Add table and pics to HSM chapter
|
|
@ -26,3 +26,4 @@ rights, today human rights are under attack both from within and from the outsid
|
|||
Publishing IHSM technology as open source, we hope to provide one building block for new computing systems accessible to
|
||||
all that are resilient and secure in the face of growing adversity.
|
||||
|
||||
\todo{Go into future applications?}
|
||||
|
|
|
|||
|
|
@ -9,7 +9,8 @@
|
|||
\chaptertitle{The German ePA: A Motivating Counter-Example}
|
||||
|
||||
\todo{FIXME: Proper citation here}
|
||||
\sourceattrib{This part is based on a short paper presented at the HS3 workshop at ESORICS 2025.}
|
||||
\sourceattrib{This part is based on a short paper written by me and presented by me at the HS3 workshop at ESORICS
|
||||
2025.}
|
||||
Looking at the landscape of computer security solutions, we are presented with a wide variety of vendors and products
|
||||
that may give the impression that hardware security is a solved problem. Vendors sell various claims rangning from
|
||||
\emph{You don't need hardware security, just do it in the cloud!} to \emph{Buy our HSM and you will be secure!}. In
|
||||
|
|
|
|||
|
|
@ -145,7 +145,7 @@ outside-facing wall to detect attempts at drilling into it. Finally, we have fou
|
|||
mid-2000s era slot machines in Germany that includes a tamper-sensing mesh, presumably to prevent modification or
|
||||
cloning. This device will also be analyzed later in this chapter.
|
||||
|
||||
\section{The Principles of Tamper-Sensing Mesh Construction and Monitoring}
|
||||
\section{Tamper-Sensing Mesh Design Principles}
|
||||
|
||||
%\subsection{Tamper-sensing Mesh Manufacturing}
|
||||
|
||||
|
|
@ -176,7 +176,7 @@ basic construction and layout has not changed much since the early 1990ies~\cite
|
|||
macphersonImprovementsSecurityEnclosures1993,
|
||||
macphersonTamperRespondentEnclosure1999}.
|
||||
|
||||
\subsection{Tamper-sensing Mesh Monitoring}
|
||||
\subsection{Monitoring Circuit Approaches}
|
||||
|
||||
Tamper-sensing meshes are most effective when they are continuously monitored using a backup power supply when the
|
||||
larger system is powered off. In practice, the main challenge with continuous monitoring of tamper-sensing meshes is in
|
||||
|
|
@ -230,7 +230,90 @@ meshes.
|
|||
|
||||
Given their niche applications and high cost, devices incorporating tamper sensing meshes tend to be hard to find. For
|
||||
this survey, we chose 21 different models of card payment terminals, and 6 other devices. All devices were procured from
|
||||
ebay, and the majority were sold by electronic waste recycling companies.
|
||||
ebay, and the majority were sold by electronic waste recycling companies. A complete list of our samples can be found in
|
||||
Table~\ref{tab_hsm_survey_sample_list}. Photos of each device are shown in Figure~\ref{fig_hsm_survey_sample_pics}.
|
||||
|
||||
\begin{table}
|
||||
\footnotesize
|
||||
\rowcolors{2}{gray!15}{white}
|
||||
\begin{tabular}[c]{c>{\RaggedRight\arraybackslash}p{35mm}>{\RaggedRight\arraybackslash}p{30mm}llc}
|
||||
\textbf{ID} & \textbf{Device} & \textbf{Manufacturer} & \textbf{Type code} & \textbf{Year} \\
|
||||
\hline
|
||||
H01 & PED & Verifone & VX 570 & ca. 2010 \\
|
||||
H02 & Slot machine CPU & Merkur / ADP Gauselmann & Sam 12 EC2 & ca. 2012 \\
|
||||
H03 & EPP & Sagem & USA1315-4240 R1A & 2014 \\
|
||||
H04 & EPP & Sagem & USA1316-5120 R1A & 2007 \\
