Between Physical and Sofware: Fault Attacks, Side Channels, and Mitigations from edX

In this course, we build upon the knowledge we built up on cache side-channel attacks and transient-execution attacks, as well as the side-channel and security mindset. We again go beyond software-based side-channel attacks and now study software-based fault attacks. Fault attacks (sometimes also called active side-channel attacks ) are an incredibly powerful means to attack a system. Instead of just leaking secrets from an application or device, fault attacks actively manipulate the application or device to induce incorrect behavior which lets the attacker again leak secrets or fully take over control and subvert the application or device. We will look at fault attacks that can be triggered from software, namely Rowhammer and Plundervolt. We will then draw the connection between these attacks and transient-execution attacks that share some similarities. You will implement some of these attacks yourself and learn how they are mitigated.

What you'll learn

- Understand different methods to induce hardware faults from software on modern computers
- Understand how these faulting mechanisms can undermine a system's security
- Understand the security risks posed and how fault attacks can be mitigated

What's inside

Syllabus

- Episode 1: Sledge Hammer!

Attackers can fault hardware from software using Rowhammer.

- Episode 2: Under Voltage

Plundervolt similarly can induce faults.

- Episode 3: Load Value Inception

Injecting false values also works in the transient domain and without any physical fault.

- Episode 4: Power Leakers

Software exposes power consumption interfaces, enabling leakage.

- Episode 5: Hardware Leaks and Software Leaks

The page cache can be used for attacks similar to hardware caches.

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Enhances knowledge on software-based side-channel attacks and opens up new avenues for security research

Builds upon prior understanding of cache side-channel attacks and transient-execution attacks

Provides hands-on experience in implementing software-based fault attacks

Provides insights into different methods of inducing hardware faults from software, a valuable skill for security professionals

Delves into the connection between software-based fault attacks and transient-execution attacks

Taught by Daniel Gruss, a recognized expert in the field of side-channel attacks

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Between Physical and Sofware: Fault Attacks, Side Channels, and Mitigations with these activities:

Refresher on Memory Management

Show steps

Enhance your understanding of memory management concepts to better grasp fault attack mechanisms.

Browse courses on Memory Management

Show steps

Review lecture notes or textbooks on memory management.
Practice writing code that demonstrates memory management techniques.

Review Fault Attacks

Show steps

Start this course with a solid foundation in different methods of inducing hardware faults from software.

Show steps

Read provided materials on cache side-channel attacks and transient-execution attacks.
Review existing materials and personal projects that demonstrate side-channel and security mindsets.

Hands-on Fault Attack Mitigation Techniques

Show steps

Solidify your understanding of fault attack mitigation by following guided tutorials.

Browse courses on Hardware Security

Show steps

Locate and follow online tutorials on fault attack mitigation techniques.
Implement the mitigation techniques in a simulated or real-world environment.
Evaluate the effectiveness of the mitigation techniques (optional).

Show all three activities

Career center

Learners who complete Between Physical and Sofware: Fault Attacks, Side Channels, and Mitigations will develop knowledge and skills that may be useful to these careers:

Network Security Manager

Network Security Managers plan and implement security measures to protect their organizations' computer networks from unauthorized access, use, disclosure, disruption, modification, or destruction. This course may be useful for Network Security Managers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help managers understand how these attacks can be used to compromise their organizations' computer networks and how to develop and implement security measures to prevent these attacks.

See salaries and explore the career path for Network Security Manager

Security Architect

Security Architects design and implement security architectures to protect computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. This course may be useful for Security Architects who want to learn about software-based fault attacks, side channels, and mitigations. The course will help architects understand how these attacks can be used to compromise computer systems and networks and how to design security architectures to prevent these attacks.

See salaries and explore the career path for Security Architect

Chief Information Security Officer (CISO)

Chief Information Security Officers (CISOs) are responsible for developing and implementing security strategies and policies for their organizations. This course may be useful for CISOs who want to learn about software-based fault attacks, side channels, and mitigations. The course will help CISOs understand how these attacks can be used to compromise their organizations' computer systems and networks and how to develop and implement security strategies and policies to prevent these attacks.

