Fault attacks consist in changing the program behavior by injecting faults at run-time in order to break some expected security properties. Applications are hardened against fault attack adding countermeasures. According to the state of the art, applications must now be protected against multi-fault injection. As a consequence developing applications which are robust becomes a very challenging task, in particular because countermeasures can be also the target of attacks. The aim of this paper is to propose an assisted methodology for developers allowing to harden an application against multi-fault attacks, addressing several aspects: how to identify which parts of the code should be protected and how to choose the most appropriate countermeasures, making the application more robust and avoiding useless runtime checks.
翻译:过失攻击包括改变程序行为,在运行时注射断层,以打破某些预期的安全特性。 申请被强化,防止过失攻击,增加反措施。 根据最新技术,现在必须保护申请不受多错注射。因此,开发稳健应用是一项非常具有挑战性的任务,特别是因为反措施也可能是攻击的目标。本文件的目的是为开发商提出一种辅助方法,使申请更严格地适用于多错攻击,涉及几个方面:如何确定守则的哪些部分应该受到保护,如何选择最适当的反措施,使申请更有力,避免无用的操作时间检查。</s>