This description was written by a machine and published without a person checking it. It is what the agent made of this grouping, and not a statement anybody has stood behind.
Attacks below the instruction set
A subject the papers are about. The loosest grouping, and the one to reach for last.
Attacks below the instruction set (side channels, fault injection, speculative leaks, memory disturbance) on correct implementations, plus the work that hunts them: UPEC, information flow, fuzzing.
259 references
Synthesis of RTL-based Characterization Programs for Fault Injection
Jonah Alle Monne and others (2026) · IEEE International Symposium on Hardware Oriented Security and Trust (HOST 2026)
Mechanised operational semantics of Rowhammer
Martin Berger and others (2026)
Guarded Equivalence Predicates for Scalable Formal Hardware Information-Flow Verification
Liangtao Dai and others (2026)
Information Flow Paths from RTL Traces
Calvin Deutschbein and others (2026)
Detecting speculative leaks with compositional semantics
Xaver Fabian and others (2026)
Efficient Hardware Information-Flow Tracking for Pre-Silicon Security Testing
Yu-Wei Fan and others (2026)
Rain: Transiently Leaking Data from Public Clouds Using Old Vulnerabilities
Mathé Hertogh and others (2026) · 2026 IEEE Symposium on Security and Privacy (SP) · IEEE
The 1-Bit Barrier is Universal: k-Stage Pipeline Composition and Unified Leakage Bounds for Masked NTT Hardware
Ray Iskander and others (2026)
Prime-Field PINI: Machine-Checked Composition Theorems for Post-Quantum NTT Masking
Ray Iskander and others (2026)
Compiling Countermeasures Against Fault Attacks with Tracing LLVM
Sébastien Michelland and others (2026) · Workshop on Principles of Secure Compilation (PriSC’26)
Quantifying Programs' Robustness Against Multi-Fault Control-Flow Attacks by Static Analysis
Sébastien Michelland and others (2026) · IEEE 37th International Symposium on Software Reliability Engineering (ISSRE 2026)
SoK: ARCUS: On the Efficiency and Efficacy of Hardware Fuzzing
Alenkruth Krishnan Murali and others (2026)
SPARC: Automated Root-Cause Analysis of Pre-Silicon Power Side-Channel Leakage
Andrija Nešković and others (2026) · IEEE/ACM International Conference on Computer-Aided Design (ICCAD 2026)
Controller-Datapath Aware Verification of Masked Hardware Generated via High-Level Synthesis
Nilotpola Sarma and others (2026)
SecIC3: Customizing IC3 for Hardware Security Verification
Qinhan Tan and others (2026) · Design, Automation and Test in Europe (DATE 2026)
GoldenFuzz: Generative Golden Reference Hardware Fuzzing
Lichao Wu and others (2026) · Network and Distributed System Security Symposium (NDSS 2026)
Coverage-Guided Pre-Silicon Fuzzing of Open-Source Processors based on Leakage Contracts
Gideon Geier and others (2025)
Bridging the Gap between Hardware Fuzzing and Industrial Verification
Ruiyang Ma and others (2025) · Proceedings of the Great Lakes Symposium on VLSI 2025 (GLSVLSI 2025)
Compilation beyond semantics for hardware security
Sébastien Michelland (2025)
Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
Oleksii Oleksenko and others (2025)
RTL Verification for Secure Speculation Using Contract Shadow Logic
Qinhan Tan and others (2025) · Proceedings of the 30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2025), Volume 1
BlueVeri: Formal Security Verification for Bluespec Processor Designs
Shih-Yu Wang (2025)
DejaVuzz: Disclosing Transient Execution Bugs with Dynamic Swappable Memory and Differential Information Flow Tracking Assisted Processor Fuzzing
Jinyan Xu and others (2025) · Proceedings of the 30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2025), Volume 3
Microarchitectural Insights into Unexplained Behaviors Under Clock Glitch Fault Injection
Ihab Alshaer and others (2024) · Springer Nature Switzerland
GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data Memory-Dependent Prefetchers
Boru Chen and others (2024) · USENIX Security
ConjunCT: Learning Inductive Invariants to Prove Unbounded Instruction Safety Against Microarchitectural Timing Attacks
Sushant Dinesh and others (2024) · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · IEEE Computer Society
