Hardware Security

Garant předmětu:

Jiří Buček

Přednášející:

Jiří Buček

Cvičící:

Jiří Buček

Předmět zajišťuje:

katedra informační bezpečnosti

Anotace:

The course provides the knowledge needed for the analysis and design of computer systems security solutions. Students get an overview of safeguards against abuse of the system using hardware means. They will be able to safely use and integrate hardware components into systems and test them for resistance to attacks.

Students will gain knowledge about the cryptographic accelerators, PUF, random number generators, smart cards, biometric devices, and devices for internal security functions of the computer.

Požadavky:

Basics of computer security and cryptography, programming

Osnova přednášek:

1. Design of hardware security modules.

2. Types of side channels, sources of information transmitted by the side channel.

3. Measurement methods of physical quantities of side channels.

4. Differential power analysis (DPA).

5. Influence of algorithm and technology on side channels, SPA.

6. Countermeasures against side channel attacks - hiding, masking.

7. Second order differential power analysis.

8. Methods of accelerating cryptographic operations.

9. Tamper resistance.

10. Error attacks, fault injection.

11. Secure design of true random number generators (TRNG).

12. Secure design of physically unclonable functions (PUF).

13. Hardware malware: detection and prevention, trusted manufacturing.

Osnova cvičení:

1. Introduction to measurement with oscilloscope and smart card

2. Measurement with oscilloscope, data transfer to PC

3. Differential power analysis

4. DPA - power models, evaluation methods

5. Trace alignment and compression

6. Attacking countermeasures - hiding in time

7. Attacking hiding in time

8. Analysis of correlation with instructions

9. Analysis of correlation with instructions

10. Attacking masking

11. Task finalization

12. Task finalization, credit

Cíle studia:

Students will understand the problems of security hardware devices in computer systems. They will be able to perform certain hardware attacks and design countermeasures against them.

Studijní materiály:

1. Menezes, A. - Oorschot, P. - Vanstone, S.: Handbook of Applied Cryptography. CRC Press. 1996. 0849385237.

2. Paar, C. - Pelzl, J.: Understanding Cryptography. Springer. 2010. 978-3-642-04100-6.

3. Rankl, W. - Effing, W.: Smart Card Handbook (3rd Edition). Wiley. 2004. 978-0-470-85669-7.

4. Anderson, R. J.: Security Engineering: A Guide to Building Dependable Distributed Systems (2nd Edition). Wiley. 2008. 978-0-470-06852-6.

5. Vacca, J. R.: Biometric Technologies and Verification Systems. Elsevier. 2007. 978-0-7506-7967.

6. Ecks, M.: Smartcard Development with JavaCard and the OpenCard Framework: A feasibility study. VDM Verlag Dr. Müller. 2007. 3836499894.

Poznámka:

Informace o předmětu a výukové materiály naleznete na https://courses.fit.cvut.cz/MI-HWB/

Další informace:

https://courses.fit.cvut.cz/NI-HWB/

Rozvrh na zimní semestr 2023/2024:

Rozvrh není připraven

Rozvrh na letní semestr 2023/2024:

Rozvrh není připraven

Předmět je součástí následujících studijních plánů:

• Master specialization Software Engineering, in English, 2021 (volitelný předmět)
• Master specialization Computer Security, in English, 2021 (PS)
• Master specialization Computer Systems and Networks, in English, 2021 (volitelný předmět)
• Master specialization Design and Programming of Embedded Systems, in English, 2021 (volitelný předmět)
• Master specialization Computer Science, in English, 2021 (VO)