|
||||
H05 & PED & Xac & xAPT-103 & 2014 \\
|
||||
H06 & PED & Ingenico & iCT250-11T1860A & 2016-17 \\
|
||||
H08 & PED & Sagem & NOR4100-4220 R1A & 2012 \\
|
||||
H09 & PED & Hypercom & M4230 & 2010 \\
|
||||
H10 & PED & Worldline & YOMANI XR & 2016 \\
|
||||
H11 & PED & Banksys & C-ZAM Smash Portable & 2004 \\
|
||||
H12 & PED & Hypercom & Optimum P2100 & 2010 \\
|
||||
H13 & PED & Ingenico & iCT 220-11T2938A & 2016 \\
|
||||
H14 & PED & Verifone & H5000 & 2016 \\
|
||||
H15 & PED & Verifone & MX 925 & 2018 \\
|
||||
H16 & PED & Verifone & V200c CTLS & 2021 \\
|
||||
H17 & PED & Verifone & VX 680 & 2014 \\
|
||||
H18 & PED & Ingenico & i7910 & 2010 \\
|
||||
H19 & PED & Banksys & XENTA & 2004-2011 \\
|
||||
H20 & PED & Verifone & VX 520 3G & 2017 \\
|
||||
H21 & PED & Verifone & V400m Plus 4G & 2018 \\
|
||||
H22 & PED & Ingenico & Move 3500 & 2020 \\
|
||||
H23 & PED & Ingenico & iPP 350-11T1718A & 2015 \\
|
||||
H24 & PED & Ingenico & iWL255-01T2117A & 2016 \\
|
||||
H25 & Franking Machine & Neopost & IJ-25 & ca. 2001 \\
|
||||
H27 & PED & Sumup & AIR1E205 & 2021 \\
|
||||
H28 & EPP & NCR & 5814 UEPP & 2019 \\
|
||||
H29 & HSM & SafeNet & VBD-05 & 2018 \\
|
||||
H30 & HSM & Irdeto & Mayflower-IDX/C201 & 2011 \\
|
||||
\end{tabular}
|
||||
\label{tab_hsm_survey_sample_list}
|
||||
\caption{The samples we dissected in our survey.}
|
||||
\end{table}
|
||||
|
||||
\newcommand{\surveypic}[2]{
|
||||
\begingroup
|
||||
\setlength{\fboxsep}{0.2mm}
|
||||
\begin{overpic}[percent,width=25mm]{#2}
|
||||
\put(100,85){\makebox[0pt][r]{\colorbox{white}{\large H#1}}}
|
||||
\end{overpic}
|
||||
\endgroup
|
||||
}
|
||||
|
||||
\begin{figure}
|
||||
\begin{tabular}[c]{cccc}
|
||||
\surveypic{02}{survey_diag_S02.jpg}&
|
||||
\surveypic{03}{survey_diag_S03.jpg}&
|
||||
\surveypic{04}{survey_diag_S04.jpg}&
|
||||
\surveypic{05}{survey_diag_S05.jpg}\\
|
||||
\surveypic{06}{survey_diag_S06.jpg}&
|
||||
\surveypic{08}{survey_diag_S08.jpg}&
|
||||
\surveypic{09}{survey_diag_S09.jpg}&
|
||||
\surveypic{10}{survey_diag_S10.jpg}\\
|
||||
\surveypic{11}{survey_diag_S11.jpg}&
|
||||
\surveypic{12}{survey_diag_S12.jpg}&
|
||||
\surveypic{13}{survey_diag_S13.jpg}&
|
||||
\surveypic{14}{survey_diag_S14.jpg}\\
|
||||
\surveypic{15}{survey_diag_S15.jpg}&
|
||||
\surveypic{16}{survey_diag_S16.jpg}&
|
||||
\surveypic{17}{survey_diag_S17.jpg}&
|
||||
\surveypic{18}{survey_diag_S18.jpg}\\
|
||||
\surveypic{19}{survey_diag_S19.jpg}&
|
||||
\surveypic{20}{survey_diag_S20.jpg}&
|
||||
\surveypic{21}{survey_diag_S21.jpg}&
|
||||
\surveypic{22}{survey_diag_S22.jpg}\\
|
||||
\surveypic{23}{survey_diag_S23.jpg}&
|
||||
\surveypic{24}{survey_diag_S24.jpg}&
|
||||
\surveypic{25}{survey_diag_S25.jpg}&
|
||||
\surveypic{27}{survey_diag_S27.jpg}\\
|
||||
\surveypic{28}{survey_diag_S28.jpg}&
|
||||
\surveypic{29}{survey_diag_S29.jpg}&
|
||||
\surveypic{30}{survey_diag_S30.jpg}&
|
||||
\end{tabular}
|
||||
\label{fig_hsm_survey_sample_pics}
|
||||
\caption{Photos of all survey samples}
|
||||
\end{figure}
|
||||
|
||||
\subsubsection{Card Payment Terminals}
|
||||
|
||||
|
|
|
|||
BIN
chapter-hsms/figures/survey_diag_S02.jpg
Normal file
|
After Width: | Height: | Size: 421 KiB |
BIN
chapter-hsms/figures/survey_diag_S03.jpg
Normal file
|
After Width: | Height: | Size: 399 KiB |
BIN
chapter-hsms/figures/survey_diag_S04.jpg
Normal file
|
After Width: | Height: | Size: 400 KiB |
BIN
