Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
skip to main content
10.1145/3289602.3293920acmconferencesArticle/Chapter ViewAbstractPublication PagesfpgaConference Proceedingsconference-collections
short-paper
Public Access

Temporal Thermal Covert Channels in Cloud FPGAs

Published: 20 February 2019 Publication History

Abstract

With increasing interest in Cloud FPGAs, such as Amazon's EC2 F1 instances or Microsoft's Azure with Catapult servers, FPGAs in cloud computing infrastructures can become targets for information leakages via convert channel communication. Cloud FPGAs leverage temporal sharing of the FPGA resources between users. This paper shows that heat generated by one user can be observed by another user who later uses the same FPGA. The covert data transfer can be achieved through simple on-off keying (OOK) and use of multiple FPGA boards in parallel significantly improves data throughput. The new temporal thermal covert channel is demonstrated on Microsoft's Catapult servers with FPGAs running remotely in the Texas Advanced Computing Center (TACC). A number of defenses against the new temporal thermal covert channel are presented at the end of the paper.

References

[1]
Andreas Agne, Hendrik Hangmann, Markus Happe, Marco Platzner, and Christian Plessl. 2014. Seven recipes for setting your FPGA on fire--a cookbook on heat generators. Microprocessors and Microsystems, Vol. 38, 8 (2014), 911--919.
[2]
AWS News Blog. 2018. AWS News Blog -- Per-Second Billing for EC2 Instances and EBS Volumes. https://aws.amazon.com/blogs/aws/new-per-second-billing-for-ec2-instances-and-ebs-volumes/.
[3]
Eduardo Boemo and Sergio López-Buedo. 1997. Thermal monitoring on FPGAs using ring-oscillators. In International Workshop on Field Programmable Logic and Applications. Springer, 69--78.
[4]
Alibaba Cloud. 2018. Alibaba Cloud -- Create an f3 instance. https://www.alibabacloud.com/help/doc-detail/71545.htm.
[5]
Thomas M Cover and Joy A Thomas. 2006. Elements of information theory 2nd edition. Willey-Interscience: NJ (2006), 187--188.
[6]
Amazon F1. 2018. Amazon EC2 F1 Instances. https://aws.amazon.com/ec2/instance-types/f1/.
[7]
Microsoft Azure FPGA. 2018. Microsoft Launches FPGA-Powered Machine Learning for Azure Customers . https://www.top500.org/news/microsoft-launches-fpga-powered-machine-learning-for-azure-customers/.
[8]
Michael Hutter and Jörn-Marc Schmidt. 2013. The temperature side channel and heating fault attacks. In International Conference on Smart Card Research and Advanced Applications (2013). Springer, 219--235.
[9]
Daehee Jang, Hojoon Lee, Minsu Kim, Daehyeok Kim, Daegyeong Kim, and Brent Byunghoon Kang. 2014. Atra: Address translation redirection attack against hardware-based external monitors. In Proceedings of the Conference on Computer and Communications Security. ACM, 167--178.
[10]
Markus Kucera and Michael Vetter. 2007. FPGA-Rootkits Hiding Malicious Code inside the Hardware. In Proceedings of the Fifth Intemnational Workshop on Intelligent Solutions in Embedded Systems. IEEE, 262--272.
[11]
Ramya Jayaram Masti, Devendra Rai, Aanjhan Ranganathan, Christian Müller, Lothar Thiele, and Srdjan Capkun. 2015. Thermal Covert Channels on Multi-core Platforms. In USENIX Security Symposium (2015) . 865--880.
[12]
Chethan Ramesh, Shivukumar B Patil, Siva Nishok Dhanuskodi, George Provelengios, Sebastien Pillement, Daniel Holcomb, and Russell Tessier. 2018. FPGA side channel attacks without physical access. In International Symposium on Field-Programmable Custom Computing Machines. 45--52.
[13]
G Edward Suh and Srinivas Devadas. 2007. Physical unclonable functions for device authentication and secret key generation. In Design Automation Conference. IEEE, 9--14.
[14]
TACC. 2018. Catapult - Texas Advanced Computing Center. https://www.tacc.utexas.edu/systems/catapult.

