Physical Security Devices for Computer Subsystems: A Survey of Attacks and Defenses 2008 (Updated from the CHES 2000 version)

Abstract

As the value of data on computing systems increases and operating systems become more secure, physical attacks on computing systems to steal or modify assets have become more likely. This technology requires constant review and improvement, just as other competitive technologies need review to stay at the leading edge. This paper, updated from the original 2000 version, describes known physical attacks, ranging from simple attacks that require little skill or resource, to complex attacks that require trained, technical people and considerable resources. Physical security methods to deter or prevent these attacks are presented. The intent is to match protection methods with the attack methods in terms of complexity and cost. In this way cost effective protection can be produced across a wide range of systems and needs. Specific technical mechanisms now in use are described, as well as mechanisms proposed for future use. Common design problems and solutions are discussed with consideration for manufacturing.