RT
R. Tubbing
info
Please Note
<p>This page displays the records of the person named above and is not linked to a unique person identifier. This record may need to be merged to a profile.</p>
2 records found
1
An Analysis of Deep Learning Based Profiled Side-channel Attacks
Custom Deep Learning Layer, CNN Hyperparameters for Countermeasures, and Portability Settings
A side-channel attack (SCA) recovers secret data from a device by exploiting unintended physical leakages such as power consumption. In a profiled SCA, we assume an adversary has control over a target and copy device. Using the copy device the adversary learns a profile of the device. With the profile, the adversary exploits the measurements from a target device and recovers the secret key. As SCAs have shown to be a realistic attack vector, countermeasures have been invented to harden these kinds of attacks. In the last few years, deep learning has been applied in a wide variety of domains. For example, convolutional neural networks have shown to be effective for object recognition in images and recurrent neural networks for text generation. In the side-channel analysis domain, deep learning has shown to be successful. Up until recently, no deep learning layer existed that was specifically designed for SCAs. In this work, we analyze this layer, called the spread layer, and demonstrate the flaws of this layer. We improve the flaws and show the spread layer does not enhance the performance of SCAs. Additionally, we show there is no need to develop a deep learning layer specifically for SCAs on unprotected implementations. For implementations where countermeasures are present, literature demonstrated that convolutional neural networks are the most successful. However, for both the masking and random delay countermeasure, little is known about the influence of the kernel size and depth of the network. In this work, we illustrate that increasing the kernel size and depth of the network both increase the attack efficiency for the random delay countermeasure. For the masking countermeasure, we demonstrate that higher kernel sizes and shallow networks perform the best. Additionally, in this work, we consider a portability setting where the probe position has been changed in between the measurements of the profiling and attack measurements. Here, we show that the probe position causes a typical deep learning SCA to be ineffective. We introduce a normalization method such that the attack becomes effective, and show this method enables the attack to perform as expected.
...
A side-channel attack (SCA) recovers secret data from a device by exploiting unintended physical leakages such as power consumption. In a profiled SCA, we assume an adversary has control over a target and copy device. Using the copy device the adversary learns a profile of the device. With the profile, the adversary exploits the measurements from a target device and recovers the secret key. As SCAs have shown to be a realistic attack vector, countermeasures have been invented to harden these kinds of attacks. In the last few years, deep learning has been applied in a wide variety of domains. For example, convolutional neural networks have shown to be effective for object recognition in images and recurrent neural networks for text generation. In the side-channel analysis domain, deep learning has shown to be successful. Up until recently, no deep learning layer existed that was specifically designed for SCAs. In this work, we analyze this layer, called the spread layer, and demonstrate the flaws of this layer. We improve the flaws and show the spread layer does not enhance the performance of SCAs. Additionally, we show there is no need to develop a deep learning layer specifically for SCAs on unprotected implementations. For implementations where countermeasures are present, literature demonstrated that convolutional neural networks are the most successful. However, for both the masking and random delay countermeasure, little is known about the influence of the kernel size and depth of the network. In this work, we illustrate that increasing the kernel size and depth of the network both increase the attack efficiency for the random delay countermeasure. For the masking countermeasure, we demonstrate that higher kernel sizes and shallow networks perform the best. Additionally, in this work, we consider a portability setting where the probe position has been changed in between the measurements of the profiling and attack measurements. Here, we show that the probe position causes a typical deep learning SCA to be ineffective. We introduce a normalization method such that the attack becomes effective, and show this method enables the attack to perform as expected.
Digital Voting Pass
One step towards the digitalization of the entire voting process
Bachelor thesis
(2017)
-
Wilko Meijer, Daan Middendorp, Jonathan Raes, Rico Tubbing, Johan Pouwelse, Otto Visser
The Dutch electoral voting system is designed in a way that does not fit in the current era of the digital transformation. Almost every procedure during the elections is done manually and change in policy is very difficult as it requires a change in legislation.