SemPat: Using Hyperproperty-based Semantic Analysis to Generate Microarchitectural Attack Patterns
Adwait Godbole and others (2024)
RTL2MuPATH: Multi-uPATH Synthesis with Applications to Hardware Security Verification
Yao Hsiao and others (2024)
From low-level fault modeling (of a pipeline attack) to a proven hardening scheme
Sébastien Michelland and others (2024) · 33rd ACM SIGPLAN International Conference on Compiler Construction (CC 2024)
Serberus: Protecting Cryptographic Code from Spectres at Compile-Time
Nicholas Mosier and others (2024) · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · IEEE Computer Society
QTFlow: Quantitative Timing-Sensitive Information Flow for Security-Aware Hardware Design on RTL
Lennart M. Reimann and others (2024) · 2024 International VLSI Symposium on Technology, Systems and Applications (VLSI TSA)
Fuzzerfly Effect: Hardware Fuzzing for Memory Safety
Mohamadreza Rostami and others (2024) · IEEE Security and Privacy
Lost and Found in Speculation: Hybrid Speculative Vulnerability Detection
Mohamadreza Rostami and others (2024) · Proceedings of the 61st ACM/IEEE Design Automation Conference (DAC 2024)
The Emergence of Hardware Fuzzing: A Critical Review of its Significance
Raghul Saravanan and others (2024)
Cascade: CPU Fuzzing via Intricate Program Generation
Flavien Solt and others (2024) · 33rd USENIX Security Symposium (USENIX Security 24) · USENIX Association
Fault-resistant partitioning of secure CPUs for system co-verification against faults
Simon Tollec and others (2024) · IACR Transactions on Cryptographic Hardware and Embedded Systems
Formal verification of processor microarchitecture to analyze system security against fault attacks
Simon Tollec (2024)
Cross-Layer Fault Analysis for Microprocessor Architectures (CLAM)
Ihab Alshaer (2023)
A Compositional Methodology to Harden Programs Against Multi-Fault Attacks
Etienne Boespflug and others (2023) · Workshop on Fault Detection and Tolerance in Cryptography (FDTC)
Software-Only Control-Flow Integrity Against Fault Injection Attacks
François Bonnal and others (2023) · IEEE
X ray nanoprobe for fault attacks and circuit edits on 28-nm integrated circuits
Sophie Bouat and others (2023) · IEEE International Symposium on Defect and Fault Tolerance in VLSI and Nanotechnology Systems (DFT)
MAFIA: Protecting the Microarchitecture of Embedded Systems Against Fault Injection Attacks
Thomas Chamelot and others (2023) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · Institute of Electrical and Electronics Engineers
Metior: A Comprehensive Model to Evaluate Obfuscating Side-Channel Defense Schemes
Peter W. Deutsch and others (2023) · ACM
Combined Fault Injection and Real-Time Side-Channel Analysis for Android Secure-Boot Bypassing
Clément Fanjas and others (2023) · Lecture notes in computer science · Springer Science+Business Media
Work in Progress: Thwarting Timing Attacks in Microcontrollers using Fine-grained Hardware Protections
Nicolas Gaudin and others (2023) · IEEE
CompaSeC: A Compiler-Assisted Security Countermeasure to Address Instruction Skip Fault Attacks on RISC-V
Johannes Geier and others (2023) · Asia and South Pacific Design Automation Conference (ASP-DAC)
SAMVA: Static Analysis for Multi-fault Attack Paths Determination
Antoine Gicquel and others (2023) · Constructive Side-Channel Analysis and Secure Design · Springer Nature Switzerland
VerifMSI: Practical Verification of Hardware and Software Masking Schemes Implementations
Quentin Meunier and others (2023) · 20th International Conference on Security and Cryptography (SECRYPT)
Fundamentally Understanding and Solving RowHammer
Onur Mutlu and others (2023) · Proceedings of the 28th Asia and South Pacific Design Automation Conference
EC-CFI: Control-Flow Integrity via Code Encryption Counteracting Fault Attacks
Pascal Nasahl and others (2023) · IEEE International Symposium on Hardware Oriented Security and Trust (HOST)
Transient execution vulnerabilities in the security context of server hardware
Allison Randal (2023) · CL Technical Reports · University of Cambridge, Computer Laboratory
A comprehensive survey on non-invasive fault injection attacks
Amit Mazumder Shuvo and others (2023) · Cryptology ePrint Archive (2023).
