清华大学 微电子与纳电子学系,北京,100084
纸质出版:2016
移动端阅览
程鹏, 白国强. EEPROM的扫描电镜探测和探针攻击[J]. 微电子学与计算机, 2016, 33(3): 37-40, 45.
CHENG Peng, BAI Guo-qiang. EEPROM Memory SEM Search and Probing Attack[J]. 2016, 33(3): 37-40.
阐述两种针对芯片的侵入式攻击方法
即扫描电镜(SEM)探测和探针攻击.攻击的目标都是从EEPROM中提取数据内容
EEPROM因为通常会存储认证信息和个人密钥等敏感信息.描述两个实验过程
第一个实验利用非易失性存储器的存储特点
对一个通用存储器芯片进行预处理后直接使用SEM进行观测
试图从图像上辨别不同存储状态的单元并且定位单个存储器单元; 第二个实验对某款芯片预处理后
针对单个EEPROM存储器单元晶体管各端口进行电学连接
制作焊盘(PAD)
之后使用探针探测存储器单元工作电信号
从而区分不同状态的单元.
This paper proposed two invasive attack methods against semiconductor chips
and these two methods are SEM search and probing attack
respectively. Their goals are both extracting contents from EEPROM which usually keeps sensitive information such as authentication information and personal keys. Two experiments process were shown in this paper. By making use of features of nonvolatile memories
the first one used SEM to observe target EEPROM cells to distinguish cells which store different contents and to locate EEPROM cells with certain memory chip pre-processed. The second one used needles to test working signals of memory cells by contacting PADs which connect electrodes of memory cell transistors to distinguish different cells.
USA, Hoboken Brown D W, Brewer J E. Nonvolatile demiconductor memory yechnology: A comprehensive guide to understanding and using NVSM devices[M]. USA, Hoboken: Wiley IEEE Press, 1997.
Samyde D, Skorobogatov S, Anderson R, et al. On a new way to read data from memory[C]//IEEE Security in Storage Workshop. USA, Maryland, IEEE, 2002: 65-69.
Skorobogatov S. Flash memory 'bumping' attacks[C]//International Conference on Cryptographic Hardware % Embedded Systems. Berlin, Springer-Verlag, 2010: 158-172.
Skorobogatov S P. Semi-invasive attacks: a new approach to hardware security analysis[D]. Cambridge, UK: University of Cambridge, 2005.
0
浏览量
27
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010602201714号