What to expect

After this workshop, attendees should expect to have a clear understanding on the process involved from the planning to the execution of a glitch campaign, with the following key takeaways:

-Understanding the complexity of developing a fault injection campaign
-Learning which sources of information are necessary to correctly set up the environment.
-Learning about open-source and budget-friendly hardware tools to perform fault injection attacks.
-Exercises that require no special tools or a specific OS, only an internet browser.

What not to expect

These are the things that attendees should not expect:

-Hands-on exercises with real hardware during the workshop.
-To keep anything they see during the workshop (oscilloscopes, target boards, power supplies...) besides the workshop slides.

What to bring?

While the trainers will bring some devices to run some live demos, they will not be providing any physical hardware or tools to the attendees. Even though nothing other than your attention is needed to fully benefit from attending this workshop, we recommend that you bring a laptop with an internet browser that you can use to take notes and be able to do some of the exercises (such as finding specific pinouts and other characteristics).

How to prepare for the workshop

Even though no previous experience with hardware or hardware security is required, it is expected that attendees will familiarize themselves, at least at a basic level, with the following concepts before attending the workshop:

• In-system programming (ISP).
• Hardware Debug ports and protocols (JTAG, SWD).
• How do digital signals work.
• How do voltage regulator ICs work.

Schedule

Basic concepts in electronics

The opening will have the trainers explain a few basic electronic concepts and talk about components, materials and specifications that are crucial in hardware security testing.

Planning phase

In this part, we will learn the methodology for evaluating the required physical connections to the target, as well as creating a profiling plan and defining the attacks that will be performed on the target during glitching campaigns.

Profiling phase

Here, we will go through the steps that are required to execute our profiling plan. This includes learning how to architect the profiling code tailored to a specific target, making sure that your target has the right pins connected to the right places, and how to use the oscilloscope in conjunction with the profiling code.

Attack phase

While this is the most interesting part, it is the less critical. This is where you learn how to put all the data you have gathered together, configure and start running a glitch campaign.