多源融合信息泄漏检测方法  

Multi-Channel Fusion Leakage Detection

作　　者：曹雨晨[1,2] 周永彬 CAO Yuchen;ZHOU Yongbin(State Key Laboratory Of Information Security,Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China;University of Chinese Academy of Sciences,Beijing 100049,China)

机构地区：[1]中国科学院信息工程研究所信息安全国家重点实验室,中国北京100093 [2]中国科学院大学网络空间安全学院,中国北京100049

出　　处：《信息安全学报》2020年第6期40-52,共13页Journal of Cyber Security

基　　金：国家自然科学基金(No.61632020,No.61472416,No.61602468)资助。

摘　　要：密码设备的侧信息泄漏检测是侧信道分析中的重要技术环节,旨在客观地评估密码设备的物理安全性。不同类型的侧信息在密码设备运行过程中同时存在,仅仅从单源侧信息的视角进行信息泄漏检测难以全面反映密码设备的真实泄漏威胁情况。因此,发展基于多源侧信息的融合信息泄漏检测方法,建立综合利用多源侧信息的泄漏检测方法体系,以期实现对密码设备物理安全性更全面、更客观地评估,是一种现实技术需求。本文基于如何融合利用多个信道的侧信息提出了3种多源融合信息泄漏检测方案:多源简单融合信息泄漏检测、多源时频融合信息泄漏检测以及基于多元T检验的多源信息泄漏检测。其中,多源简单融合信息泄漏检测在时域上组合利用多个信道的侧信息;多源时频融合信息泄漏检测综合利用了多个信道侧信息的时域信息及频域信息;基于多元T检验的多源信息泄漏检测基于多元假设检验方案构造。对比单源的信息泄漏检测方案,模拟实验和真实实验结果表明本文提出的多源融合信息泄漏检测方案可以降低检测出泄漏所需的侧信息数量,提高泄漏检测的效率。Leakage detection is an important part of side channel analysis,which can objectively evaluate the security of cryptographic devices.Different types of side channel exist simultaneously during the running of cryptographic devices,so leakage detection against mono-channel cannot give a fully evaluation about the security of cryptographic devices.The development of multi-channel fusion leakage detection which can achieve a more comprehensive and objective evaluation is a very urgent practical technology choice.In this paper,we propose 3 multi-channel fusion leakage detection methods based on how to utilize the side information of multi-channels.The multi-channel simple fusion leakage detection combine data of multi-channel in time domain.The multi-channel time-frequency fusion leakage detection uses the time domain information and frequency domain information on multi-channel.And the multi-channel leakage detection based on multivariate hypothesis testing technology.Simulated and practical experimental results show that the multi-channel fusion leakage detection methods proposed in this paper can reduce the number of side-channel leakage discovering leakages.

关 键 词：信息泄漏 多源融合 信息泄漏检测 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]