.9337736delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
This paper introduces a new vulnerability found in a low-cost secure authentication IC that stores its security settings in non-volatile memory (NVM). Such devices are widely used for prevention of counterfeiting in consumable products and accessories (printer cartridges, batteries etc.) and for aftermarket control. The particular device targeted here uses hardwired application logic and lacks a microprocessor, however, more sophisticated security devices used in medical and banking applications could similarly be vulnerable. The newly discovered self-induced fault attacks exploit implications of the use of error-correction codes inside modern embedded NVM blocks and their associated control logic, which can leave the application vulnerable to early termination of NVM write operation. This could potentially be used to change the security settings of a device in a way that bypasses the intended state machine controlling access and allow reverting the stored hardware security level back to the factory test/debug mode. The paper also outlines some measures that could substantially reduce the chances of a successful attack.
Keywords:
hardware security
counterfeit prevention
embedded EEPROM and Flash NVM
backdoors
fault attacks
reverse engineering
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

P
PROCEEDINGS OF THE ACM CONFERENCE ON SECURITY AND PRIVACY IN WIRELESS AND MOBILE NETWORKS
IF:
0
Papers:
1.8K
Citations:
0

Organization

U
University of Cambridge
Scholars:
7.7W
Papers: 7.1W
Citations: 13.7W
Cited Papers

Cited Papers

errShare
errSave
QTL × environment interactions in rice. I. Heading date and plant height
err2003-09-05
err0
PREAI
errZ. K. Li; S. B. Yu; H. R. Lafitte; N. Huang; B. Courtois; S. Hittalmani; C. H. M. Vijayakumar; G. F. Liu; G. C. Wang; H. E. Shashidhar; J. Y. Zhuang; K. L. Zheng; V. P. Singh; J. S. Sidhu; S. Srivantaneeyakul; G. S. Khush
errShare
errSave
A Molecular Basis for Natural Selection at the timeless Locus in Drosophila melanogaster
err2007-06-29
err0
PREAI
errFederica Sandrelli; Eran Tauber; Mirko Pegoraro; Gabriella Mazzotta; Paola Cisotto; Johannes Landskron; Ralf Stanewsky; Alberto Piccin; Ezio Rosato; Mauro Zordan; Rodolfo Costa; Charalambos P. Kyriacou
errShare
errSave
no more