How Leaky is Your Device?
October 7, 2015 | University of BristolEstimated reading time: 2 minutes
A new generation of digital devices that will protect consumers from cyber-attacks could be a step closer thanks to a grant of over £1 million from the Engineering and Physical Sciences Research Council (EPSRC) awarded to the University of Bristol for a research project to protect consumers’ sensitive data.
Digital devices, such as smart banking cards or smart phones, are widely used to store private and sensitive data about peoples’ digital lives. However, securing these devices is a major task for the computing industry. The research project by the University’s Cryptography Research Group hopes to address the issue of leakage-related attacks.
Information leakage via side channels is a widely recognised threat to cyber security. In particular small devices are known to leak information through physical channels, i.e. power consumption, electromagnetic radiation, and timing behaviour. In other words, the power consumed by mobile phones can reveal information about the data stored on the phone and attackers can steal this data by managing to capture the leakage. This can ultimately lead to complete security breaches in the form of data recovery.
At present, accounting for leakage requires access to a fully equipped testing lab, and skilled people to conduct side channel experiments. This makes it virtually impossible for the general developers of devices to test their implementations against leakage attacks as these labs are only available to high-end developers, such as those producing chip-and-pin cards.
The aim of the research project is to bring the skill of a testing lab to the desk of a developer of standard consumer devices, without the need for domain specific knowledge. To ensure the success of the project the research group have partnered with a leading developer of compiler toolchains, Embecosm.
Dr Elisabeth Oswald, Reader in Applied Cryptography in the Cryptography Research Group and who is leading the project, said: “Our previous research has shown that in the case of small embedded devices, the nature of the leakages can be appropriately modelled using statistical tools.
“This project's research hypothesis is that one can make meaningful statements about the leakage behaviour of new implementations on such small devices by utilising a priori derived models.”
The researchers hope the project will lead to a new generation of devices that will provide consumers with high-end security in low-end devices, and also protect consumers’ sensitive information. As the world gets even more digital, and attackers become more sophisticated, this is another important step on the arms race between the good guys and the bad guys.
Suggested Items
Cogiscan Collaborates with Koh Young to Unveil How Factory Insights Software Transforms Data Into Action at IPC APEX EXPO
03/28/2024 | Koh YoungKoh Young, the industry leader in True3D measurement-based inspection solutions, is excited to announce Factory Insights, the latest offering from Cogiscan, will be demonstrated alongside KSMART in Koh Young booth 2112 during IPC APEX Expo.
ASMPT to Exhibit Smart Manufacturing at IPC APEX EXPO 2024
03/27/2024 | ASMPTWith its innovative, data-driven Intelligent Factory concept and a comprehensive hardware and software portfolio around SMT production, market and innovation leader ASMPT will be a major presence at the IPC APEX EXPO 2024, the industry’s main event in California.
Semtech Pioneers the Path to 6G with Advanced 5G Wireless Technologies
03/27/2024 | BUSINESS WIRESemtech Corporation, a leader in high-performance semiconductors, IoT systems and cloud connectivity services, unveiled its latest innovations poised to shape the future of 5G and pave the way for 6G.
IDC: Half of Asia’s Top Firms to Embrace AI-Driven Headless BI and Analytics by 2026
03/27/2024 | IDCA recent IDC FutureScape report, IDC FutureScape: Worldwide Data and Analytics 2024 Predictions — Asia/Pacific (Excluding Japan) Implications, highlights that by 2026, 50% of Asia/Pacific-based Top 2000 organizations (A2000) will adopt AI-driven headless BI and analytics with chat, Q&A, and proactive notification functionality, quadrupling the number of users with access to contextual information.
AT&S Well Prepared to Benefit from AI Boom
03/26/2024 | AT&SThe rapid progress in the development of artificial intelligence promises to revolutionize all areas of daily life in the coming years. In order to operate such AI systems, an enormous amount of computing power is required, which is provided by a vast network of data centres.