Process-aware side channel monitoring for embedded control system security

David Paul-Pena; Prashanth Krishnamurthy; Ramesh Karri; Farshad Khorrami

doi:10.1109/VLSI-SoC.2017.8203468

Process-aware side channel monitoring for embedded control system security

David Paul-Pena, Prashanth Krishnamurthy, Ramesh Karri, Farshad Khorrami

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Cyber-physical systems (CPS) are interconnections of heterogeneous hardware and software components (e.g., sensors, actuators, physical systems/processes, computational nodes and controllers, and communication subsystems). Increasing network connectivity of CPS computational nodes facilitates maintenance and on-demand reprogrammability and reduces operator workload. However, such increasing connectivity also raises the potential for cyber-attacks that attempt unauthorized modifications of run-time parameters or control logic in the computational nodes to hamper process stability or performance. In this paper, we analyze the effectiveness of real-time monitoring using digital and analog side channels. While analog side channels might not typically provide sufficient granularity to observe each iteration of a periodic loop in the code in the CPS device, the temporal averaging inherent to side channel sensory modalities enables observation of persistent changes to the contents of a computational loop through their resulting effect on the level of activity of the device. Changes to code can be detected by observing readings from side channel sensors over a period of time. Experimental studies are performed on an ARM-based single board computer.

Original language	English (US)
Title of host publication	25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017 - Proceedings
Publisher	IEEE Computer Society
ISBN (Electronic)	9781538628805
DOIs	https://doi.org/10.1109/VLSI-SoC.2017.8203468
State	Published - Dec 13 2017
Event	25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017 - Abu Dhabi, United Arab Emirates Duration: Oct 23 2017 → Oct 25 2017

Publication series

Name	IEEE/IFIP International Conference on VLSI and System-on-Chip, VLSI-SoC
ISSN (Print)	2324-8432
ISSN (Electronic)	2324-8440

Other

Other	25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017
Country	United Arab Emirates
City	Abu Dhabi
Period	10/23/17 → 10/25/17

Keywords

Acoustic
Control systems
Monitoring
Security
Side channels
Thermal

ASJC Scopus subject areas

Hardware and Architecture
Software
Electrical and Electronic Engineering

Access to Document

10.1109/VLSI-SoC.2017.8203468

Fingerprint Dive into the research topics of 'Process-aware side channel monitoring for embedded control system security'. Together they form a unique fingerprint.

Cite this

Paul-Pena, D., Krishnamurthy, P., Karri, R., & Khorrami, F. (2017). Process-aware side channel monitoring for embedded control system security. In 25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017 - Proceedings [8203468] (IEEE/IFIP International Conference on VLSI and System-on-Chip, VLSI-SoC). IEEE Computer Society. https://doi.org/10.1109/VLSI-SoC.2017.8203468

Process-aware side channel monitoring for embedded control system security. / Paul-Pena, David; Krishnamurthy, Prashanth; Karri, Ramesh ; Khorrami, Farshad.

25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017 - Proceedings. IEEE Computer Society, 2017. 8203468 (IEEE/IFIP International Conference on VLSI and System-on-Chip, VLSI-SoC).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Paul-Pena, D, Krishnamurthy, P, Karri, R & Khorrami, F 2017, Process-aware side channel monitoring for embedded control system security. in 25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017 - Proceedings., 8203468, IEEE/IFIP International Conference on VLSI and System-on-Chip, VLSI-SoC, IEEE Computer Society, 25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017, Abu Dhabi, United Arab Emirates, 10/23/17. https://doi.org/10.1109/VLSI-SoC.2017.8203468

Paul-Pena D, Krishnamurthy P, Karri R , Khorrami F. Process-aware side channel monitoring for embedded control system security. In 25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017 - Proceedings. IEEE Computer Society. 2017. 8203468. (IEEE/IFIP International Conference on VLSI and System-on-Chip, VLSI-SoC). https://doi.org/10.1109/VLSI-SoC.2017.8203468