Security Verification of Low-Trust Architectures
Qinhan Tan and others (2023) · ACM SIGSAC Conference on Computer and Communications Security (CCS '23)
µArchiFI: Formal Modeling and Verification Strategies for Microarchitetural Fault Injections
Simon Tollec and others (2023) · TU Wien
Specification and Verification of Side-channel Security for Open-source Processors via Leakage Contracts
Zilong Wang and others (2023) · ACM SIGSAC Conference on Computer and Communications Security (CCS)
SoK: Design Tools for Side-Channel-Aware Implementations
Ileana Buhan and others (2022) · Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security
ProcessorFuzz: Guiding Processor Fuzzing using Control and Status Registers
Sadullah Canakci and others (2022)
SCI-FI: Control Signal, Code, and Control Flow Integrity against Fault Injection Attacks
Thomas Chamelot and others (2022) · IEEE
Multi-Spot Laser Fault Injection Setup: New Possibilities for Fault Injection Attacks
Brice Colombier and others (2022) · Lecture notes in computer science · Springer Science+Business Media
An Exhaustive Approach to Detecting Transient Execution Side Channels in RTL Designs of Processors
Mohammad Rahmani Fadiheh and others (2022) · IEEE Transactions on Computers
A Systematic Review of Fault Injection Attacks on IoT Systems
Aakash Gangolli and others (2022) · Electronics · Multidisciplinary Digital Publishing Institute
TheHuzz: Instruction Fuzzing of Processors Using Golden-Reference Models for Finding Software-Exploitable Vulnerabilities
Rahul Kande and others (2022) · 31st USENIX Security Symposium (USENIX Security 22)
Detecting fault injection vulnerabilities in binaries with symbolic execution
Julien Lancia (2022) · 2022 14th International Conference on Electronics, Computers and Artificial Intelligence (ECAI) · IEEE
Processor Extensions for Hardware Instruction Replay against Fault Injection Attacks
Noura Ait Manssour and others (2022) · IEEE
Approches sémantiques des vulnérabilités matérielles
Sébastien Michelland (2022)
Axiomatic hardware-software contracts for security
Nicholas Mosier and others (2022) · Proceedings of the 49th Annual International Symposium on Computer Architecture (ISCA 2022)
SYNFI: Pre-Silicon Fault Analysis of an Open-Source Secure Element
Pascal Nasahl and others (2022) · IACR Transactions on Cryptographic Hardware and Embedded Systems · Universitatsbibliothek der Ruhr-Universitat Bochum
Revizor: Testing Black-Box CPUs against Speculation Contracts
Oleksii Oleksenko and others (2022) · Proceedings of the 27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2022)
Cats vs. Spectre: An Axiomatic Approach to Modeling Speculative Execution Attacks
Hernán Ponce-de-León and others (2022) · 2022 IEEE Symposium on Security and Privacy (SP)
CellIFT: Leveraging cells for scalable and precise dynamic information flow tracking in RTL
F. Solt and others (2022) · 31st USENIX Security Symposium (USENIX Security 22)
Augury: Using Data Memory-Dependent Prefetchers to Leak Data at Rest
Jose Rodrigo Sanchez Vicarte and others (2022) · 2022 IEEE Symposium on Security and Privacy (SP) · IEEE
Hertzbleed: Turning power Side-Channel attacks into remote timing attacks on x86
Yingchen Wang and others (2022) · 31st USENIX Security Symposium (USENIX Security)
GhostMinion: A Strictness-Ordered Cache System for Spectre Mitigation
S. Ainsworth (2021) · ACM
Speculative Privacy Tracking (SPT): Leaking Information From Speculative Execution Without Compromising Privacy
Rutvik Choudhary and others (2021) · ACM
TRAITOR: A Low-Cost Evaluation Platform for Multifault Injection
Ludovic Claudepierre and others (2021) · ACM
Hunting the Haunter — Efficient Relational Symbolic Execution for Spectre with Haunted RelSE
Lesly-Ann Daniel and others (2021) · Network and Distributed System Security Symposium
Symbolic binary-level code analysis for security. Application to the detection of microarchitectural timing attacks in cryptographic code
Lesly-Ann Daniel (2021)
Isadora: Automated Information Flow Property Generation for Hardware Designs
Calvin Deutschbein and others (2021) · Proceedings of the 5th Workshop on Attacks and Solutions in Hardware Security (ASHES 2021)
Modeling and Simulating Electromagnetic Fault Injection
M. Dumont and others (2021) · Institute of Electrical and Electronics Engineers (IEEE)
INTROSPECTRE: A Pre-Silicon Framework for Discovery and Analysis of Transient Execution Vulnerabilities
Moein Ghaniyoun and others (2021) · ACM/IEEE International Symposium on Computer Architecture (ISCA)
Coco: Co-Design and Co-Verification of Masked Software Implementations on CPUs
Barbara Gigerl and others (2021) · 30th USENIX Security Symposium (USENIX Security 21) · USENIX Association
FaultLine: Software-Based Fault Injection on Memory Transfers
Joseph Gravellier and others (2021) · IEEE International Symposium on Hardware Oriented Security and Trust (HOST)
SimpliFI: Hardware Simulation of Embedded Software Fault Attacks
Jacob Grycel and others (2021) · MDPI AG
Side-Channel Analysis of the Xilinx Zynq UltraScale+ Encryption Engine
Benjamin Hettwer and others (2021) · IACR Transactions on Cryptographic Hardware and Embedded Systems · International Association for Cryptologic Research
Rewrite to Reinforce: Rewriting the Binary to Apply Countermeasures against Fault Injection
Pantea Kiaei and others (2021) · IEEE
Combining static analysis and dynamic symbolic execution in a toolchain to detect fault injection vulnerabilities
Guilhem Lacombe and others (2021) · PROOFS Workshop (Security Proofs for Embedded Systems)
Swivel: Hardening WebAssembly against spectre
S. Narayan and others (2021) · 30th USENIX Security Symposium (USENIX Security 21)
FIVER – Robust Verification of Countermeasures against Fault Injections
Jan Richter-Brockmann and others (2021) · IACR Transactions on Cryptographic Hardware and Embedded Systems · International Association for Cryptologic Research