chapter-hsms/figures/survey_diag_S05.jpg
Normal file
|
After Width: | Height: | Size: 364 KiB |
BIN
chapter-hsms/figures/survey_diag_S06.jpg
Normal file
|
After Width: | Height: | Size: 398 KiB |
BIN
chapter-hsms/figures/survey_diag_S07.jpg
Normal file
|
After Width: | Height: | Size: 362 KiB |
BIN
chapter-hsms/figures/survey_diag_S08.jpg
Normal file
|
After Width: | Height: | Size: 358 KiB |
BIN
chapter-hsms/figures/survey_diag_S09.jpg
Normal file
|
After Width: | Height: | Size: 403 KiB |
BIN
chapter-hsms/figures/survey_diag_S10.jpg
Normal file
|
After Width: | Height: | Size: 372 KiB |
BIN
chapter-hsms/figures/survey_diag_S11.jpg
Normal file
|
After Width: | Height: | Size: 370 KiB |
BIN
chapter-hsms/figures/survey_diag_S12.jpg
Normal file
|
After Width: | Height: | Size: 378 KiB |
BIN
chapter-hsms/figures/survey_diag_S13.jpg
Normal file
|
After Width: | Height: | Size: 376 KiB |
BIN
chapter-hsms/figures/survey_diag_S14.jpg
Normal file
|
After Width: | Height: | Size: 370 KiB |
BIN
chapter-hsms/figures/survey_diag_S15.jpg
Normal file
|
After Width: | Height: | Size: 369 KiB |
BIN
chapter-hsms/figures/survey_diag_S16.jpg
Normal file
|
After Width: | Height: | Size: 362 KiB |
BIN
chapter-hsms/figures/survey_diag_S17.jpg
Normal file
|
After Width: | Height: | Size: 364 KiB |
BIN
chapter-hsms/figures/survey_diag_S18.jpg
Normal file
|
After Width: | Height: | Size: 393 KiB |
BIN
chapter-hsms/figures/survey_diag_S19.jpg
Normal file
|
After Width: | Height: | Size: 321 KiB |
BIN
chapter-hsms/figures/survey_diag_S20.jpg
Normal file
|
After Width: | Height: | Size: 370 KiB |
BIN
chapter-hsms/figures/survey_diag_S21.jpg
Normal file
|
After Width: | Height: | Size: 379 KiB |
BIN
chapter-hsms/figures/survey_diag_S22.jpg
Normal file
|
After Width: | Height: | Size: 386 KiB |
BIN
chapter-hsms/figures/survey_diag_S23.jpg
Normal file
|
After Width: | Height: | Size: 375 KiB |
BIN
chapter-hsms/figures/survey_diag_S24.jpg
Normal file
|
After Width: | Height: | Size: 369 KiB |
BIN
chapter-hsms/figures/survey_diag_S25.jpg
Normal file
|
After Width: | Height: | Size: 281 KiB |
BIN
chapter-hsms/figures/survey_diag_S26.jpg
Normal file
|
After Width: | Height: | Size: 412 KiB |
BIN
chapter-hsms/figures/survey_diag_S27.jpg
Normal file
|
After Width: | Height: | Size: 333 KiB |
BIN
chapter-hsms/figures/survey_diag_S28.jpg
Normal file
|
After Width: | Height: | Size: 425 KiB |
BIN
chapter-hsms/figures/survey_diag_S29.jpg
Normal file
|
After Width: | Height: | Size: 393 KiB |
BIN
chapter-hsms/figures/survey_diag_S30.jpg
Normal file
|
After Width: | Height: | Size: 405 KiB |
|
|
@ -7,6 +7,8 @@
|
|||
|
||||
\section{Introduction}
|
||||
|
||||
\sourceattrib{This part is adapted from a paper written by me and presented by me at CHES
|
||||
2022~\cite{gotteCantTouchThis2022}.}
|
||||
While information security technology has matured a great deal in the last half-century, physical security did not keep
|
||||
up with the pace of the remainder of this industry. Given the right skills, physical access to a computer still often
|
||||
allows full compromise. The physical security of modern server hardware hinges on what lock you put on the room it is
|
||||
|
|
|
|||
|
|
@ -1,7 +1,13 @@
|
|||
%\chapterquote{Attributed to Tom Milligan~\cite{peaseTroubleshootingAnalogCircuits1993}}{When you are taking data, if you see something funny, Record Amount of Funny.}
|
||||
