7 citations · 17 across the 16 of their papers we have counts for
19 papers
Randomized Caches in Hardware: Challenges and Trade-offs
Xinrui Wang, Pascal Kosak, Christof Paar +3
Randomized caches protect against side-channel attacks by obfuscating the mapping of memory addresses to cache locations. Existing proposals typically describe architectural behavi…
Reversing the Clock: Layout-Aware Recovery of Design Intent from Clock Distribution Networks
Sascha Tommasone, Zehra Karadağ, Christopher Pawlowicz +6
Hardware reverse engineering supports competitive analysis and hardware assurance by recovering information about an integrated circuit (IC) from its physical implementation. While…
Designing a Hardware Reverse Engineering Course: Lessons from Eight Years in a Rapidly Evolving Tech Domain
Zehra Karadağ, René Walendy, Carina Wiesen +3
Integrated Circuits (ICs) are omnipresent, yet their globalized manufacturing process remains vulnerable to supply chain threats. Hardware Reverse Engineering (HRE) is essential fo…
PINsight: Systematic Threat Assessment of Cross-Domain Wi-Fi-based PIN Inference
Johannes Kortz, Christof Paar, Christian Zenger +1
Wi-Fi signals can be repurposed as radar-like sensors, exposing a side channel for inferring sensitive information. A particularly concerning example is PIN inference, where an att…
Hardware Trojans from Invisible Inversions: On the Trojanizability of Standard Cell Libraries
Kolja Dorschel, René Walendy, Lukas Plätz +3
At S&P 2023, Puschner et al. made a valuable dataset for hardware Trojan detection research publicly available. It contains a complete set of Scanning Electron Microscope (SEM) ima…
SoK: From Silicon to Netlist and Beyond Two Decades of Hardware Reverse Engineering Research
Zehra Karadağ, Simon Klix, René Walendy +5
Hardware serves as the root of trust in modern computing systems, making Hardware Reverse Engineering (HRE) essential for security assurancefrom design verification and supply-c…
HAL -- An Open-Source Framework for Gate-Level Netlist Analysis
Julian Speith, Jörn Langheinrich, Marc Fyrbiak +7
HAL is an open-source framework for gate-level netlist analysis, an integral step in hardware reverse engineering. It provides analysts with an interactive GUI, an extensible plugi…
Talking to the Airgap: Exploiting Radio-Less Embedded Devices as Radio Receivers
Paul Staat, Daniel Davidovich, Christof Paar
Physical isolation from external networks - an airgap - aims to minimize exposure to remote attacks. Yet capable adversaries still achieve code execution on air-gapped systems, and…
The Battle of Metasurfaces: Understanding Security in Smart Radio Environments
Paul Staat, Christof Paar, Swarun Kumar
Metasurfaces, or Reconfigurable Intelligent Surfaces (RISs), have emerged as a transformative technology for next-generation wireless systems, enabling digitally controlled manipul…
Anti-Tamper Radio meets Reconfigurable Intelligent Surface for System-Level Tamper Detection
Maryam Shaygan Tabar, Johannes Kortz, Paul Staat +3
Many computing systems need to be protected against physical attacks using active tamper detection based on sensors. One technical solution is to employ an ATR (Anti-Tamper Radio)…
"Make the Voodoo Box Go Bleep Bloop:" Exploring End Users' Understanding and Information Needs Regarding Microchips
Julian Speith, Steffen Becker, Timo Speith +4
Microchips are fundamental components of modern electronic devices, yet they remain opaque to the users who rely on them daily. This opacity, compounded by the complexity of global…
Key Exchange in the Quantum Era: Evaluating a Hybrid System of Public-Key Cryptography and Physical-Layer Security
Paul Staat, Meik Dörpinghaus, Azadeh Sheikholeslami +3
Today's information society relies on cryptography to achieve security goals such as confidentiality, integrity, authentication, and non-repudiation for digital communications. Her…
Patching FPGAs: The Security Implications of Bitstream Modifications
Endres Puschner, Maik Ender, Steffen Becker +1
Field Programmable Gate Arrays (FPGAs) are known for their reprogrammability that allows for post-manufacture circuitry changes. Nowadays, they are integral to a variety of systems…
An Evidence-Based Curriculum Initiative for Hardware Reverse Engineering Education
René Walendy, Markus Weber, Steffen Becker +2
The increasing importance of supply chain security for digital devices -- from consumer electronics to critical infrastructure -- has created a high demand for skilled cybersecurit…
I see an IC: A Mixed-Methods Approach to Study Human Problem-Solving Processes in Hardware Reverse Engineering
René Walendy, Markus Weber, Jingjie Li +7
Trust in digital systems depends on secure hardware, often assured through Hardware Reverse Engineering (HRE). This work develops methods for investigating human problem-solving pr…
JustSTART: How to Find an RSA Authentication Bypass on Xilinx UltraScale(+) with Fuzzing
Maik Ender, Felix Hahn, Marc Fyrbiak +2
Fuzzing is a well-established technique in the software domain to uncover bugs and vulnerabilities. Yet, applications of fuzzing for security vulnerabilities in hardware systems ar…
Spatial-Domain Wireless Jamming with Reconfigurable Intelligent Surfaces
Philipp Mackensen, Paul Staat, Stefan Roth +3
Wireless communication infrastructure is a cornerstone of modern digital society, yet it remains vulnerable to the persistent threat of wireless jamming. Attackers can easily creat…
Stealing Maggie's Secrets -- On the Challenges of IP Theft Through FPGA Reverse Engineering
Simon Klix, Nils Albartus, Julian Speith +9
Intellectual Property (IP) theft is a cause of major financial and reputational damage, reportedly in the range of hundreds of billions of dollars annually in the U.S. alone. Field…
REVERSIM: An Open-Source Environment for the Controlled Study of Human Aspects in Hardware Reverse Engineering
Steffen Becker, René Walendy, Markus Weber +3
Hardware Reverse Engineering (HRE) is a technique for analyzing integrated circuits. Experts employ HRE for security-critical tasks, like detecting Trojans or intellectual property…