Black Hat USA 2014: Go Around the SideSometimes the path of least resistance is also the path less traveled; if the software's unyielding, make an end run around it and attack the hardware. Today's two Black Hat 2014 Training highlights delve into the perhaps less familiar world of attacks on embedded hardware.
Side-channel power analysis can seem straight-up spooky in its ability to extract secrets from hardware systems without the need for exploits or coding vulnerabilities. How can you defend against such an attack, or from clock and power glitching? Advanced Embedded Hardware Hacking: Power Analysis and Glitching with the ChipWhisperer will use hands-on exercises to teach you the theory and practice of these attacks using the open-source hardware and software tools of the ChipWhisperer project. The low-cost ChipWhisperer suite makes side-channel power analysis more accessible than ever, so don't miss this opportunity to add these techniques to your arsenal.
In a world where security mechanisms like secure boot and trusted execution environments rely on the underlying hardware being trustworthy, and the lion's share of research focuses on hardening software, maybe it's easiest to just attack the hardware. This is the premise behind Breaking Into Embedded Devices: Side-Channel Analysis and Fault Injection, which will show you how to combine side-channel analysis with fault injection (pushing hardware into out-of-spec operating conditions to introduce errors) to break a DES key, for example, without fussing over software. The Training will also focus on defense, challenging you to devise effective countermeasures which will then be put to the test.
Ready to register? Early-bird rates are available until June 2. Please visit Black Hat USA 2014's registration page to get started.