Hardware Security

1
Hardware Security

• AbdelRahman abu_absah
• Teacher
• Dr. Sanaa al_sayegh

2
Overview

• Define Hardware.
• Hardware Security.
• Attacks, Threats and Attackers.
• Security Categories.
• Hardware Security Modules (HSM).

3

• Hardware
• is a general term that refers to the physical
  artifacts of a technology. It may also mean the
  physical components of a computer system, in the
  form of computer hardware.
• Typical PC hardware
• Motherboard, CPU, RAM, ROM, Power Supply,
  Removable media devices, Internal storage,
  Networking .

4
PC hardware
5
Computer Security

• Computer security can takes two forms
• Software security .
• Hardware security.

6
Hardware Security

• Hardware security protects the machine and
  peripheral hardware from theft and from
  electronic intrusion and damage.

7
Hardware Security (continue)

• Fluctuations in the power supply can play havoc
  with computers. For example, a blackout or
  brownout can cause a computer to shut down
  abruptly. Information that is stored only in
  short-term memory will be lost. As well, the
  fluctuation can physically damage computer
  components. The use of a surge protector guards
  against electrical spikes and drops. An
  uninterruptible power supply (UPS) can also be
  hooked up to a computer. A UPS is essentially a
  battery that will power the computer in the event
  of a power outage. This can provide time for
  information to be saved and for a computer to be
  shut down correctly.

8
Attackers

• Class 0 Script Kiddies
• Class I Clever Outsider
• - Intelligent, limited knowledge of target
• - Usually through a known weakness
• Class II Knowledgeable Insider
• - High-tech expertise
• - Advanced tools and instruments
• Class III Funded Organisation
• - Specialists with lots of funding
• - Most advanced tools and analysis

9
Attacks

• Insider Attack
• - e.g. Laid-off employee.
• Invasive Attacks
• - e.g. Hardware reverse engineering
• Semi-invasive Attacks
• - e.g. Heating
• Non-Invasive Attacks
• - e.g. EM radiation observation

10
Security Categories

• Physical
• Logical
• Environmental
• Operational

11
Security Categories (continue)

• Physical Security
• Tampering
• An (physical) interference of a harmful nature
• Tamper Mechanisms
• Strive to prevent an attempt by an attacker to
  perform unauthorised physical or electronic action

12
Security Categories (continue)

• Logical Security
• Access Control
• Cryptographic Algorithms
• Cryptographic Protocols

13
Security Categories (continue)

• Environmental Security
• Device itself is the asset
• Goal limit attackers possibilities by
  creating layers of hindrance (e.g. access)
• Administrative controls should be part of
  security policy

14
Security Categories (continue)

• Operational Security
• Security risks related to operation of
  hardware.
• Closely related to last weeks lecture.
• Example ATMs
• Users knowledge of
• - Real vs. Fake card reader
• - Keypad operation
• - PIN Safeguarding
• - Latest attacks

15
Hardware Security Modules (HSM).

• A Hardware Security Module is a hardware-based
  security device that generates, stores and
  protects cryptographic keys. It provides the
  foundation for a high-level secure campus
  certification authority.
• Certification modules are also available in
  software, but a hardware device provides a higher
  level of security.
• Examples

16
References

• http//www.answers.com/topic/computer-hardware-sec
  urity
• http//www.cs.nott.ac.uk/mvr/G53SEC/lecture13_har
  dware.ppt
• http//www.cren.net/crenca/docs/hsm.pdf

17

• Thank You

18
Quiz

• Define Hardware security ?
• Explain how can you protect your PC hardware from
  any damage?