Security Evaluation of IoT Devices against Medium and Long-Range Side-Channel Attacks

2023 Fiscal Year Final Research Report

• Project/Area Number: 20K19798
• Research Category: Grant-in-Aid for Early-Career Scientists
• Allocation Type: Multi-year Fund
• Review Section: Basic Section 60070:Information security-related
• Research Institution: The University of Electro-Communications
• Principal Investigator: Li Yang 電気通信大学, 大学院情報理工学研究科, 准教授 (20821812)
• Project Period (FY): 2020-04-01 – 2024-03-31
• Keywords: side-channel attack / screaming channel / AES

Outline of Final Research Achievements

In this study, we established an environment to investigate the leakage characteristics of electromagnetic side-channel attacks known as screaming channels, which can recover secret key of IoT device from a long distance . Using profiling techniques for analysis, we gained new general insights into the leakage characteristics. Furthermore, we developed a new attack method that does not require profiling unlike previous works. Compared to traditional attack methods, this new approach has been proven to reduce the amount of measurements needed for key recovery. As part of the attack methodology, we proposed a combined attack by integrating different leakage channels. Finally, in this study, we partially modified the assembly code of the cryptographic implementation to investigate how these changes affect leakage characteristics for screaming channels.

Free Research Field

情報安全

Academic Significance and Societal Importance of the Research Achievements

本研究は，物理的アクセスの制約を克服したscreaming channels攻撃の漏洩特性を研究した．遠距離からでもIoTデバイスのセキュリティを脅かすscreaming channels攻撃の実際の安全性脅威をより正確に評価し，防御策の開発を促進する．また，安全なデバイス設計のための基準を提供し，社会全体のデジタルセキュリティ意識の向上に寄与する．学術的には，新しい漏洩モデルと攻撃手法の提案が暗号解析分野に新たな視点をもたらす．