Physical fault injection and side-channel attacks on mobile devices: A comprehensive analysis
Carlton Shepherd and others (2021) · Elsevier BV
Fuzzing Hardware Like Software
Timothy Trippel and others (2021)
Electromagnetic fault injection against a complex CPU, toward new micro-architectural fault models
Thomas Trouchkine and others (2021) · Springer Science and Business Media LLC
Compiler-Assisted Hardening of Embedded Software Against Interrupt Latency Side-Channel Attacks
Hans Winderix and others (2021) · IEEE
A Unified Model for Gate Level Propagation Analysis
Jeremy Blackstone and others (2020)
Constant-time foundations for the new spectre era
Sunjay Cauligi and others (2020) · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
Combined software and hardware fault injection vulnerability detection
Thomas Given-Wilson and others (2020) · Springer Science and Business Media LLC
Formalising fault injection and countermeasures
Thomas Given-Wilson and others (2020) · ACM
Spectector: Principled Detection of Speculative Information Flows
Marco Guarnieri and others (2020) · 2020 IEEE Symposium on Security and Privacy (SP)
Spectre attacks: exploiting speculative execution
Paul C. Kocher and others (2020) · Communications of the ACM · Association for Computing Machinery
Meltdown: reading kernel memory from user space
M. Lipp (2020) · Association for Computing Machinery (ACM)
Plundervolt: Software-based Fault Injection Attacks against Intel SGX
Kit Murdock and others (2020) · 2020 IEEE Symposium on Security and Privacy (SP) · IEEE
ConTExT: A Generic Approach for Mitigating Spectre
Michael Schwarz and others (2020) · Network and Distributed System Security Symposium
Fault Injection Characterization on Modern CPUs: From the ISA to the Micro-Architecture
Thomas Trouchkine and others (2020) · Lecture notes in computer science · Springer Science+Business Media
An End-to-End Approach for Multi-Fault Attack Vulnerability Assessment
Vincent Werner and others (2020) · IEEE
Speculative Data-Oblivious Execution: Mobilizing Safe Prediction For Safe and Efficient Speculative Execution
Jiyong Yu and others (2020) · IEEE
SMoTherSpectre: Exploiting Speculative Execution through Port Contention
A. Bhattacharyya and others (2019) · ACM
Shaping the Glitch: Optimizing Voltage Fault Injection Attacks
Claudio Bozzato and others (2019) · Universitatsbibliothek der Ruhr-Universitat Bochum
Fault attack vulnerability assessment of binary code
Jean-Baptiste Bréjon and others (2019)
Electromagnetic Fault Injection : How Faults Occur
Mathieu Dumont and others (2019) · IEEE
Formal fault injection vulnerability detection in binaries: a software process and hardware validation
Nisrine Jafri (2019)
Spectre Attacks: Exploiting Speculative Execution
Paul Kocher and others (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · IEEE
Cross-layer analysis of software fault models and countermeasures against hardware fault attacks in a RISC-V processor
Johan Laurent and others (2019) · Elsevier BV
Fault Injection on Hidden Registers in a RISC-V Rocket Processor and Software Countermeasures
Johan Laurent and others (2019) · 2019 Design, Automation & Test in Europe Conference & Exhibition (DATE) · IEEE
RowHammer: A Retrospective
Onur Mutlu and others (2019) · Institute of Electrical and Electronics Engineers (IEEE)
Efficient invisible speculative execution through selective delay and value prediction
Christos Sakalis and others (2019) · Proceedings - International Symposium on Computer Architecture/Proceedings
A survey of electromagnetic side-channel attacks and discussion on their case-progressing potential for digital forensics
Asanka Sayakkara and others (2019) · Digital Investigation · Elsevier BV
RIDL: Rogue In-Flight Data Load
Stephan van Schaik and others (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · IEEE
NetSpectre: Read Arbitrary Memory over Network
Michael Schwarz and others (2019) · Lecture notes in computer science · Springer Science+Business Media
Attack Directories, Not Caches: Side Channel Attacks in a Non-Inclusive World
Mengjia Yan and others (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · IEEE
Data Oblivious ISA Extensions for Side Channel-Resistant and High Performance Computing
Jiyong Yu and others (2019) · Network and Distributed System Security Symposium
Formal Verification of Masked Hardware Implementations in the Presence of Glitches
Roderick Bloem and others (2018) · Advances in Cryptology - EUROCRYPT 2018 · Springer International Publishing
Fault Attacks Made Easy: Differential Fault Analysis Automation on Assembly Code
Jakub Breier and others (2018) · Universitatsbibliothek der Ruhr-Universitat Bochum
OpenSSL Bellcore's Protection Helps Fault Attack
Sebastien Carré and others (2018) · Euromicro Conference on Digital System Design (DSD)
SgxPectre Attacks: Stealing Intel Secrets from SGX Enclaves via Speculative Execution
Guoxing Chen and others (2018)
Laser Fault Injection at the CMOS 28 nm Technology Node: an Analysis of the Fault Model
Jean-Max Dutertre and others (2018) · Workshop on Fault Diagnosis and Tolerance in Cryptography
Branchscope: A new side-channel attack on directional branch predictor
D. Evtyushkin and others (2018) · 23rd International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)
Processor Hardware Security Vulnerabilities and their Detection by Unique Program Execution Checking
Mohammad Rahmani Fadiheh and others (2018)
A survey of microarchitectural timing attacks and countermeasures on contemporary hardware
Qian Ge and others (2018) · Journal of Cryptographic Engineering · Springer
An automated and scalable formal process for detecting fault injection vulnerabilities in binaries
Thomas Given-Wilson and others (2018) · Concurrency and Computation Practice and Experience · Wiley
Bridging SoftwareBased and Hardware-Based Fault Injection Vulnerability Detection
