This paper proposed two invasive attack methods against semiconductor chips
and these two methods are SEM search and probing attack
respectively. Their goals are both extracting contents from EEPROM which usually keeps sensitive information such as authentication information and personal keys. Two experiments process were shown in this paper. By making use of features of nonvolatile memories
the first one used SEM to observe target EEPROM cells to distinguish cells which store different contents and to locate EEPROM cells with certain memory chip pre-processed. The second one used needles to test working signals of memory cells by contacting PADs which connect electrodes of memory cell transistors to distinguish different cells.
关键词
Keywords
references
USA, Hoboken Brown D W, Brewer J E. Nonvolatile demiconductor memory yechnology: A comprehensive guide to understanding and using NVSM devices[M]. USA, Hoboken: Wiley IEEE Press, 1997.
Samyde D, Skorobogatov S, Anderson R, et al. On a new way to read data from memory[C]//IEEE Security in Storage Workshop. USA, Maryland, IEEE, 2002: 65-69.
Skorobogatov S. Flash memory 'bumping' attacks[C]//International Conference on Cryptographic Hardware % Embedded Systems. Berlin, Springer-Verlag, 2010: 158-172.
Skorobogatov S P. Semi-invasive attacks: a new approach to hardware security analysis[D]. Cambridge, UK: University of Cambridge, 2005.