COMMON WEAKNESS ENUMERATIONDraft

CWE-1261

Improper Handling of Single Event Upsets

The hardware logic does not effectively handle when single-event upsets (SEUs) occur.

Abstraction

Base

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The hardware logic does not effectively handle when single-event upsets (SEUs) occur.

Extended description

Technology trends such as CMOS-transistor down-sizing, use of new materials, and system-on-chip architectures continue to increase the sensitivity of systems to soft errors. These errors are random, and their causes might be internal (e.g., interconnect coupling) or external (e.g., cosmic radiation). These soft errors are not permanent in nature and cause temporary bit flips known as single-event upsets (SEUs). SEUs are induced errors in circuits caused when charged particles lose energy by ionizing the medium through which they pass, leaving behind a wake of electron-hole pairs that cause temporary failures. If these failures occur in security-sensitive modules in a chip, it might compromise the security guarantees of the chip. For instance, these temporary failures could be bit flips that change the privilege of a regular user to root.

Root cause

How and when does the problem arise?

Lifecycle phase

Architecture and Design

Lifecycle phase

Implementation

Risk

What does successful exploitation lead to?

DoS: Crash, Exit, or RestartDoS: InstabilityGain Privileges or Assume IdentityBypass Protection Mechanism

Affected security scopes: Availability, Access Control

Defence

How is it prevented and fixed?

Architecture and Design

Architecture and design approach

Detail
Implement triple-modular redundancy around security-sensitive modules.

Architecture and Design

Architecture and design approach

Detail
SEUs mostly affect SRAMs. For SRAMs storing security-critical data, implement Error-Correcting-Codes (ECC) and Address Interleaving.