Thomas Given-Wilson and others (2018)
The State of Fault Injection Vulnerability Detection
Thomas Given-Wilson and others (2018) · Verification and Evaluation of Computer and Communication Systems (VECoS 2018)
Translation Leak-aside Buffer: Defeating Cache Side-channel Protections with TLB Attacks
B. Gras and others (2018) · USENIX Security’18
DAWG: A Defense Against Cache Timing Attacks in Speculative Execution Processors
Vladimir Kiriansky and others (2018) · Proceedings of the ... annual International Symposium on Microarchitecture/Proceedings of the annual International Symposium on Microarchitecture · Institute of Electrical and Electronics Engineers
Spectre Returns! Speculation Attacks using the Return Stack Buffer
E. M. Koruyeh and others (2018) · 12th USENIX Workshop on Offensive Technologies (WOOT 18)
Meltdown
Moritz Lipp and others (2018) · arXiv
Meltdown: Reading Kernel Memory from User Space
Moritz Lipp and others (2018) · 27th USENIX Security Symposium (USENIX Security 18) · USENIX Association
A Survey of Side-Channel Attacks on Caches and Countermeasures
Yangdi Lyu and others (2018) · Springer Science and Business Media LLC
Multidimensionality of the models and the data in the side-channel domain
Damien Marion (2018) · Agence Bibliographique de l'Enseignement Supérieur
Measuring the Impact of Spectre and Meltdown
Andrew Prout and others (2018) · IEEE High Performance Extreme Computing Conference
CheckMate: Automated Synthesis of Hardware Exploits and Security Litmus Tests
Caroline Trippel and others (2018) · 2018 51st Annual IEEE/ACM International Symposium on Microarchitecture (MICRO) · IEEE
MeltdownPrime and SpectrePrime: Automatically-Synthesized Attacks Exploiting Invalidation-Based Coherence Protocols
Caroline Trippel and others (2018)
Ridge-Based DPA: Improvement of Differential Power Analysis For Nanoscale Chips
Weijia Wang and others (2018) · IEEE Transactions on Information Forensics and Security · Institute of Electrical and Electronics Engineers (IEEE)
Capability Hardware Enhanced RISC Instructions (CHERI): Notes on the Meltdown and Spectre Attacks
Robert N. M. Watson and others (2018) · CL Technical Reports
InvisiSpec: Making Speculative Execution Invisible in the Cache Hierarchy
Mengjia Yan and others (2018) · IEEE/ACM International Symposium on Microarchitecture (MICRO) · Institute of Electrical and Electronics Engineers
A Low-cost Function Call Protection Mechanism Against Instruction Skip Fault Attacks
Yuan Yao and others (2018)
Fault Attacks on Embedded Software: New Directions in Modeling, Design, and Mitigation
Bilgiday Yuce (2018)
Fault Attacks on Secure Embedded Software: Threats, Design, and Evaluation
Bilgiday Yuce and others (2018) · Springer Science and Business Media LLC
Register transfer level information flow tracking for provably secure hardware design
Armaiti Ardeshiricham and others (2017) · Design, Automation, and Test in Europe
Automated Combination of Tolerance and Control Flow Integrity Countermeasures against Multiple Fault Attacks
Thierno Barry and others (2017) · European LLVM Developers Meeting
Arbitrary Precision and Complexity Tradeoffs for Gate-Level Information Flow Tracking
A. Becker and others (2017) · ACM
AutoFault: Towards Automatic Construction of Algebraic Fault Attacks
Jan Burchard and others (2017) · Workshop on Fault Diagnosis and Tolerance in Cryptography
An Automated Formal Process for Detecting Fault Injection Vulnerabilities in Binaries and Case Study on PRESENT
Thomas Given-Wilson and others (2017) · 2017 IEEE Trustcom/BigDataSE/ICESS · IEEE
KASLR is Dead: Long Live KASLR
Daniel Gruss and others (2017) · Engineering Secure Software and Systems · Springer
Buffer overflow attack with multiple fault injection and a proven countermeasure
Shoei Nashimoto and others (2017) · Springer Science and Business Media LLC
Electromagnetic fault injection: the curse of flip-flops
S. Ordas and others (2017) · Springer Science and Business Media LLC
Fault Attacks, Injection Techniques and Tools for Simulation
Roberta Piscitelli and others (2017) · Springer International Publishing
Compiler-Assisted Loop Hardening Against Fault Attacks
Julien Proy and others (2017) · ACM Transactions on Architecture and Code Optimization · Association for Computing Machinery
Systematic Classification of Side-Channel Attacks: A Case Study for Mobile Devices
Raphael Spreitzer and others (2017) · Institute of Electrical and Electronics Engineers (IEEE)
On the Power of Optical Contactless Probing: Attacking Bitstream Encryption of FPGAs
Shahin Tajik and others (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS '17) · Association for Computing Machinery
Escalating Privileges in Linux Using Voltage Fault Injection
Niek Timmers and others (2017) · IEEE
Laser-Induced Fault Injection on Smartphone Bypassing the Secure Boot
Aurelien Vasselle and others (2017) · 2017 Workshop on Fault Diagnosis and Tolerance in Cryptography (FDTC) · IEEE
Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX
Wenhao Wang and others (2017) · ACM SIGSAC Conference on Computer and Communications Security (CCS)
CacheBleed: a timing attack on OpenSSL constant-time RSA
Yuval Yarom and others (2017) · Journal of Cryptographic Engineering · Springer Science+Business Media
Compilation of a Countermeasure Against Instruction-Skip Fault Attacks
Thierno Barry and others (2016)
Code Analysis and Certification Process of Secure Hardware against Fault Injection
Louis Dureuil (2016)
FISSC: A Fault Injection and Simulation Secure Collection
Louis Dureuil and others (2016) · Computer Safety, Reliability, and Security · Springer International Publishing
Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript
Daniel Gruss and others (2016) · Lecture notes in computer science · Springer Science+Business Media
Vulnerability Prediction Against Fault Attacks
Nisrine Jafri and others (2016) · ERCIM News (2016).
