111 citations · 474 across the 32 of their papers we have counts for
10 papers · 1 filter
Anti-Tamper Radio: System-Level Tamper Detection for Computing Systems
Paul Staat, Johannes Tobisch, Christian Zenger +1
A whole range of attacks becomes possible when adversaries gain physical access to computing systems that process or contain sensitive data. Examples include side-channel analysis,…
How Not to Protect Your IP -- An Industry-Wide Break of IEEE 1735 Implementations
Julian Speith, Florian Schweins, Maik Ender +3
Modern hardware systems are composed of a variety of third-party Intellectual Property (IP) cores to implement their overall functionality. Since hardware design is a globalized pr…
Reconfigurable Intelligent Surface for Physical Layer Key Generation: Constructive or Destructive?
Guyue Li, Lei Hu, Paul Staat +4
Physical layer key generation (PKG) is a promising means to provide on-the-fly shared secret keys by exploiting the intrinsic randomness of the radio channel. However, the performa…
IRShield: A Countermeasure Against Adversarial Physical-Layer Wireless Sensing
Paul Staat, Simon Mulzer, Stefan Roth +5
Wireless radio channels are known to contain information about the surrounding propagation environment, which can be extracted using established wireless sensing methods. Thus, tod…
Mirror Mirror on the Wall: Wireless Environment Reconfiguration Attacks Based on Fast Software-Controlled Surfaces
Paul Staat, Harald Elders-Boll, Markus Heinrichs +2
The intelligent reflecting surface (IRS) is a promising new paradigm in wireless communications for meeting the growing connectivity demands in next-generation mobile networks. IRS…
An Exploratory Study of Hardware Reverse Engineering Technical and Cognitive Processes
Steffen Becker, Carina Wiesen, Nils Albartus +2
Understanding the internals of Integrated Circuits (ICs), referred to as Hardware Reverse Engineering (HRE), is of interest to both legitimate and malicious parties. HRE is a compl…
ARMORY: Fully Automated and Exhaustive Fault Simulation on ARM-M Binaries
Max Hoffmann, Falk Schellenberg, Christof Paar
Embedded systems are ubiquitous. However, physical access of users and likewise attackers makes them often threatened by fault attacks: a single fault during the computation of a c…
The Unpatchable Silicon: A Full Break of the Bitstream Encryption of Xilinx 7-Series FPGAs
Maik Ender, Amir Moradi, Christof Paar
The security of FPGAs is a crucial topic, as any vulnerability within the hardware can have severe consequences, if they are used in a secure design. Since FPGA designs are encoded…
Promoting the Acquisition of Hardware Reverse Engineering Skills
Carina Wiesen, Steffen Becker, Nils Albartus Christof Paar +1
This full research paper focuses on skill acquisition in Hardware Reverse Engineering (HRE) - an important field of cyber security. HRE is a prevalent technique routinely employed…
SPFA: SFA on Multiple Persistent Faults
Susanne Engels, Falk Schellenberg, Christof Paar
For classical fault analysis, a transient fault is required to be injected during runtime, e.g., only at a specific round. Instead, Persistent Fault Analysis (PFA) introduces a pow…