Open-source ReSilient Hardware and software for Internet of thiNgs

Información del proyecto

ORSHIN

Identificador del acuerdo de subvención: 101070008

DOI

10.3030/101070008

Proyecto cerrado

Fecha de la firma de la CE 20 Junio 2022

Fecha de inicio 1 Octubre 2022

Fecha de finalización 30 Septiembre 2025

Financiado con arreglo a

• Civil Security for Society

Coste total

€ 3 814 500,00

Aportación de la UE

€ 3 814 500,00

Coordinado por

TECHNIKON FORSCHUNGS- UND PLANUNGSGESELLSCHAFT MBH
Austria

CORDIS proporciona enlaces a los documentos públicos y las publicaciones de los proyectos de los programas marco HORIZONTE.

Los enlaces a los documentos y las publicaciones de los proyectos del Séptimo Programa Marco, así como los enlaces a algunos tipos de resultados específicos, como conjuntos de datos y «software», se obtienen dinámicamente de OpenAIRE .

Resultado final

Documents, reports (3)

Report about security requirements

This report explains how abstract high-level security requirements are handled in the trusted life cycle and how they are broken down into more concrete procedural requirements for the life cycle phases, and into low-level security requirements for the components.

Report about trusted life cycle design methodology for OSH

The deliverable provides the description of the methodology for composing open-source components. We envision a trusted life cycle of the device composed of several phases. The report will formalize these phases and identify the interaction and feedback of the design and production process up to the device decommissioning. The report provides the guidelines for the secure composition of building blocks. The guidelines help to achieve a secure result leveraging the security features of each component.

Project quality plan

The project quality plan (the project handbook) constitutes a set of project templates and explains the project management, review and internal quality control process, as well as other organizational topics such as meeting organization.

Publicaciones

Conference proceedings (20)

EmuOCPP: Effective and Scalable OCPP Security and Privacy Testing

Autores: Soumaya Boussaha, Victor Fresno-Gomez, Thomas Barber, Daniele Antonioli
Publicado en: 2025, ISBN 978-1-939133-49-6
Editor: USENIX

Architectural Mimicry: Innovative Instructions to Efficiently Address Control-Flow Leakage in Data-Oblivious Programs

Autores: Hans Winderix, Marton Bognar, Job Noorman, Lesly-Ann Daniel, Frank Piessens
Publicado en: 2024 IEEE Symposium on Security and Privacy (SP), 2024
Editor: IEEE
DOI: 10.1109/SP54263.2024.00047

MicroProfiler: Principled Side-Channel Mitigation through Microarchitectural Profiling

Autores: Bognar, Marton; Winderix, Hans; Van Bulck, Jo; Piessens, Frank
Publicado en: 2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P), 2023
DOI: 10.1109/eurosp57164.2023.00045

CTRAPS: CTAP Client Impersonation and API Confusion on FIDO2

Publicado en: IEEE Euro S&P, 2025
Editor: IEEE Euro S&P
DOI: 10.48550/ARXIV.2412.02349

SimProcess: High Fidelity Simulation of Noisy ICS Physical Processes

Autores: Denis Donadel, Gabriele Crestanello, Giulio Morandini, Daniele Antonioli, Mauro Conti and Massimo Merro
Publicado en: 2025
DOI: 10.48550/ARXIV.2505.22638

Bluetooth Security Testing with BlueToolkit: a Large-Scale Automotive Case Study

Autores: V. Zubkov, T. Sacchetti, D. Antonioli, M. Strohmeier
Publicado en: 2025, ISBN 978-1-939133-50-2
Editor: 19th USENIX WOOT Conference on Offensive Technologies

Design, implementation and validation of NSCP: a New Secure Channel Protocol for hardened IoT

Autores: Alberto Battistello, Guido Bertoni, Vittorio Zaccaria, Joan Bushi
Publicado en: DATE 2025, 2025
Editor: DATE 2025

Efficient attack-surface exploration for electromagnetic fault injection

Autores: Carta, Daniele Antonio Emanuele; Zaccaria, Vittorio; Molteni, Maria Chiara; Quagliarella, Gabriele
Publicado en: Constructive Side-Channel Analysis and Secure Design, 2023, ISBN 978-3-031-29497-6
Editor: Springer, Cham
DOI: 10.5281/zenodo.7820870

Partial Key Overwrite Attacks in Microcontrollers: a Survey

Autores: Pcy Sluys, Benedikt Gierlichs
Publicado en: CASCADE 2025, 2025
Editor: CASCADE

JWT Back to the future On the (ab)use of JWTs in IoT transactions

Publicado en: 2025
Editor: Zenodo
DOI: 10.5281/ZENODO.17206208

Libra: Architectural Support For Principled, Secure And Efficient Balanced Execution On High-End Processors

Autores: Hans Winderix, Marton Bognar, Lesly-Ann Daniel, Frank Piessens
Publicado en: Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, 2025
Editor: ACM
DOI: 10.1145/3658644.3690319