A new approach for rowhammer attacks
Rui Qiao and others (2016) · IEEE International Symposium on Hardware Oriented Security and Trust (HOST)
Precise Laser Fault Injections into 90 nm and 45 nm SRAM-cells
Bodo Selmke and others (2016) · Smart Card Research and Advanced Applications · Springer International Publishing
Bypassing Secure Boot using Fault Injection, 2016.
Niek Timmers and others (2016)
Controlling PC on ARM Using Fault Injection
Niek Timmers and others (2016) · Workshop on Fault Diagnosis and Tolerance in Cryptography
The Rowhammer Attack Injection Methodology
Keun Soo Yim (2016) · Proceedings/Proceedings - Symposium on Reliable Distributed Systems · Institute of Electrical and Electronics Engineers
Software Fault Resistance is Futile: Effective Single-Glitch Attacks
Bilgiday Yuce and others (2016) · 2016 Workshop on Fault Diagnosis and Tolerance in Cryptography (FDTC) · IEEE
Multiple Fault Attack on PRESENT with a Hardware Trojan Implementation in FPGA
Jakub Breier and others (2015)
From Code Review to Fault Injection Attacks: Filling the Gap Using Fault Model Inference
Louis Dureuil and others (2015) · Lecture notes in computer science · Springer Science+Business Media
Differential Fault Intensity Analysis on PRESENT and LED Block Ciphers
Nahid Farhady Ghalaty and others (2015) · Lecture notes in computer science · Springer Science+Business Media
QEMU-Based Fault Injection for a System-Level Analysis of Software Countermeasures Against Fault Attacks
Andrea Höller and others (2015) · Euromicro Conference on Digital System Design (DSD)
Laser fault injection into SRAM cells: Picosecond versus nanosecond pulses
Marc Lacruche and others (2015) · 2015 IEEE 21st International On-Line Testing Symposium (IOLTS) · IEEE
A Biased Fault Attack on the Time Redundancy Countermeasure for AES
Sikhar Patranabis and others (2015) · Constructive Side-Channel Analysis and Secure Design · Springer International Publishing
High precision fault injections on the instruction cache of ARMv7-M architectures
Lionel Rivière and others (2015) · IEEE
A novel simulation approach for fault injection resistance evaluation on smart cards
Lionel Rivière (2015) · IEEE
Securing software implementations against fault injection attacks on embedded systems
Lionel Rivière (2015)
Exploiting the DRAM rowhammer bug to gain kernel privileges
Mark Seaborn and others (2015) · Black Hat (2015).
Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems
Yuanzhong Xu and others (2015) · IEEE
Improving Fault Attacks on Embedded Software Using RISC Pipeline Characterization
Bilgiday Yuce and others (2015) · IEEE
Synthesis of Fault Attacks on Cryptographic Implementations
Gilles Barthe and others (2014) · ACM
Idea: Embedded Fault Injection Simulator on Smartcard
Maël Berthier and others (2014) · Lecture notes in computer science · Springer Science+Business Media
Side-channel vulnerability metrics: SVF vs. CSV
J. Demme and others (2014) · Proc. of 11th Annual Workshop on Duplicating
Ciphertext-Only Fault Attacks on PRESENT
Fabrizio De Santis and others (2014) · Lightweight Cryptography for Security and Privacy · Springer International Publishing
Differential Fault Intensity Analysis
Nahid Farhady Ghalaty and others (2014) · Workshop on Fault Diagnosis and Tolerance in Cryptography
Power supply glitch attacks: Design and evaluation of detection circuits
Kamil Gomina and others (2014) · IEEE
Gate-Level Information Flow Tracking for Security Lattices
W. Hu and others (2014) · Association for Computing Machinery (ACM)
The Temperature Side Channel and Heating Fault Attacks
Michael Hutter and others (2014) · Springer International Publishing
Flipping bits in memory without accessing them: An experimental study of DRAM disturbance errors
Yoongu Kim and others (2014) · 2014 ACM/IEEE 41st International Symposium on Computer Architecture (ISCA)
Clock Glitch Attacks in the Presence of Heating
Thomas Korak and others (2014) · IEEE
High-Level Simulation for Multiple Fault Injection Evaluation
Maxime Puys and others (2014) · Lecture notes in computer science · Springer Science+Business Media
A formal proof of countermeasures against fault injection attacks on CRT-RSA
Pablo Rauzy and others (2014) · Journal of Cryptographic Engineering · Springer Science+Business Media
Combining High-Level and Low-Level Approaches to Evaluate Software Implementations Robustness Against Multiple Fault Injection Attacks
Lionel Rivière and others (2014) · Lecture notes in computer science · Springer Science+Business Media
Differential Fault Analysis on the Families of SIMON and SPECK Ciphers
Harshal Tupsamudre and others (2014) · Workshop on Fault Diagnosis and Tolerance in Cryptography
FLUSH+ RELOAD: a high resolution, low noise, L3 cache side-channel attack.
