logo

Technology to facilitate business

The Nuances of Information Security and Privacy

By Leon Ravenna, CISO, KAR Auction Services, Inc.

The Nuances of Information Security...

Software-Defined Security: The Missing Piece in Your SDDC Strategy

By Shishir Singh, VP, Network Security, Intel...

Software-Defined Security: The...

Small can be Smart(er) too: Steps for SMEs in Manufacturing to win in the Era of Industry 4.0

By Cheng Jang Thye, Chief Architect and Head,...

Small can be Smart(er) too: Steps for...

How Digital Assets are Transforming The Mining and Metals Markets

By Jeremy Samuel, CEO, MetaliCoin

How Digital Assets are Transforming...

How Physical Security is crucial for IoT devices

By Enterprise Technology Review | Wednesday, March 27, 2019

The ubiquity of IoT devices has put added emphasis on the need for adopting efficient security measures. Physical security, which was considered to be the most secure feature for organizations, is also at stake because of the distributed and fragmented nature of the IoT devices. An inefficient physical security solution can cause catastrophe for an organization.

Security service providers have identified four significant vulnerabilities for the Security of a system-on-chip (SoC), and those are software, communication, lifecycle, and physical. All these factors need to work efficiently, as any vulnerability can jeopardize the entire security of a system. Physical security means securing all the hardware and silicon element of a system. Breaching physical security is uphill task, as unlike software security the attackers need to be close proximity to compromise a system. Many attackers have been implementing various ways to breach the physical security of an organization. There are two vulnerabilities for physical security which are as follows:

Non-Invasive: Attackers use non-invasive attacks to sense the electrical characteristics of a chip to change the behavior of the devices or gather sensitive information. The attackers need to be in close proximity of the chip to sense the electrical characteristics.

Invasive Attacks: Invasive attacks can only be possible if the chip surface is exposed to the attackers. Attackers can manipulate chip physically to extract vital information stored in the chip.

There are many other vulnerabilities which come within these two vulnerabilities. They are as follows:

Side Channel Analysis: Attackers use side channel analysis analyzing power signature or Electro Magnetic radiation emanating from an IC. It is a non-invasive attack which has the potential to extracting sensitive information such as secret keys.

Tamper Attack: Tamper attacks are invasive attacks in which the attackers meddle with the IC to extract sensitive information present in the metal wires using micro probes. Attackers can also alter the circuit behavior by overdriving the state of the IC.

Fault Injection Attacks: faulty attacks are invasive attacks in which a miscreant induces faulty behaviors in the system to compromise the security. These faulty behaviors include temperature, frequency, voltage, power, clock, and many others. 

See Also: Cyber Security Review Magazine

tag

IoT

Top