A hybrid solution for constrained devices to detect microarchitectural attacks - Archive ouverte HAL
Communication Dans Un Congrès Année : 2023

A hybrid solution for constrained devices to detect microarchitectural attacks

Résumé

We are seeing an increase in cybersecurity attacks on resource-constrained systems such as the Internet of Things (IoT) and Industrial IoT (I-IoT) devices. Recently, a new category of attacks has emerged called microarchitectural attacks. It targets hardware units of the system such as the processor or memory and is often complicated if not impossible to remediate since it imposes modifying the hardware. In default of remediation, some solutions propose to detect these attacks. Yet, most of them are not suitable for embedded systems since they are based on complex machine learning algorithms. In this paper, we propose an edge-computing security solution for attack detection that uses a local-remote machine learning implementation to find an equilibrium between accuracy and decision-making latency while addressing the memory, performance, and communication bandwidth constraints of resource-constrained systems. We demonstrate effectiveness in the detection of multiple microarchitectural attacks such as Rowhammer or cache attacks on an embedded device with an accuracy of 98.75% and a FPR near 0%. To limit the overhead on the communication bus, the proposed solution allows to locally classify as trusted 99% of the samples during normal operation and thus filtering them out.
Fichier principal
Vignette du fichier
Paper1.pdf (1.21 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04149021 , version 1 (03-07-2023)

Identifiants

  • HAL Id : hal-04149021 , version 1

Citer

Nikolaos Foivos Polychronou, Pierre-Henri Thevenon, Maxime Puys, Vincent Beroulle. A hybrid solution for constrained devices to detect microarchitectural attacks. EuroS&P 2023 - 8th IEEE European Symposium on Security and Privacy, Jul 2023, Delft, Netherlands. ⟨hal-04149021⟩
34 Consultations
51 Téléchargements

Partager

More