侧信道和故障注入攻击抵抗标准

This report provides a survey of side channel and fault injection attacks that have an impact on automotive embedded systems. The focus is on side channel attacks that target cryptographic algorithms and hardware security engines, as well as sensitive data leakage. The report also considers fault injection attacks against typical vehicle components that allow bypassing of security controls to compromise the target system security and outlines some countermeasures to detect and/or prevent them. The report provides a list of security countermeasures that can be considered by manufacturers based on their risk tolerance to such attacks. Additionally, it offers the automotive industry supply chain a common language to facilitate the communication of side channel and fault injection mitigation requirements among the various stakeholders.