@inproceedings{071cf137adc5486eacc8c2dfb8f316ca,

title = "Process-aware side channel monitoring for embedded control system security",

abstract = "Cyber-physical systems (CPS) are interconnections of heterogeneous hardware and software components (e.g., sensors, actuators, physical systems/processes, computational nodes and controllers, and communication subsystems). Increasing network connectivity of CPS computational nodes facilitates maintenance and on-demand reprogrammability and reduces operator workload. However, such increasing connectivity also raises the potential for cyber-attacks that attempt unauthorized modifications of run-time parameters or control logic in the computational nodes to hamper process stability or performance. In this paper, we analyze the effectiveness of real-time monitoring using digital and analog side channels. While analog side channels might not typically provide sufficient granularity to observe each iteration of a periodic loop in the code in the CPS device, the temporal averaging inherent to side channel sensory modalities enables observation of persistent changes to the contents of a computational loop through their resulting effect on the level of activity of the device. Changes to code can be detected by observing readings from side channel sensors over a period of time. Experimental studies are performed on an ARM-based single board computer.",

keywords = "Acoustic, Control systems, Monitoring, Security, Side channels, Thermal",

author = "David Paul-Pena and Prashanth Krishnamurthy and Ramesh Karri and Farshad Khorrami",

year = "2017",

month = dec,

day = "13",

doi = "10.1109/VLSI-SoC.2017.8203468",

language = "English (US)",

series = "IEEE/IFIP International Conference on VLSI and System-on-Chip, VLSI-SoC",

publisher = "IEEE Computer Society",

booktitle = "25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017 - Proceedings",

note = "25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017 ; Conference date: 23-10-2017 Through 25-10-2017",

}

TY - GEN

T1 - Process-aware side channel monitoring for embedded control system security

AU - Paul-Pena, David

AU - Krishnamurthy, Prashanth

AU - Karri, Ramesh

AU - Khorrami, Farshad

PY - 2017/12/13

Y1 - 2017/12/13

N2 - Cyber-physical systems (CPS) are interconnections of heterogeneous hardware and software components (e.g., sensors, actuators, physical systems/processes, computational nodes and controllers, and communication subsystems). Increasing network connectivity of CPS computational nodes facilitates maintenance and on-demand reprogrammability and reduces operator workload. However, such increasing connectivity also raises the potential for cyber-attacks that attempt unauthorized modifications of run-time parameters or control logic in the computational nodes to hamper process stability or performance. In this paper, we analyze the effectiveness of real-time monitoring using digital and analog side channels. While analog side channels might not typically provide sufficient granularity to observe each iteration of a periodic loop in the code in the CPS device, the temporal averaging inherent to side channel sensory modalities enables observation of persistent changes to the contents of a computational loop through their resulting effect on the level of activity of the device. Changes to code can be detected by observing readings from side channel sensors over a period of time. Experimental studies are performed on an ARM-based single board computer.

AB - Cyber-physical systems (CPS) are interconnections of heterogeneous hardware and software components (e.g., sensors, actuators, physical systems/processes, computational nodes and controllers, and communication subsystems). Increasing network connectivity of CPS computational nodes facilitates maintenance and on-demand reprogrammability and reduces operator workload. However, such increasing connectivity also raises the potential for cyber-attacks that attempt unauthorized modifications of run-time parameters or control logic in the computational nodes to hamper process stability or performance. In this paper, we analyze the effectiveness of real-time monitoring using digital and analog side channels. While analog side channels might not typically provide sufficient granularity to observe each iteration of a periodic loop in the code in the CPS device, the temporal averaging inherent to side channel sensory modalities enables observation of persistent changes to the contents of a computational loop through their resulting effect on the level of activity of the device. Changes to code can be detected by observing readings from side channel sensors over a period of time. Experimental studies are performed on an ARM-based single board computer.

KW - Acoustic

KW - Control systems

KW - Monitoring

KW - Security

KW - Side channels

KW - Thermal

UR - http://www.scopus.com/inward/record.url?scp=85048067055&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85048067055&partnerID=8YFLogxK

U2 - 10.1109/VLSI-SoC.2017.8203468

DO - 10.1109/VLSI-SoC.2017.8203468

M3 - Conference contribution

AN - SCOPUS:85048067055

T3 - IEEE/IFIP International Conference on VLSI and System-on-Chip, VLSI-SoC

BT - 25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017 - Proceedings

PB - IEEE Computer Society

T2 - 25th IFIP/IEEE International Conference on Very Large Scale Integration, VLSI-SoC 2017

Y2 - 23 October 2017 through 25 October 2017

ER -