SAMVA: Static Analysis for Multi-Fault Attack Paths Determination

Antoine Gicquel (1) , Damien Hardy (1) , Karine Heydemann (2) , Erven Rohou (1)

1 PACAP - Pushing Architecture and Compilation for Application Performance
2 ALSOC - Architecture et Logiciels pour Systèmes Embarqués sur Puce

Multi-fault injection attacks are powerful since they allow to bypass software security mechanisms of embedded devices. Assessing the vulnerability of an application while considering multiple faults with various effects is an open problem due to the size of the fault space to explore. We propose SAMVA, a framework for efficiently searching vulnerabilities of applications in presence of multiple instruction-skip faults with various widths. SAMVA relies solely on static analysis to determine attack paths in a binary code. It is configurable with the fault injection capacity of the attacker and the attacker's objective. We evaluate the proposed approach on eight PIN verification programs containing various software countermeasures. Our framework finds numerous attack paths, even for the most hardened version, in very limited time.

Mots clés: Multi-Fault; Static Analysis; Fault Injection Attack

Domaines: Informatique [cs]

Antoine Gicquel, Damien Hardy, Karine Heydemann, Erven Rohou. SAMVA: Static Analysis for Multi-Fault Attack Paths Determination. COSADE 2023 - 14th International Workshop on Constructive Side-Channel Analysis and Secure Design, Apr 2023, Munich (Allemagne), Germany. pp.3-22, ⟨10.1007/978-3-031-29497-6_1⟩. ⟨hal-03980128⟩