Bridging Software-Based and Hardware-Based Fault Injection Vulnerability Detection

Software-based and hardware-based approaches have both been used to detect fault injection vulnerabilities. Software-based approaches can provide broad and rapid coverage, but may not correlate with genuine hardware vul-nerabilities. Hardware-based approaches are indisputable in their results, but rely upon expensive expert knowledge and manual testing. This work bridges software-based and hardware-based fault injection vulnerability detection by contrasting results of both approaches. This demonstrates that: not all software-based vulnerabilities can be reproduced in hardware; prior conjectures on the fault model for EMP attacks may not be accurate; and that there is a coincidence between software-based and hardware-based approaches. Further, combining both approaches can yield a vastly more accurate and efficient approach to detecting genuine fault injection vulnerabilities