Methods and Systems for Side Channel Analysis Detection and Protection

摘要

A computing device may use machine learning techniques to determine whether a side channel attack is underway and perform obfuscation operations (e.g., operations to raise the noise floor) or other similar operations to stop or prevent a detected side channel attack. The computing device may determine that a side channel attack is underway in response to determining that the computing device is in airplane mode, that the battery of the computing device the battery has been replaced with a stable DC power supply, that the touch-screen display of the computing device has been disconnected, that there are continuous calls to a cipher application programming interface (API) using the same cipher key, that there has been tampering with a behavioral analysis engine of the computing device, or any combination thereof.

主权项

1. A method of detecting side channel attacks in a computing device, comprising:
monitoring an activity of the computing device; generating a behavior vector based on the monitored activity; and applying the generated behavior vector to a classifier model to determine whether a side channel attack is underway.