Cited By

View all
  • (2025)Power and Frequency Intrinsic Channels on gem5IEEE Transactions on Circuits and Systems I: Regular Papers10.1109/TCSI.2024.343584172:2(671-684)Online publication date: Feb-2025
  • (2024)Evaluation of Thermal Stress on Heterogeneous IoT-Based Federated LearningElectronics10.3390/electronics1316314013:16(3140)Online publication date: 8-Aug-2024
  • (2024)Covert-channels in FPGA-enabled SmartSSDsACM Transactions on Reconfigurable Technology and Systems10.1145/363531217:2(1-23)Online publication date: 30-Apr-2024
  • Show More Cited By

Recommendations

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences
FPGA '19: Proceedings of the 2019 ACM/SIGDA International Symposium on Field-Programmable Gate Arrays
February 2019
360 pages
ISBN:9781450361378
DOI:10.1145/3289602
Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Sponsors

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 20 February 2019

Permissions

Request permissions for this article.

Check for updates

Author Tags

  1. cloud fpga
  2. covert channels
  3. fpga security
  4. ring oscillator

Qualifiers

  • Short-paper

Funding Sources

Conference

FPGA '19
Sponsor:

Acceptance Rates

Overall Acceptance Rate 125 of 627 submissions, 20%

Upcoming Conference

FPGA '25

Contributors

Other Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

  • Downloads (Last 12 months)121
  • Downloads (Last 6 weeks)20
Reflects downloads up to 06 Feb 2025

Other Metrics

Citations

Cited By

View all
  • (2025)Power and Frequency Intrinsic Channels on gem5IEEE Transactions on Circuits and Systems I: Regular Papers10.1109/TCSI.2024.343584172:2(671-684)Online publication date: Feb-2025
  • (2024)Evaluation of Thermal Stress on Heterogeneous IoT-Based Federated LearningElectronics10.3390/electronics1316314013:16(3140)Online publication date: 8-Aug-2024
  • (2024)Covert-channels in FPGA-enabled SmartSSDsACM Transactions on Reconfigurable Technology and Systems10.1145/363531217:2(1-23)Online publication date: 30-Apr-2024
  • (2024)Evaluation of Thermal Stress on IoT-based Federated LearningProceedings of the 2024 ACM Southeast Conference10.1145/3603287.3651222(291-296)Online publication date: 18-Apr-2024
  • (2024)Extending FPGA Information Leaks with Trojan Phantom Circuits2024 International Symposium on Secure and Private Execution Environment Design (SEED)10.1109/SEED61283.2024.00011(1-10)Online publication date: 16-May-2024
  • (2024)High-Confidence Remote Power Analysis on Heterogeneous SoCsJournal of Hardware and Systems Security10.1007/s41635-024-00155-5Online publication date: 30-Dec-2024
  • (2023)A Survey on FPGA Cybersecurity Design StrategiesACM Transactions on Reconfigurable Technology and Systems10.1145/356151516:2(1-33)Online publication date: 11-Mar-2023
  • (2023)A Near-Field EM Sensor Implemented in FPGA Configurable Fabric2023 IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)10.1109/TrustCom60117.2023.00259(1908-1913)Online publication date: 1-Nov-2023
  • (2023)Detection of Thermal Covert Channel Attacks Based on Classification of Components of the Thermal Signal FeaturesIEEE Transactions on Computers10.1109/TC.2022.318957872:4(971-983)Online publication date: 1-Apr-2023
  • (2023)A Visionary Look at the Security of Reconfigurable Cloud ComputingProceedings of the IEEE10.1109/JPROC.2023.3330729111:12(1548-1571)Online publication date: Dec-2023
  • Show More Cited By

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Login options

Figures

Tables

Media

Share

Share

Share this Publication link

Share on social media