English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

Physical attacks form one of the most severe threats against secure computingplatforms. Their criticality arises from their corresponding threat model: By,e.g., passively measuring an integrated circuit's (IC's) environment during asecurity-related operation, internal secrets may be disclosed. Furthermore, byactively disturbing the physical runtime environment of an IC, an adversary cancause a specific, exploitable misbehavior. The set of physical attacks consistsof techniques that apply either globally or locally. When compared to globaltechniques, local techniques exhibit a much higher precision, hence having thepotential to be used in advanced attack scenarios. However, using physicaltechniques with additional spatial dependency expands the parameter searchspace exponentially. In this work, we present and compare two techniques,namely laser logic state imaging (LLSI) and lock-in thermography (LIT), thatcan be used to discover sub-circuitry of an entirely unknown IC based onoptical and thermal principles. We show that the time required to identifyspecific regions can be drastically reduced, thus lowering the complexity ofphysical attacks requiring positional information. Our case study on an IntelH610 Platform Controller Hub showcases that, depending on the targeted voltagerail, our technique reduces the search space by around 90 to 98 percent.

Modulation to the Rescue: Identifying Sub-Circuitry in the Transistor Morass for Targeted Analysis