Hardware Security

Garant předmětu:

Přednášející:

Cvičící:

Předmět zajišťuje:

katedra informační bezpečnosti

Anotace:

The course deals with hardware resources used to ensure security of computer systems including embedded ones. The students become familiar with the operating principles of cryptographic modules, the security features of modern processors, and storage media protection through encryption. They will gain knowledge about vulnerabilities of HW resources, including side-channel attacks and tampering with hardware during manufacture. Students will have an overview of contact and contactless smart card technology including applications and related topics for multi-factor authentication (biometrics). Students will understand the problems of effective implementation of ciphers.

Požadavky:

basics of computer security and cryptography, programming

Osnova přednášek:

1. Hardware cryptographic modules, key storage.

2. Security features of processor architectures.

3. Encryption of storage media.

4. Side-channel attacks (power analysis, timing attack, electromagnetic analysis).

5. Smart cards (applications: digital signature, authentication).

6. Contactless cards, RFID, NFC.

7. Trusted HW design, forgery.

8. Hardware Trojans.

9. Physically unclonable functions (PUF) and true random number generators (TRNG).

10. Biometrics.

11. Effective implementation of ciphers.

12. Security of embedded systems (e.g., automobiles).

Osnova cvičení:

1. Introduction to Java Card programming

2. Loading applets into cards, PIN excercise

3. Hashing operations, communication with PC

4. Digital signature on smart card

5. Basics of differential power analysis

6. Polynomial arithmetic (seminar)

7. Simple AES-128 implementation

8. Optimizing AES for 32bit platforms

9. AES acceleration using dedicated instructions (AES-NI)

10. Testing AES on an ARM microcontroller

11. Finishing AES tasks

12. PUF circuit response analysis

Cíle studia:

Students will understand hardware tools to ensure the security of computer systems including smart card technologies and efficient implementation of ciphers. They also get an overview of vulnerabilities of HW resources.

Studijní materiály:

[1] Mangard, S. - Oswald, E. - Popp, T.: Power Analysis Attacks: Revealing the Secrets of Smart Cards (Advances in Information Security), Springer-Verlag New York, 2007, 0387308571,

[2] Rankl, W. - Effing, W.: Smart Card Handbook, 4th Edition, John Wiley &; Sons, Inc., New York, 1997, 978-0-470-74367-6,

[3] Tuyls, P. - Skoric, B. - Kevenaar, T.: Security with Noisy Data: Private Biometrics, Secure Key Storage and Anti-Counterfeiting, Springer-Verlag New York, 2007, 1846289831,

Poznámka:

Information about the course and courseware are available at https://moodle-vyuka.cvut.cz/course/search.php?search=BIE-HWB

Další informace:

https://moodle-vyuka.cvut.cz/course/search.php?search=BIE-HWB

Pro tento předmět se rozvrh nepřipravuje

Předmět je součástí následujících studijních plánů:

• Bachelor branch Security and Information Technology, in English, 2015-2020 (povinný předmět oboru)
• Bachelor branch Web and Software Engineering, spec. Software Engineering, in English, 2015-2020 (volitelný předmět)
• Bachelor branch Computer Science, in English, 2015-2020 (volitelný předmět)
• Bachelor Specialization, Software Engineering, 2021 (VO)
• Bachelor Specialization, Computer Science, 2021 (VO)
• Bachelor Specialization Computer Systems and Virtualization, 2021 (VO)
• Bachelor branch Computer Science, in English, 2015-2020 original version (volitelný předmět)
• Bachelor Specialization, Computer Engineering, Version 2024 (VO)