\chapterquote{Stewart Brand~\cite{internetarchiveWholeEarthCatalog1969}}{We are as gods and might as well get good at
|
||||
it.}
|
||||
\chaptertitle{High Fidelity Security Mesh Monitoring using Low-Cost, Embedded Time Domain Reflectometry}
|
||||
|
||||
\section{Introduction}
|
||||
|
||||
\sourceattrib{This part is adapted from a paper written by me that will be presented by me at CHES
|
||||
2026.}
|
||||
\todo{FIXME: Proper citation in source attribution}
|
||||
Security meshes continue to be the state of the art for tamper sensing in applications where sophisticated physical
|
||||
attacks such as attempts at drilling or sawing through the device's enclosure to place probes must be prevented. Common
|
||||
applications for such meshes include Hardware Security Modules (HSMs) used to store and process cryptographic keys
|
||||
|
|
|
|||
|
|
@ -173,3 +173,8 @@
|
|||
\hyphenation{Si-cher-heits-mo-du-le}
|
||||
|
||||
\setstretch{1.3}
|
||||
|
||||
% Settings for tocloft as applied to minitoc
|
||||
%\setlength{\cftbeforesecskip}{-1pt}
|
||||
%\setlength{\cftbeforesubsecskip}{-1pt}
|
||||
|
||||
|
|
|
|||
|
|
@ -33,10 +33,17 @@
|
|||
\usepackage{pdfpages}
|
||||
\usepackage{etoolbox}
|
||||
\usepackage{catchfile}
|
||||
\usepackage{colortbl}
|
||||
\usepackage{rotating}
|
||||
\usepackage{placeins}
|
||||
\usepackage{minted} % pygmentized source code
|
||||
\usepackage{overpic}
|
||||
\usepackage{adjustbox}
|
||||
% FOr table formatting
|
||||
\usepackage{ragged2e}
|
||||
\usepackage{array}
|
||||
\usepackage{longtable}
|
||||
\usepackage{colortbl}
|
||||
% pygmentized source code
|
||||
\usepackage{minted}
|
||||
%\usepackage[pdftex]{graphicx,color}
|
||||
%\usepackage{showframe} % Useful for page layout debugging
|
||||
\usepackage{csquotes}
|
||||
|
|
|
|||
20
thesis.tex
|
|
@ -8,7 +8,9 @@
|
|||
\newcommand{\chaptertitle}[1]{
|
||||
\chapter{#1}
|
||||
\printchapterquote
|
||||
\minitoc
|
||||
\begin{spacing}{1.1}
|
||||
\minitoc
|
||||
\end{spacing}
|
||||
\newpage
|
||||
}
|
||||
|
||||
|
|
@ -34,16 +36,16 @@
|
|||
\listoftables
|
||||
|
||||
\mainmatter
|
||||
\dochapter{chapter-introduction} % Status: In pretty good shape
|
||||
\dochapter{chapter-epa} % Status: In pretty good shape
|
||||
\dochapter{chapter-ihsm} % Status: Copy-paste done, build works, integration TODO
|
||||
%\dochapter{chapter-introduction} % Status: In pretty good shape
|
||||
%\dochapter{chapter-epa} % Status: In pretty good shape
|
||||
\dochapter{chapter-hsms} % Status: In pretty good shape
|
||||
\dochapter{chapter-sampling-mesh-monitor} % Status: Copy-paste done, build works, integration TODO
|
||||
\dochapter{chapter-nice-coils} % Status: Copy-paste done, build works, integration TODO
|
||||
\dochapter{chapter-qkd} % Status: Re-integration of changes from workshop paper TODO
|
||||
\dochapter{chapter-smpc} % Status: TODO
|
||||
%\dochapter{chapter-ihsm} % Status: Copy-paste done, build works, integration TODO
|
||||
%\dochapter{chapter-sampling-mesh-monitor} % Status: Copy-paste done, build works, integration TODO
|
||||
%\dochapter{chapter-nice-coils} % Status: Copy-paste done, build works, integration TODO
|
||||
%\dochapter{chapter-qkd} % Status: Re-integration of changes from workshop paper done
|
||||
%\dochapter{chapter-smpc} % Status: TODO
|
||||
|
||||
\input{chapter-conclusion/chapter.tex} % Status: TODO
|
||||
\input{chapter-conclusion/chapter.tex} % Status: draft done
|
||||
|
||||
\appendix
|
||||
|
||||
|
|
|
|||