ABSTRACT
The simultaneous use of FPGAs by multiple tenants has recently been shown to potentially expose sensitive information without the victim's knowledge. For example, neighboring long wires in SRAM-based FPGAs have been shown to allow for clandestine data exfiltration. In this work, we explore distinct characteristics of this signal crosstalk that could be used to enhance or prevent information leakage. First, we develop a mechanism to characterize the crosstalk coupling that exists between neighboring wires at the femtosecond scale. Second, we show that it is possible to reverse engineer channel layouts by determining which pairs of routing resources/links in the channel exhibit coupling to each other even if this information is not provided by the FPGA vendor. To fully characterize these effects, we examine long wire coupling on different types of wires across three devices implemented in different technology nodes from 65 to 20 nm. We experimentally demonstrate that information leakage is apparent for all three FPGA families.
- I. Giechaskiel, K. B. Rasmussen, and K. Eguro. 2018. Leaky Wires: Information Leakage and Covert Communication Between FPGA Long Wires. In Proceedings of the 2018 on Asia Conference on Computer and Communications Security (ASIACCS '18). ACM, New York, NY, USA, 15--27. Google ScholarDigital Library
- D. R. E. Gnad, F. Oboril, S. Kiamehr, and M. B. Tahoori. 2018. An Experimental Evaluation and Analysis of Transient Voltage Fluctuations in FPGAs. IEEE Transactions on Very Large Scale Integration (VLSI) Systems 26, 10 (Oct 2018), 1817--1830.Google ScholarCross Ref
- B. Gojman, S. Nalmela, N. Mehta, N. Howarth, and A. DeHon. 2015. GROK-LAB: Generating real on-chip knowledge for intra-cluster delays using timing extraction. ACM Transactions on Reconfigurable Technology and Systems (TRETS) 7, 4 (2015), 32. Google ScholarDigital Library
- C. Ramesh, S. B. Patil, S. N. Dhanuskodi, G. Provelengios, S. Pillement, D. Holcomb, and R. Tessier. 2018. FPGA side channel attacks without physical access. In IEEE International Symposium on Field-Programmable Custom Computing Machines. 45--52.Google Scholar
- F. Schellenberg, D. R. E. Gnad, A. Moradi, and M. B. Tahoori. 2018. An inside job: Remote power analysis attacks on FPGAs. In Design, Automation & Test in Europe Conference & Exhibition, DATE 2018.Google Scholar
- S. Yazdanshenas and V. Betz. 2018. Interconnect Solutions for Virtualized Field- Programmable Gate Arrays. IEEE Access 6 (Feb. 2018), 10497--10507.Google Scholar
- H. Yu, Q. Xu, and P. H. W. Leong. 2010. Fine-grained characterization of process variation in FPGAs. In 2010 International Conference on Field-Programmable Technology. 138--145.Google ScholarCross Ref
- M. Zhao and G. E. Suh. 2018. FPGA-based remote power side-channel attacks. In 2018 IEEE Symposium on Security and Privacy (SP). IEEE, 229--244.Google Scholar
Recommendations
Reducing leakage in a high-performance deep-submicron instruction cache
Special issue on low power electronics and designDeep-submicron CMOS designs maintain high transistor switching speeds by scaling down the supply voltage and proportionately reducing the transistor threshold voltage. Lowering the threshold voltage increases leakage energy dissipation due to ...
Intrinsic leakage in deep submicron CMOS ICs—measurement-based test solutions
Special issue on system-level interconnect predictionThe high leakage current in deep submicron, short-channel transistors can increase the stand-by power dissipation of future IC products and threaten well established quiescent current (I/sub DDQ/)-based testing techniques. This paper reviews transistor ...
An Integrated Circuit/Architecture Approach to Reducing Leakage in Deep-Submicron High-Performance I-Caches
HPCA '01: Proceedings of the 7th International Symposium on High-Performance Computer ArchitectureAbstract: Deep-submicron CMOS design maintain high transistor switching speeds by scaling down the supply voltage and proportionately reducing the transistor threshold voltage. Lowering the threshold voltage increases leakage energy dissipation due to ...
Comments