Wait a Cycle: Eroding Cryptographic Trust in Low-End TEEs via Timing Side Channels

Publicado en: 2025
DOI: 10.5281/ZENODO.16674672

Low-Cost First-Order Secure Boolean Masking in Glitchy Hardware

Autores: S V Dilip Kumar; Josep Balasch; Benedikt Gierlichs; Ingrid Verbauwhede
Publicado en: 2023 Design, Automation & Test in Europe Conference & Exhibition (DATE), 2023, ISSN 1558-1101
Editor: IEEE Explore
DOI: 10.23919/date56975.2023.10136920

Hardware Cost Evaluation in Systems Security

Autores: Jesse De Meulemeester, Quinten Norga, Frank Piessens, Ingrid Verbauwhede, Marton Bognar
Publicado en: 2025
Editor: ACM

Intellectual property exposure: subverting and securing intellectual property encapsulation in texas instruments microcontrollers

Publicado en: 2025
Editor: Usenix
DOI: 10.5555/3698900.3699021

Duplication-Based Fault Tolerance for RISC-V Embedded Software

Autores: Volodymyr Bezsmertnyi, Jean-Michel Cioranesco, Thomas Eisenbarth
Publicado en: Lecture Notes in Computer Science, Computer Security – ESORICS 2024, 2024
Editor: Springer Nature Switzerland
DOI: 10.1007/978-3-031-70903-6_5

Lightweight Countermeasures Against Original Linear Code Extraction Attacks on a RISC-V Core

Autores: Gousselot, Théophile; Thomas, Olivier; Dutertre, Jean-Max; Potin, Olivier; Rigaud, Jean-Baptiste
Publicado en: 2023 IEEE International Symposium on Hardware Oriented Security and Trust (HOST), 2023
DOI: 10.1109/host55118.2023.10133316

openIPE: An Extensible Memory Isolation Framework for Microcontrollers

Publicado en: 2025
DOI: 10.5281/ZENODO.16674390

CheckOCPP: Automatic OCPP Packet Dissection and Compliance Check

Publicado en: IEEE European Symposium on Security and Privacy, 2025
Editor: IEEE
DOI: 10.5281/ZENODO.15780183

E-Spoofer: Attacking and Defending Xiaomi Electric Scooter Ecosystem

Autores: Marco Casagrande; Riccardo Cestaro; Eleonora Losiouk; Mauro Conti; Daniele Antonioli
Publicado en: Proceedings of the 16th ACM Conference on Security and Privacy in Wireless and Mobile Networks, 2023
DOI: 10.5281/zenodo.8004604

Peer reviewed articles (5)

AttackDefense Framework (ADF): Enhancing IoT Devices and Lifecycles Threat Modeling

Autores: Tommaso Sacchetti, Marton Bognar, Jesse De Meulemeester, Benedikt Gierlichs, Frank Piessens, Volodymyr Bezsmertnyi, Maria Chiara Molteni, Stefano Cristalli, Arianna Gringiani, Olivier Thomas, Daniele Antonioli
Publicado en: ACM Transactions on Embedded Computing Systems, 2024, ISSN 1539-9087
Editor: Association for Computing Machinery (ACM)
DOI: 10.1145/3698396

IEEE Electron Device Letters

Autores: P. Saraza-Canflanca; F. Fodor; J. Diaz-Fortuny; B. Gierlichs; R. Degraeve; B. Kaczer; I. Verbauwhede; E. Bury
Publicado en: IEEE Electron Device Letters, 2024, ISSN 0741-3106
Editor: Institute of Electrical and Electronics Engineers
DOI: 10.1109/led.2024.3369860

Time Sharing - A Novel Approach to Low-Latency Masking

Autores: Dilip Kumar S. V., Siemen Dhooghe, Josep Balasch, Benedikt Gierlichs, Ingrid Verbauwhede
Publicado en: IACR Transactions on Cryptographic Hardware and Embedded Systems, Edición 2024, 2024, ISSN 2569-2925
Editor: Universitatsbibliothek der Ruhr-Universitat Bochum
DOI: 10.46586/tches.v2024.i3.249-272

Higher-Order Time Sharing Masking

Autores: Dilip Kumar S. V., Siemen Dhooghe, Josep Balasch, Benedikt Gierlichs, Ingrid Verbauwhede
Publicado en: IACR Transactions on Cryptographic Hardware and Embedded Systems, Edición 2025, 2025, ISSN 2569-2925
Editor: Universitatsbibliothek der Ruhr-Universitat Bochum
DOI: 10.46586/TCHES.V2025.I2.235-267

Low-Cost First-Order Secure Boolean Masking in Glitchy Hardware

Autores: S. V. Dilip Kumar, Josep Balasch, Benedikt Gierlichs, Ingrid Verbauwhede
Publicado en: IEEE Transactions on Information Forensics and Security, Edición 20, 2025, ISSN 1556-6013
Editor: Institute of Electrical and Electronics Engineers (IEEE)
DOI: 10.1109/TIFS.2025.3541442