This thesis explores a more trustworthy, transparent and less expensive way of verifying the suffrage of a citizen. In order to accomplish this, a literature review is presented about the election process in other countries and new possibilities with state of the art technology are reviewed. Based on these investigations, a solution that would make the current voting pass superfluous is presented. The presented solution in this thesis is built with blockchain and machine readable travel documents. Considering blockchain, this technology is a decentralized ledger of transactions, where every transaction is
immutable and built following predefined rules. These transactions are visible and verifiable for anyone connected to the decentralized network. Due to this decentralized design, the network is resilient against DDoS attacks and has no single point of failure. Machine readable travel documents are used for the authentication. Dutch travel documents (passports, identity cards and driver’s licences) are designed according to the ICAO machine readable travel document standard, which also requires the presence of a biometric chip. This means that every citizen already has access to a PKI (public key infrastructure) key pair, which can be used to sign data. The presented solution combines these technologies and is first of its kind to link a machine readable travel document to a blockchain. These new possibilities can help solving the identity problem for all kinds of
organizations ...
This thesis explores a more trustworthy, transparent and less expensive way of verifying the suffrage of a citizen. In order to accomplish this, a literature review is presented about the election process in other countries and new possibilities with state of the art technology are reviewed. Based on these investigations, a solution that would make the current voting pass superfluous is presented. The presented solution in this thesis is built with blockchain and machine readable travel documents. Considering blockchain, this technology is a decentralized ledger of transactions, where every transaction is
immutable and built following predefined rules. These transactions are visible and verifiable for anyone connected to the decentralized network. Due to this decentralized design, the network is resilient against DDoS attacks and has no single point of failure. Machine readable travel documents are used for the authentication. Dutch travel documents (passports, identity cards and driver’s licences) are designed according to the ICAO machine readable travel document standard, which also requires the presence of a biometric chip. This means that every citizen already has access to a PKI (public key infrastructure) key pair, which can be used to sign data. The presented solution combines these technologies and is first of its kind to link a machine readable travel document to a blockchain. These new possibilities can help solving the identity problem for all kinds of
organizations ...
The Dutch electoral voting system is designed in a way that does not fit in the current era of the digital transformation. Almost every procedure during the elections is done manually and change in policy is very difficult as it requires a change in legislation.
This thesis explores a more trustworthy, transparent and less expensive way of verifying the suffrage of a citizen. In order to accomplish this, a literature review is presented about the election process in other countries and new possibilities with state of the art technology are reviewed. Based on these investigations, a solution that would make the current voting pass superfluous is presented. The presented solution in this thesis is built with blockchain and machine readable travel documents. Considering blockchain, this technology is a decentralized ledger of transactions, where every transaction is
immutable and built following predefined rules. These transactions are visible and verifiable for anyone connected to the decentralized network. Due to this decentralized design, the network is resilient against DDoS attacks and has no single point of failure. Machine readable travel documents are used for the authentication. Dutch travel documents (passports, identity cards and driver’s licences) are designed according to the ICAO machine readable travel document standard, which also requires the presence of a biometric chip. This means that every citizen already has access to a PKI (public key infrastructure) key pair, which can be used to sign data. The presented solution combines these technologies and is first of its kind to link a machine readable travel document to a blockchain. These new possibilities can help solving the identity problem for all kinds of
organizations
This thesis explores a more trustworthy, transparent and less expensive way of verifying the suffrage of a citizen. In order to accomplish this, a literature review is presented about the election process in other countries and new possibilities with state of the art technology are reviewed. Based on these investigations, a solution that would make the current voting pass superfluous is presented. The presented solution in this thesis is built with blockchain and machine readable travel documents. Considering blockchain, this technology is a decentralized ledger of transactions, where every transaction is
immutable and built following predefined rules. These transactions are visible and verifiable for anyone connected to the decentralized network. Due to this decentralized design, the network is resilient against DDoS attacks and has no single point of failure. Machine readable travel documents are used for the authentication. Dutch travel documents (passports, identity cards and driver’s licences) are designed according to the ICAO machine readable travel document standard, which also requires the presence of a biometric chip. This means that every citizen already has access to a PKI (public key infrastructure) key pair, which can be used to sign data. The presented solution combines these technologies and is first of its kind to link a machine readable travel document to a blockchain. These new possibilities can help solving the identity problem for all kinds of
organizations