Hardware Injection and Hardware Security
- Level
- Graduate
- Status
- Under development
Note: this course is still being designed and calibrated; the page content is for reference and does not represent the final teaching version.
Syllabus
Course Overview
Hardware Injection and Hardware Security studies how the physical world breaks assumptions in digital systems. Topics include fault injection, side channels, debug interfaces, supply-chain risk, hardware Trojans, roots of trust, and lab safety practices.
This is a graduate topic course extending system security and trusted computing to the hardware layer.
Prerequisites
- Computer architecture or embedded-systems background.
- Basic knowledge of cryptography and system security.
- Willingness to follow hardware lab safety rules.
Learning Outcomes
- Explain hardware threat models and physical attack surfaces.
- Understand fault injection, power side channels, and timing side channels.
- Evaluate risks in debug interfaces, boot chains, and key storage.
- Design reproducible and safe hardware experiments.
- Propose hardware security defenses and validation plans.
Course Format
- Two meetings per week: one for core concepts and one for labs, paper discussion, or project review.
- The course proceeds over 16 weeks, each with a checkable assignment, lab, or project milestone.
- Reproducibility is required: code, configuration, data, lab logs, and reports must be reviewable by staff or peers.
Weekly Plan
Hardware threat models and lab ethics
Build an asset and attack-surface list for a target device.
Hardware threat models and lab ethics: lab and review
Build an asset and attack-surface list for a target device. Complete the paired lab, record issues, and explain design tradeoffs in class review.
Debug interfaces and firmware extraction
Identify risks in UART, JTAG, SWD, and related interfaces.
Debug interfaces and firmware extraction: lab and review
Identify risks in UART, JTAG, SWD, and related interfaces. Complete the paired lab, record issues, and explain design tradeoffs in class review.
Fault-injection fundamentals
Design voltage, clock, or EM fault-injection experiments.
Fault-injection fundamentals: lab and review
Design voltage, clock, or EM fault-injection experiments. Complete the paired lab, record issues, and explain design tradeoffs in class review.
Power and EM side channels
Analyze sampling, alignment, and leakage assumptions.
Power and EM side channels: lab and review
Analyze sampling, alignment, and leakage assumptions. Complete the paired lab, record issues, and explain design tradeoffs in class review.
Boot chains, ROM, and roots of trust
Evaluate secure boot and rollback risks.
Boot chains, ROM, and roots of trust: lab and review
Evaluate secure boot and rollback risks. Complete the paired lab, record issues, and explain design tradeoffs in class review.
Hardware Trojans and supply chains
Read and review a hardware supply-chain case.
Hardware Trojans and supply chains: lab and review
Read and review a hardware supply-chain case. Complete the paired lab, record issues, and explain design tradeoffs in class review.
Defenses, detection, and validation
Propose a defense test plan for the target device.
Defenses, detection, and validation: lab and review
Propose a defense test plan for the target device. Complete the paired lab, record issues, and explain design tradeoffs in class review.
Hardware security lab report
Submit lab notes, data, and safety review.
Hardware security lab report: lab and review
Submit lab notes, data, and safety review. Complete the paired lab, record issues, and explain design tradeoffs in class review.
Assessment
Concept questions, reading responses, design tasks, and small programming or lab exercises.
Hardware experiments, data analysis, safety practice, and research report.
Participation in discussions, demos, code or paper reviews, and peer feedback.
Submit reproducible artifacts, a technical report, and a demo explaining methods, results, limitations, and future work.
Course Project
Projects may audit hardware interfaces, extract firmware, measure side channels, evaluate defenses, or reproduce a paper. Safety notes and reproducible artifacts are required.
Policies
- AI tools are allowed, but generated code, lab notes, and design suggestions must be reviewed by the student and disclosed in the report.
- Students may not submit code, proofs, configuration, or experimental results they cannot explain; each member must defend their own design, tests, and tradeoffs.
- Late work affects iteration grades, but the course values reproducible, auditable, and maintainable results over last-minute accumulation.
Reference Courses
International
China 985 Universities
- 北京大学硬件安全研究方向
- 浙江大学IoT Security(含硬件安全)
- 清华大学可信网络与系统研究所
- 电子科技大学嵌入式系统设计