Cybersecurity continues to be a difficult issue for society especially as the number of networked systems grows. Techniques to protect these systems range from rules-based to artificial intelligence-based intrusion detection systems and anti-virus tools. These systems rely upon the information contained in the network packets and download executables to function. Side channel information leaked from hardware has been shown to reveal secret information in systems such as encryption keys. This work demonstrates that side channel information can be used to detect malware running on a computing platform without access to the code involved.
翻译:网络安全仍然是社会面临的一个难题,特别是随着网络系统数目的增加,网络安全仍然是社会面临的一个难题。保护这些系统的技术范围从基于规则的到基于人为情报的入侵探测系统和反病毒工具。这些系统依靠网络包中的信息并下载可操作文件来运作。从硬件中泄漏的侧端频道信息已经显示在加密密钥等系统中暴露了秘密信息。这项工作表明,侧端通道信息可以用来检测计算机平台上运行的恶意软件,而没有相关代码。