Systems, methods, and apparatus to enhance the integrity assessment when using power fingerprinting systems for computer-based systems

Abstract

A power fingerprinting system is adopted for assessing integrity of a target computer-based system. In one implementation, the power fingerprinting system may receive, at a first module, side-channel information of a first target component of a system, the first module being collocated with the first target component; obtain a power fingerprint for the first target component based on the side-channel information for the first target component, the power fingerprint for the first target component representing a plurality of execution statuses of the first target component; receive, at a second module, side-channel information of a second target component of the system, the second module being collocated with the second target component, the power fingerprint for the second target component representing a plurality of execution statuses of the second target component; and obtain a power fingerprint for the second target component based on the side-channel information for the second target component.

1 . An apparatus, comprising:
 a memory; and   a processor operatively coupled to the memory,   the processor configured to receive a first signal representing side-channel information associated with an execution of a sequence of instructions during an unauthorized access of a device; and   the processor configured to select, based on the first signal, a first response from a plurality of responses in response to a detection of the unauthorized access, the plurality of responses including a second response,   the processor configured to collect information associated with the device during the unauthorized access in response to the second response being selected,   the processor configured to send a second signal to execute the first response.   
     
     
         2 . The apparatus of  claim 1 , wherein the processor is configured to receive the first signal from a sensor, the sensor configured to capture the side-channel information of the device. 
     
     
         3 . The apparatus of  claim 1 , wherein the processor is configured to receive the first signal from a sensor, the sensor configured to capture the side-channel information associated with at least one of electro-magnetic radiation of the device, a temperature of the device, a voltage of the device, a current of the device, or a time delay of the device, in response to the execution of the sequence of instructions during the unauthorized access. 
     
     
         4 . The apparatus of  claim 1 , wherein:
 the processor is configured to select the first response based on a combination of first side-channel information and second side-channel information different from the first side-channel information,   each of the first side-channel information and the second side-channel information is associated with at least one of electro-magnetic radiation of the device, a temperature of the device, a voltage of the device, a current of the device, or a time delay of the device, in response to the execution of the sequence of instructions during the unauthorized access.   
     
     
         5 . The apparatus of  claim 1 , wherein the processor is configured to receive the first signal from a sensor, the first signal associated with a power signature of the device in response to the execution of the sequence of instructions during the unauthorized access. 
     
     
         6 . The apparatus of  claim 1 , wherein the plurality of responses include at least one of (1) preventing access to the device in response to the detection of the unauthorized access, (2) disabling at least a portion of the device in response to the detection of the unauthorized access, (3) powering down the device in response to the detection of the unauthorized access, (4) resetting the device in response to the detection of the unauthorized access, (5) physically damaging at least a portion of the device in response to the detection of the unauthorized access, (6) setting at least a portion of the device into an irrecoverable logic state in response to the detection of the unauthorized access, (7) permanently erasing a memory of the device in response to the detection of the unauthorized access, or (8) destroying at least a portion of the device in response to the detection of the unauthorized access. 
     
     
         7 . The apparatus of  claim 1 , wherein:
 the device is a first device,   the plurality of responses include a third response, and   the processor is configured to collect information associated with a second device that triggered the unauthorized access in response to the third response being selected.   
     
     
         8 . The apparatus of  claim 1 , wherein the processor is configured to send a report signal based on information associated with the device during the unauthorized access. 
     
     
         9 . The apparatus of  claim 1 , wherein the processor is configured to cause additional processing resource to be allocated to the device in response to the detection of the unauthorized access. 
     
     
         10 . The apparatus of  claim 1 , wherein the processor is configured to be operatively coupled to a circuit, the circuit configured to provide a power spike to physically damage a portion of the device in response to the detection of the unauthorized access. 
     
     
         11 . A method, comprising:
 receiving, from a sensor, side-channel information of a target device, the side-channel information associated with an execution of a sequence of instructions during an anomaly behavior of the target device;   selecting, based on the side-channel information and in response to the anomaly behavior, a first response from a plurality of responses, the plurality of responses including a second response causing information associated with the target device to be collected in response to the second response being selected; and   sending, after the determining, a signal to execute the first response.   
     
     
         12 . The method of  claim 11 , wherein the side-channel information is associated with at least one of electro-magnetic radiation of the target device, a temperature of the target device, a voltage of the device, a current of the device, or a time delay of the target device, during the anomaly behavior. 
     
     
         13 . The method of  claim 11 , wherein:
 the determining the first response from the plurality of responses is based on a combination of first side-channel information and second side-channel information different from the first side-channel information,   each of the first side-channel information and the second side-channel information is associated with at least one of electro-magnetic radiation of the target device, a temperature of the target device, a voltage of the device, a current of the device, or a time delay of the target device, during the anomaly behavior.   
     
     
         14 . The method of  claim 11 , wherein the side-channel information is associated with a power signature of the target device in response to the execution of the sequence of instructions during the anomaly behavior. 
     
     
         15 . The method of  claim 11 , wherein the plurality of responses include at least one of (1) preventing access to the target device in response to the anomaly behavior, (2) disabling at least a portion of the target device in response to the anomaly behavior, (3) powering down the target device in response to the anomaly behavior, (4) resetting the target device in response to the anomaly behavior, (5) physically damaging at least a portion of the target device in response to the anomaly behavior, (6) setting at least a portion of the target device into an irrecoverable logic state in response to the anomaly behavior, (7) permanently erasing a memory of the target device in response to the anomaly behavior, or (8) destroying at least a portion of the target device in response to the anomaly behavior. 
     
     
         16 . The method of  claim 11 , further comprising:
 collecting information associated with an intruding device that triggered the anomaly behavior of the target device in response to a third response from the plurality of responses being selected.   
     
     
         17 . The method of  claim 11 , further comprising:
 sending a report signal based on information associated with the target device during the anomaly behavior in response to a third response from the plurality of responses being selected.   
     
     
         18 . The method of  claim 11 , further comprising:
 causing additional processing resource to be allocated to the target device in response to the anomaly behavior.   
     
     
         19 . The method of  claim 11 , further comprising:
 providing a power spike to physically damage a portion of the target device in response to the anomaly behavior.   
     
     
         20 . A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:
 receive, from a sensor, side-channel information of a target device, the side-channel information associated with electro-magnetic radiation of the target device in response to an execution of a sequence of instructions at the target device during an unauthorized access of the target device;   select, based on the side-channel information and in response to a detection of the unauthorized access, a first response from a plurality of responses, the plurality of responses including a second response causing the processor to collect information associated with the target device during the unauthorized access in response to the second response being selected; and   send a signal to execute the first response.