A Twofold Clock and Voltage-Based Detection Method for Laser Logic State Imaging Attack

Powerful side-channel analysis (SCA) attacks based on failure analysis (FA) techniques can bypass conventional countermeasures on integrated circuits (ICs) and, therefore, break the entire system's security. Laser logic state imaging (LLSI) from the IC backside is an example of such attacks, ma...

Full description

Saved in:
Bibliographic Details
Published in:IEEE transactions on very large scale integration (VLSI) systems 2023-01, Vol.31 (1), p.65-78
Main Authors: Farheen, Tasnuva, Roy, Sourav, Tajik, Shahin, Forte, Domenic
Format: Article
Language:English
Subjects:
Backside attacks
clock freeze sensor
Clocks
Electric potential
Failure analysis
hardware security
Integrated circuits
Integrated optics
laser logic state imaging (LLSI)
Lasers
Optical device fabrication
Optical imaging
optical probing
Optical sensors
Semiconductor devices
Transistors
Voltage
voltage modulation sensor
Citations: Items that this one cites
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Powerful side-channel analysis (SCA) attacks based on failure analysis (FA) techniques can bypass conventional countermeasures on integrated circuits (ICs) and, therefore, break the entire system's security. Laser logic state imaging (LLSI) from the IC backside is an example of such attacks, making the contactless probing of static on-die signals possible. Several countermeasures have been proposed to prevent optical probing attacks, such as LLSI. However, these schemes are designed according to the laser properties and its impact on transistors, and hence, they have complex fabrication steps and large area overhead. As a result, they are difficult to verify and implement. In this article, we propose a twofold detection self-timed sensor, which is the first attempt, to our knowledge, for an easy-to-implement circuit-based countermeasure to thwart LLSI attacks. To perform LLSI, the attacker needs to freeze the clock at a point of interest and modulate the voltage supply line at a known frequency to leak the state of transistors through laser light reflections. With these two attack requirements in mind, we design, simulate, and implement clock- and voltage-based sensors that can detect LLSI attacks with very high confidence.
ISSN:1063-8210
1557-9999
DOI:10.1109/TVLSI.2022.3214724