This paper, for the first time, proposes the joint application of run-time monitoring and post-execution verification methods to protect the integrity of AES encryption on Internet-of-Things (IoT) systems against fault injection attacks. The proposed method operates on the source code of the encryption algorithm and introduces a limited number of redundant variables into the AES code before compilation to monitor and detect fault attacks at runtime. For further integrity checking, time-series analysis of the redundant variables is used as a post-execution verification method that captures the attacks not caught by run-time detection. Our combined method has been evaluated through software simulation, in which we have injected 1200 fault attacks into a running AES code. The simulation results show that the run-time monitoring and post-execution verification methods can, together, detect up to 98% of conducted fault attacks. The biggest advantage of this method is its applicability to any hardware platform without the need for additional hardware support.

© Copyright 2024 Elsevier B.V., All rights reserved.