Systems, methods and equipment for intrusion detection and analysis using power characteristics such as side channel information

摘要

Some embodiments described herein are systems that collect and learn normal side channel normal operation, process it to reveal important characteristics, and collect subsequent collected and processed data. It includes a system that can compare for abnormal operation, report such operation to the management center, and display this information at the management center and perform the predetermined operation when the abnormal operation is observed. In some examples, the physical side channel (and indirect means of program execution such as power consumption or electromagnetic radiation and other physical signals) uses an external monitor to evaluate the execution status in the processor or digital circuit, It can be used to detect very accurately if unauthorized execution disrupts the normal operation of the target system (eg, a computer system, etc.).