{"id":"https://openalex.org/W4313025044","doi":"https://doi.org/10.1109/access.2022.3231753","title":"DFAulted: Analyzing and Exploiting CPU Software Faults Caused by FPGA-Driven Undervolting Attacks","display_name":"DFAulted: Analyzing and Exploiting CPU Software Faults Caused by FPGA-Driven Undervolting Attacks","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4313025044","doi":"https://doi.org/10.1109/access.2022.3231753"},"language":"en","primary_location":{"id":"doi:10.1109/access.2022.3231753","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3231753","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2022.3231753","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067816903","display_name":"Dina G. Mahmoud","orcid":"https://orcid.org/0000-0003-0720-1342"},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Dina G. Mahmoud","raw_affiliation_strings":["School of Computer and Communication Sciences, &#x00C9;cole Polytechnique F&#x00E9;d&#x00E9;rale de Lausanne (EPFL), Lausanne, Switzerland"],"raw_orcid":"https://orcid.org/0000-0003-0720-1342","affiliations":[{"raw_affiliation_string":"School of Computer and Communication Sciences, &#x00C9;cole Polytechnique F&#x00E9;d&#x00E9;rale de Lausanne (EPFL), Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074382530","display_name":"David Dervishi","orcid":"https://orcid.org/0000-0002-0018-3690"},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"David Dervishi","raw_affiliation_strings":["School of Computer and Communication Sciences, &#x00C9;cole Polytechnique F&#x00E9;d&#x00E9;rale de Lausanne (EPFL), Lausanne, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-0018-3690","affiliations":[{"raw_affiliation_string":"School of Computer and Communication Sciences, &#x00C9;cole Polytechnique F&#x00E9;d&#x00E9;rale de Lausanne (EPFL), Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049598150","display_name":"Samah Hussein","orcid":null},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Samah Hussein","raw_affiliation_strings":["School of Computer and Communication Sciences, &#x00C9;cole Polytechnique F&#x00E9;d&#x00E9;rale de Lausanne (EPFL), Lausanne, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer and Communication Sciences, &#x00C9;cole Polytechnique F&#x00E9;d&#x00E9;rale de Lausanne (EPFL), Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048330561","display_name":"Vincent Lenders","orcid":"https://orcid.org/0000-0002-2289-3722"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vincent Lenders","raw_affiliation_strings":["Cyber-Defence Campus, armasuisse, Thun, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-2289-3722","affiliations":[{"raw_affiliation_string":"Cyber-Defence Campus, armasuisse, Thun, Switzerland","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045601003","display_name":"Mirjana Stojilovi\u0107","orcid":"https://orcid.org/0000-0001-5649-5020"},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Mirjana Stojilovic","raw_affiliation_strings":["School of Computer and Communication Sciences, &#x00C9;cole Polytechnique F&#x00E9;d&#x00E9;rale de Lausanne (EPFL), Lausanne, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-5649-5020","affiliations":[{"raw_affiliation_string":"School of Computer and Communication Sciences, &#x00C9;cole Polytechnique F&#x00E9;d&#x00E9;rale de Lausanne (EPFL), Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":2.2173,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.87854521,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"10","issue":null,"first_page":"134199","last_page":"134216"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7987358570098877},{"id":"https://openalex.org/keywords/field-programmable-gate-array","display_name":"Field-programmable gate array","score":0.7587720155715942},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.7316128015518188},{"id":"https://openalex.org/keywords/central-processing-unit","display_name":"Central processing unit","score":0.5143536329269409},{"id":"https://openalex.org/keywords/fpga-prototype","display_name":"FPGA prototype","score":0.482028603553772},{"id":"https://openalex.org/keywords/advanced-encryption-standard","display_name":"Advanced Encryption Standard","score":0.47175246477127075},{"id":"https://openalex.org/keywords/reconfigurable-computing","display_name":"Reconfigurable computing","score":0.4519391655921936},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.45064976811408997},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.4334167540073395},{"id":"https://openalex.org/keywords/fault-injection","display_name":"Fault injection","score":0.43223750591278076},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.31149232387542725},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.19444280862808228}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7987358570098877},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.7587720155715942},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.7316128015518188},{"id":"https://openalex.org/C49154492","wikidata":"https://www.wikidata.org/wiki/Q5300","display_name":"Central processing unit","level":2,"score":0.5143536329269409},{"id":"https://openalex.org/C203864433","wikidata":"https://www.wikidata.org/wiki/Q5426992","display_name":"FPGA prototype","level":3,"score":0.482028603553772},{"id":"https://openalex.org/C94520183","wikidata":"https://www.wikidata.org/wiki/Q190746","display_name":"Advanced Encryption Standard","level":3,"score":0.47175246477127075},{"id":"https://openalex.org/C142962650","wikidata":"https://www.wikidata.org/wiki/Q240838","display_name":"Reconfigurable