Y. Yarom and others (2014) · USENIX Security Symposium
Efficiency of a glitch detector against electromagnetic fault injection
Loic Zussa and others (2014) · IEEE Conference Publications
New differential fault analysis on PRESENT
Nasour Bagheri and others (2013) · EURASIP Journal on Advances in Signal Processing · Springer Science+Business Media
Sleuth: Automated Verification of Software Power Analysis Countermeasures
Ali Galip Bayrak and others (2013) · Springer Berlin Heidelberg
Differential Power Analysis of HMAC SHA-2 in the Hamming Weight Model
Sonia Belaïd and others (2013) · SCITEPRESS - Science and and Technology Publications
Formal verification of a CRT-RSA implementation against fault attacks
Maria Christofi and others (2013) · Journal of Cryptographic Engineering · Springer Science+Business Media
Practical Timing Side Channel Attacks against Kernel Space ASLR
Ralf Hund and others (2013) · IEEE
Hardware Designer's Guide to Fault Attacks
Duško Karaklajić and others (2013) · Institute of Electrical and Electronics Engineers (IEEE)
Side-channel attacks on the bitstream encryption mechanism of Altera Stratix II: facilitating black-box analysis using software reverse-engineering
A. Moradi and others (2013) · ACM
Electromagnetic Fault Injection: Towards a Fault Model on a 32-bit Microcontroller
Nicolas Moro and others (2013) · 2013 Workshop on Fault Diagnosis and Tolerance in Cryptography · IEEE
Masking against Side-Channel Attacks: A Formal Security Proof
Emmanuel Prouff and others (2013) · Springer Berlin Heidelberg
Frontside laser fault injection on cryptosystems - Application to the AES' last round -
Cyril Roscian and others (2013) · 2013 IEEE International Symposium on Hardware-Oriented Security and Trust (HOST) · IEEE
Comprehensive Analysis of Software Countermeasures against Fault Attacks
Nikolaus Theißing and others (2013) · IEEE Conference Publications
Fault Injection Attacks on Cryptographic Devices: Theory, Practice, and Countermeasures
Alessandro Barenghi and others (2012) · Institute of Electrical and Electronics Engineers (IEEE)
Side-channel vulnerability factor: A metric for measuring information leakage
John Demme and others (2012) · IEEE
Constant time encryption as a countermeasure against remote cache timing attacks
Darshana Jayasinghe and others (2012) · IEEE International Conference on Information and Automation for Sustainability (ICIAfS)
A Fault Attack on the LED Block Cipher
Philipp Jovanovic and others (2012) · Springer Berlin Heidelberg
Yet Another Fault Injection Technique: By Forward Body Biasing Injection
Philippe Maurine and others (2012) · YACC’2012: Yet Another Conference on Cryptography
Simple photonic emission analysis of aes: photonic side channel analysis for the rest of us
Alexander Schlösser and others (2012) · Cryptographic Hardware and Embedded Systems–CHES 2012: 14th International Workshop, Leuven, Belgium, September 9-12
A Differential Fault Analysis on AES Key Schedule Using Single Fault
Sk. Subidh Ali and others (2011) · IEEE
An on-chip glitchy-clock generator for testing fault injection attacks
Sho Endo and others (2011) · Journal of Cryptographic Engineering · Springer Science and Business Media LLC
Cache Games -- Bringing Access-Based Cache Attacks on AES to Practice
David Gullasch and others (2011) · IEEE
SmartCM a smart card fault injection simulator
Jean-Baptiste Machemie and others (2011) · IEEE International Workshop on Information Forensics and Security
Combined Fault and Side-Channel Attack on Protected Implementations of AES
Thomas Roche and others (2011) · Smart Card Research and Advanced Applications · Springer Berlin Heidelberg
Differential Fault Analysis of the Advanced Encryption Standard Using a Single Fault
Michael Tunstall and others (2011) · Information Security Theory and Practice. Security and Privacy of Mobile Devices in Wireless Communication · Springer Berlin Heidelberg
Practical Optical Fault Injection on Secure Microcontrollers
Jasper G. J. van Woudenberg and others (2011) · Workshop on Fault Diagnosis and Tolerance in Cryptography
The Fault Attack Jungle - A Classification Model to Guide You
Ingrid M.R. Verbauwhede and others (2011) · Workshop on Fault Diagnosis and Tolerance in Cryptography
Acoustic side-channel attacks on printers
M. Backes and others (2010) · 19th USENIX Security Symposium
