TY - JOUR
T1 - Physical Fault Injection and Side-Channel Attacks on Mobile Devices
T2 - A Comprehensive Analysis
AU - Shepherd, Carlton
AU - Markantonakis, Konstantinos
AU - Van Heijningen, Nico
AU - Aboulkassimi, Driss
AU - Gaine, Clement
AU - Heckmann, Thibaut
AU - Naccache, David
PY - 2021/9/17
Y1 - 2021/9/17
N2 - Today's mobile devices contain densely packaged system-on-chips (SoCs) with multi-core, high-frequency CPUs and complex pipelines. In parallel, sophisticated SoC-assisted security mechanisms have become commonplace for protecting device data, such as trusted execution environments, full-disk and file-based encryption. Both advancements have dramatically complicated the use of conventional physical attacks, requiring the development of specialised attacks. In this survey, we consolidate recent developments in physical fault injections and side-channel attacks on modern mobile devices. In total, we comprehensively survey over 50 fault injection and side-channel attack papers published between 2009-2021. We evaluate the prevailing methods, compare existing attacks using a common set of criteria, identify several challenges and shortcomings, and suggest future directions of research.
AB - Today's mobile devices contain densely packaged system-on-chips (SoCs) with multi-core, high-frequency CPUs and complex pipelines. In parallel, sophisticated SoC-assisted security mechanisms have become commonplace for protecting device data, such as trusted execution environments, full-disk and file-based encryption. Both advancements have dramatically complicated the use of conventional physical attacks, requiring the development of specialised attacks. In this survey, we consolidate recent developments in physical fault injections and side-channel attacks on modern mobile devices. In total, we comprehensively survey over 50 fault injection and side-channel attack papers published between 2009-2021. We evaluate the prevailing methods, compare existing attacks using a common set of criteria, identify several challenges and shortcomings, and suggest future directions of research.
U2 - 10.1016/j.cose.2021.102471
DO - 10.1016/j.cose.2021.102471
M3 - Article
SN - 0167-4048
JO - Computers and Security
JF - Computers and Security
M1 - 102471
ER -