computing","level":3,"score":0.4519391655921936},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.45064976811408997},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.4334167540073395},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.43223750591278076},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.31149232387542725},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.19444280862808228}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2022.3231753","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3231753","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:infoscience.epfl.ch:299173","is_oa":true,"landing_page_url":"https://infoscience.epfl.ch/handle/20.500.14299/193640","pdf_url":"https://infoscience.epfl.ch/bitstreams/d222c0d8-5f98-4fc0-82dd-2478f261c9b8/download","source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I5124864","host_organization_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","host_organization_lineage":["https://openalex.org/I5124864"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"research article"},{"id":"pmh:oai:doaj.org/article:f0dbdb1d80384ef382503369db023d69","is_oa":false,"landing_page_url":"https://doaj.org/article/f0dbdb1d80384ef382503369db023d69","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 134199-134216 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2022.3231753","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3231753","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W2085992264","https://openalex.org/W2088443347","https://openalex.org/W2110162979","https://openalex.org/W2110941647","https://openalex.org/W2139750209","https://openalex.org/W2203888028","https://openalex.org/W2761003783","https://openalex.org/W2794898833","https://openalex.org/W2945378913","https://openalex.org/W2966980899","https://openalex.org/W2973780393","https://openalex.org/W2983058739","https://openalex.org/W2984427922","https://openalex.org/W2987827054","https://openalex.org/W2988330033","https://openalex.org/W2993999084","https://openalex.org/W3008727730","https://openalex.org/W3009761835","https://openalex.org/W3014400029","https://openalex.org/W3015806656","https://openalex.org/W3016064750","https://openalex.org/W3033754679","https://openalex.org/W3036146501","https://openalex.org/W3046859417","https://openalex.org/W3093682548","https://openalex.org/W3093938463","https://openalex.org/W3144141874","https://openalex.org/W3153001680","https://openalex.org/W3181637428","https://openalex.org/W3183466684","https://openalex.org/W3184341738","https://openalex.org/W3213911739","https://openalex.org/W4200501761","https://openalex.org/W4212775314","https://openalex.org/W4242164861","https://openalex.org/W4280550543","https://openalex.org/W4290648676","https://openalex.org/W6743496458","https://openalex.org/W6771898115","https://openalex.org/W6791243118","https://openalex.org/W6794199251","https://openalex.org/W6902558674"],"related_works":["https://openalex.org/W2168229569","https://openalex.org/W3093497949","https://openalex.org/W1596880422","https://openalex.org/W2113648965","https://openalex.org/W2099626978","https://openalex.org/W2148243454","https://openalex.org/W2155484023","https://openalex.org/W4200391368","https://openalex.org/W2075283644","https://openalex.org/W2974672311"],"abstract_inverted_index":{"Field-programmable":[0],"gate":[1],"arrays":[2],"(FPGAs)":[3],"combine":[4],"hardware":[5,32,157],"reconfigurability":[6],"with":[7,36],"a":[8,99,107,128,147,165,221,234],"high":[9],"degree":[10],"of":[11,34,40,49,54,65,159,167],"parallelism.":[12],"Consequently,":[13],"FPGAs":[14,35],"offer":[15],"performance":[16,48],"gains":[17],"and":[18,95,171],"power":[19],"savings":[20],"for":[21,236],"many":[22],"applications.":[23],"A":[24,52],"recent":[25],"trend":[26],"has":[27,68],"been":[28,71],"to":[29,45,92,181,200,232],"leverage":[30,177],"the":[31,37,47,63,79,90,110,119,137,142,160,168,172,178,186,197,202],"versatility":[33],"software":[38,100,138],"programmability":[39],"central":[41],"processing":[42],"units":[43],"(CPUs)":[44],"improve":[46],"processing-intensive":[50],"workloads.":[51],"variety":[53],"heterogeneous":[55],"FPGA-CPU":[56,66,83,229],"embedded":[57],"systems":[58,67],"are":[59],"thus":[60],"available.":[61],"However,":[62],"security":[64,204],"not":[69,153],"yet":[70],"thoroughly":[72],"evaluated.":[73],"In":[74],"this":[75],"work,":[76],"we":[77,176],"demonstrate":[78],"first":[80],"attack":[81,169],"on":[82,155,185,239],"platforms":[84],"which":[85],"leverages":[86],"undervolting":[87,180],"caused":[88],"by":[89,123,141,205],"FPGA":[91,105,120],"inject":[93],"faults":[94,136,199],"exploit":[96],"them":[97],"against":[98,211],"encryption":[101,214],"algorithm.":[102],"The":[103],"aggressor":[104],"affects":[106],"CPU":[108,143],"sharing":[109],"same":[111],"system-on-chip":[112],"(SoC).":[113],"We":[114,163,188],"show":[115],"that":[116],"circuits":[117],"in":[118,134,225],"fabric,":[121],"controlled":[122],"an":[124,192,212],"attacker,":[125],"can":[126],"create":[127],"significant":[129],"supply":[130],"voltage":[131],"drop":[132],"which,":[133],"turn,":[135],"computation":[139],"performed":[140],"or":[144],"even":[145],"causes":[146],"denial-of-service":[148],"attack.":[149],"Our":[150,218],"results":[151],"do":[152],"rely":[154],"any":[156],"modifications":[158],"target":[161],"platform.":[162],"present":[164],"characterization":[166],"parameters":[170],"effects":[173],"observed.":[174],"Then,":[175],"FPGA-induced":[179],"fault":[182,208],"multiplications":[183],"executing":[184],"CPU.":[187],"also":[189],"highlight":[190],"how":[191],"attacker":[193],"might":[194],"benefit":[195],"from":[196],"injected":[198],"compromise":[201],"system\u2019s":[203],"demonstrating":[206],"differential":[207],"analysis":[209],"(DFA)":[210],"advanced":[213],"standard":[215],"(AES)":[216],"implementation.":[217],"work":[219],"exposes":[220],"new":[222],"electrical-level":[223],"threat":[224],"tightly":[226],"integrated":[227],"modern":[228],"SoCs,":[230],"bringing":[231],"light":[233],"need":[235],"more":[237],"research":[238],"countermeasures.":[240]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":5}],"updated_date":"2026-08-13T07:04:57.449891","created_date":"2025-10-10T00:00:00"}