Countermeasures against fault attacks on software implemented AES: effectiveness and cost
Alessandro Barenghi and others (2010) · Proceedings of the 5th Workshop on Embedded Systems Security · ACM
Low voltage fault attacks to AES
Alessandro Barenghi and others (2010) · IEEE International Symposium on Hardware Oriented Security and Trust (HOST)
A Predictive Model for Cache-Based Side Channels in Multicore and Multithreaded Microprocessors
Leonid Domnitser and others (2010) · Computer Network Security · Springer Berlin Heidelberg
Side-Channel Analysis of Cryptographic Software via Early-Terminating Multiplications
Johann Großschädl and others (2010) · Information, Security and Cryptology – ICISC 2009 · Springer Berlin Heidelberg
Fault Injection Resilience
Sylvain Guilley (2010) · IEEE
Electromagnetic information leakage for side-channel analysis of cryptographic modules
N Homma and others (2010) · IEEE
Differential Fault Analysis on PRESENT Key Schedule
Gaoli Wang and others (2010) · International Conference on Computational Intelligence and Security (CIS)
Low Voltage Fault Attacks on the RSA Cryptosystem
Alessandro Barenghi and others (2009) · Workshop on Fault Diagnosis and Tolerance in Cryptography
Optical Fault Attacks on AES: A Threat in Violet
J. Schmidt and others (2009) · IEEE
Complete information flow tracking from the gates up
Mohit Tiwari and others (2009) · ACM SIGPLAN Notices · Association for Computing Machinery
Fault injection platform for block ciphers
Brian Baldwin and others (2008) · IEE
New Differential Fault Analysis on AES Key Schedule: Two Faults Are Enough
Chong Hee Kim and others (2008) · Smart Card Research and Advanced Applications · Springer Berlin Heidelberg
Deconstructing new cache designs for thwarting software cache-based side channel attacks
Jingfei Kong and others (2008) · ACM
A Practical Fault Attack on Square and Multiply
Jörn-Marc Schmidt and others (2008) · IEEE
Passive and Active Combined Attacks: Combining Fault Attacks and Side Channel Analysis
Frederic Amiel and others (2007) · IEEE
Fault Attacks for CRT Based RSA: New Attacks, New Results, and New Countermeasures
Chong Hee Kim and others (2007) · Lecture notes in computer science · Springer Science+Business Media
Faults, Injection Methods, and Fault Attacks
Chong Hee Kim and others (2007) · IEEE Design & Test of Computers · Institute of Electrical and Electronics Engineers
The Sorcerer's Apprentice Guide to Fault Attacks
H. Bar-El and others (2006) · Institute of Electrical and Electronics Engineers (IEEE)
Security evaluation at design time against optical fault injection attacks
Huixian Li and others (2006) · IEE proceedings. Information security
A Generalized Method of Differential Fault Attack Against AES Cryptosystem
A. Moradi and others (2006) · Springer Berlin Heidelberg
Cache Attacks and Countermeasures: The Case of AES
Dag Arne Osvik and others (2006) · Springer Berlin Heidelberg
Optically Enhanced Position-Locked Power Analysis
Sergei P. Skorobogatov (2006) · Lecture notes in computer science · Springer Science+Business Media
Cache-timing attacks on aes
D. J. Bernstein (2005) · Tech. Rep.
DPA on quasi delay insensitive asynchronous circuits: formalization and improvement
Ghislain Fraidy Bouesse and others (2005) · Design, Automation and Test in Europe (DATE 2005)
Correlation Power Analysis with a Leakage Model
Éric Brier and others (2004) · Lecture notes in computer science · Springer Science+Business Media
Differential Fault Analysis on A.E.S
Pierre Dusart and others (2003) · Lecture notes in computer science · Springer Science+Business Media
A Differential Fault Attack Technique against SPN Structures, with Application to the AES and Khazad
Gilles Piret and others (2003) · Lecture notes in computer science · Springer Science+Business Media
ElectroMagnetic Analysis (EMA): Measures and Counter-measures for Smart Cards
Jean-Jacques Quisquater and others (2001) · Lecture notes in computer science · Springer Science+Business Media
Differential Power Analysis
Paul Kocher and others (1999) · Advances in Cryptology — CRYPTO '99 · Springer Science+Business Media
Differential fault analysis of secret key cryptosystems
Eli Biham and others (1997) · Lecture notes in computer science · Springer Science+Business Media
Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems
Paul C. Kocher (1996) · Advances in Cryptology — CRYPTO '96 · Springer Berlin Heidelberg