Re:Rooting Out Malware with a Side-Channel Chip Defense System
by fabulist on Friday February 27, 2015 @10:25PM
(#9122672)
This project takes a whitelist approach, rather than a blacklist approach. Malware authors could certainly turn their programs into random GOTO spaghetti in order to obtain a unique power consumption pattern. But this approach is to fingerprint the pattern of normal operations, and raise an alarm when the device starts doing abnormal things.
Re:Rooting Out Malware with a Side-Channel Chip Defense System
by p4bl0 on Saturday February 28, 2015 @04:48AM
(#9123304)
> How do you visualize the power profile of a specific program (can you)? Could you use a simple power analyzer to potentially detect malware, or do you need something more refined?
I don't really know. Most power analysis side channel attacks focus on embedded systems where only the target code runs. But recently, TAU researchers did very cool stuff with power analysis on laptops running a normal OS [1] and their presentation at CHES last year was very impressive.
How do you visualize the power profile of a specific program (can you)? Could you use a simple power analyzer to potentially detect malware, or do you need something more refined?