See salaries and explore the career path for Chief Information Security Officer (CISO)

Cybersecurity Manager

Cybersecurity Managers plan and implement cybersecurity programs for their organizations. This course may be useful for Cybersecurity Managers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help managers understand how these attacks can be used to compromise their organizations' computer systems and networks and how to develop and implement cybersecurity programs to prevent these attacks.

See salaries and explore the career path for Cybersecurity Manager

Software Security Engineer

Software Security Engineers design, develop, and maintain software applications that are resistant to security vulnerabilities. This course may be useful for Software Security Engineers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help engineers understand how these attacks can be used to compromise software applications and how to design software that is resistant to these attacks.

See salaries and explore the career path for Software Security Engineer

Security Operations Manager

Security Operations Managers plan and implement security operations programs for their organizations. This course may be useful for Security Operations Managers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help managers understand how these attacks can be used to compromise their organizations' computer systems and networks and how to develop and implement security operations programs to prevent these attacks.

See salaries and explore the career path for Security Operations Manager

Vulnerability Researcher

Vulnerability Researchers identify and analyze security vulnerabilities in computer systems and networks. This course may be useful for Vulnerability Researchers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help researchers understand how these attacks can be used to compromise computer systems and networks and how to develop tools and techniques to identify and analyze these vulnerabilities.

See salaries and explore the career path for Vulnerability Researcher

Penetration Tester

Penetration Testers assess the security of computer systems and networks by simulating attacks from external and internal sources. This course may be useful for Penetration Testers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help testers understand how these attacks can be used to compromise computer systems and networks and how to develop penetration tests to detect these attacks.

See salaries and explore the career path for Penetration Tester

Information Security Manager

Information Security Managers plan and implement security measures to protect their organizations' information assets from unauthorized access, use, disclosure, disruption, modification, or destruction. This course may be useful for Information Security Managers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help managers understand how these attacks can be used to compromise their organizations' information assets and how to develop and implement security measures to prevent these attacks.

See salaries and explore the career path for Information Security Manager

Systems Administrator

Systems Administrators install, configure, and maintain computer systems and networks. This course may be useful for Systems Administrators who want to learn about software-based fault attacks, side channels, and mitigations. The course will help administrators understand how these attacks can be used to compromise computer systems and networks and how to configure and maintain systems to prevent these attacks.

See salaries and explore the career path for Systems Administrator

Network Security Engineer

Network Security Engineers design, implement, and maintain security measures to protect computer networks from unauthorized access, use, disclosure, disruption, modification, or destruction. This course may be useful for Network Security Engineers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help engineers understand how these attacks can be used to compromise computer networks and how to design security measures to prevent these attacks.

See salaries and explore the career path for Network Security Engineer

Information Security Analyst

Information Security Analysts plan and implement security measures to protect information systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. This course may be useful for Information Security Analysts who want to learn about software-based fault attacks, side channels, and mitigations. The course will help analysts understand how these attacks can be used to compromise information systems and how to develop security measures to prevent these attacks.

See salaries and explore the career path for Information Security Analyst

Computer Security Analyst

Computer Security Analysts plan and implement security measures to protect computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. This course may be useful for Computer Security Analysts who want to learn about software-based fault attacks, side channels, and mitigations. The course will help analysts understand how these attacks can be used to compromise computer systems and how to develop security measures to prevent these attacks.

See salaries and explore the career path for Computer Security Analyst

Computer Hardware Engineer

Computer Hardware Engineers design, develop, and test computer hardware components, including processors, memory, and storage devices. This course may be useful for Computer Hardware Engineers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help engineers understand how these attacks can be used to compromise computer systems and how to design hardware that is resistant to these attacks.

See salaries and explore the career path for Computer Hardware Engineer

Computer Software Engineer

Computer Software Engineers design, develop, and maintain software applications. This course may be useful for Computer Software Engineers who want to learn about software-based fault attacks, side channels, and mitigations. The course will help engineers understand how these attacks can be used to compromise software applications and how to design software that is resistant to these attacks.

See salaries and explore the career path for Computer Software Engineer