Make Some Noise

Unleashing the Power of Convolutional Neural Networks for Profiled Side-channel Analysis

Journal Article (2019)
Author(s)

Jaehun Kim (TU Delft - Multimedia Computing)

S. Picek (TU Delft - Cyber Security)

Annelie Heuser (INRIA/IRISA)

Shivam Bhasin (Nanyang Technological University)

A Hanjalic (TU Delft - Intelligent Systems)

Research Group
Cyber Security
Copyright
© 2019 Jaehun Kim, S. Picek, Annelie Heuser, Shivam Bhasin, A. Hanjalic
DOI related publication
https://doi.org/10.13154/tches.v2019.i3.148-179
More Info
expand_more
Publication Year
2019
Language
English
Copyright
© 2019 Jaehun Kim, S. Picek, Annelie Heuser, Shivam Bhasin, A. Hanjalic
Research Group
Cyber Security
Issue number
3
Volume number
2019
Pages (from-to)
148-179
Reuse Rights

Other than for strictly personal use, it is not permitted to download, forward or distribute the text or part of it, without the consent of the author(s) and/or copyright holder(s), unless the work is under an open content license such as Creative Commons.

Abstract

Profiled side-channel analysis based on deep learning, and more precisely Convolutional Neural Networks, is a paradigm showing significant potential. The results, although scarce for now, suggest that such techniques are even able to break cryptographic implementations protected with countermeasures. In this paper, we start by proposing a new Convolutional Neural Network instance able to reach high performance for a number of considered datasets. We compare our neural network with the one designed for a particular dataset with masking countermeasure and we show that both are good designs but also that neither can be considered as a superior to the other one.
Next, we address how the addition of artificial noise to the input signal can be actually beneficial to the performance of the neural network. Such noise addition is equivalent to the regularization term in the objective function. By using this technique, we are able to reduce the number of measurements needed to reveal the secret key by orders of magnitude for both neural networks. Our new convolutional neural network instance with added noise is able to break the implementation protected with the random delay countermeasure by using only 3 traces in the attack phase. To further strengthen our experimental results, we investigate the performance with a varying number of training samples, noise levels, and epochs. Our findings show that adding noise is beneficial throughout all training set sizes and epochs.