COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-624

Hardware Fault Injection

The adversary uses disruptive signals or events, or alters the physical environment a device operates in, to cause faulty behavior in electronic devices. This can include electromagnetic pulses, laser pulses, clock glitches, ambient temperature extremes, and more. When performed in a controlled manner on devices performing cryptographic operations, this faulty behavior can be exploited to derive secret key information.

Soyutlama

Meta

Tipik ciddiyet

High

Saldırı ihtimali

Low

Saldırıyı anla

Bu saldırı kalıbı nedir?

The adversary uses disruptive signals or events, or alters the physical environment a device operates in, to cause faulty behavior in electronic devices. This can include electromagnetic pulses, laser pulses, clock glitches, ambient temperature extremes, and more. When performed in a controlled manner on devices performing cryptographic operations, this faulty behavior can be exploited to derive secret key information.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • Physical access to the system
  • The adversary must be cognizant of where fault injection vulnerabilities exist in the system in order to leverage them for exploitation.

Gerekli beceri

  • High: Adversaries require non-trivial technical skills to create and implement fault injection attacks. Although this style of attack has become easier (commercial equipment and training classes are available to perform these attacks), they usual require significant setup and experimentation time during which physical access to the device is required.

Gerekli kaynak

  • The relevant sensors and tools to detect and analyze fault/side-channel data from a system. A tool capable of injecting fault/side-channel data into a system or application.

Etki

Başarılı saldırı neye yol açar?

Read DataBypass Protection MechanismHide Activities

Etkilenen alanlar: Confidentiality

Execute Unauthorized Commands

Etkilenen alanlar: Integrity

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
Implement robust physical security countermeasures and monitoring.
CAPEC-624: Hardware Fault Injection — DayBreach Saldırı Sözlüğü · DayBreach