How Safe Is Your Swipe?

By -
.

Thinking Like Hackers, Programmers Find Security Loopholes in 'Secure' Microchips

ScienceDaily (Sep. 27, 2010) — Used in a variety of products from credit cards to satellite televisions, secure chips are designed to keep encoded data safe. But hackers continue to develop methods to crack the chips' security codes and access the information within.

Thinking like hackers, Prof. Avishai Wool and his Ph.D. student Yossi Oren of Tel Aviv University's School of Electrical Engineering have developed an innovative way of extracting information from chip technology. By combining modern cryptology methods with constraint programming -- an area of computer science designed to solve a series of complex equations -- Prof. Wool and Oren were able to extract more information from secure chips. Their research, which could lead to important new advances in computer security, was recently presented at the 12th Workshop on Cryptographic Hardware and Embedded Systems (CHES) in Santa Barbara, CA.

Prof. Wool explains that cryptologists like himself try to stay one step ahead of attackers by thinking the way they do. "Companies need to know how secure their chip is, and how it can be cracked," he explains. "They need to know what they're up against."

Blocking out the "noise"
According to the researchers, the Achilles-heel of contemporary secure chips can be found in the chip's power supply. When a chip is in use, says Prof. Wool, it employs a miniscule amount of power. But the amount of this power, and how it fluctuates, depends on the kind of information the chip contains. By measuring the power fluctuations with an oscilloscope, a standard piece of lab equipment, and analyzing the data using appropriate algorithms, a potential hacker could decipher the information that the chip contains.

But extracting information in this way, through what the researchers call a "side channel," can be complex. When you do a power trace, says Prof. Wool, there is a lot of "noise" -- inaccuracies that result from the different activities the chip is doing at the time. He and Oren have now identified a method for blocking out the "noise" that has proved to be more effective than previous methods.

When applied to information gathered from a power source, a computer program like the one Prof. Wool and Oren have created can sort through this "noise" to deliver a more accurate analysis of a chip's secret contents. Their program is based in "constraint programming" -- the same computer programming approach used for complex scheduling programs like those used in the travel industry.

Knowing your enemy
No chip can be 100% secure, Prof. Wool admits. But he also stresses that it's important to explore the boundaries of how secure information can be extracted from these chips. An attacker could have access to a variety of computer technologies and equipment -- so researchers need to know the type of resources required to break a code, explains Prof. Wool. He has provided information to U.S. passport authorities on how to make the chips in passports more secure.
"We need to think like the attackers," he says, "in order to raise the bar against them."
.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Popular posts from this blog

Kayastha

By -
Image
.                                       Chitragupt Maharaj                           Progenitor of the Kayasthas                        Left: Devi Sudakhina and four Sons, Right: Devi Iravati & Eight Sons   Kāyastha   or   Kayasth   ( Hindi :   कायस्थ ) is a   caste /ethnic-group of India. They are the only sect who are referred to as direct descendants of a Vedic God in the religious texts and the only ancestor worshipping sect of Hinduism also called Chitranshi/Devputra [1] . They are said, in the Vedas   and   Puranas , to have a dual-caste status i.e.   Brahmin   and   Kshatriya . They are mainly spread across   North India   and are a sub-sect of Brahmins   whose ancient p...
Read more

All About GOA

By -
= = = = = = = http://www.bits-goa.ac.in/About%20BPGC/BITS%20360/index.html Goa is India 's smallest state in terms of area and the fourth smallest in terms of population . Located on the west coast of India in the region known as the Konkan , it is bounded by the state of Maharashtra to the north, and by Karnataka to the east and south, while the Arabian Sea forms its western coast. Panaji is the state's capital. Vasco da Gama is the largest city. The historic city of Margao still exhibits the influence of Portuguese culture. The Portuguese first landed in Goa as merchants, in the early 16th century, and conquered it soon thereafter. The Portuguese overseas territory existed for about 450 years, until it was annexed by India in 1961. Renowned for its beaches , places of worship and world heritage architecture , Goa is visited by large numbers of international and domestic tourists each year. It also has rich flora and fauna , owing to its location on the West...
Read more

Steam Engineering.

By -
Image
. http://www.spiraxsarco.com/resources/steam-engineering-tutorials.asp   These tutorials explain the principles of steam engineering and heat transfer. They also provide a comprehensive engineering best practice guide covering all aspects of steam and condensate systems; from the boiler house and steam distribution system up to the point of use; through the condensate recovery system and returning to the boiler. Virtually all major applications and products are discussed. 1.        Introduction 2.        Steam Engineering Principles and Heat Transfer 3.        The Boiler House 4.        Flowmetering 5.        Basic Control Theory 6.        Control Hardware: Electric/Pneumatic Actuation 7.        Control Hardware: Self-acting Actuation 8.   ...
Read more