Why study offensive security?

Offensive security research is not just fun: it can have a real impact on keeping our society free and safe. The field of implementation security deals with studying the security of actual physical systems, both by attacking them and by proposing ways to defend against attacks. Even the best, most secure algorithm is useless if it’s not implemented carefully, and our job is to make sure that happens.

One main purpose of the Implementation Security Lab is to carry out side-channel attacks -– cyber attacks that allow the extraction of secret information from various devices by exploiting their precise physical behaviors (such as power consumption, electromagnetic emanations, heat or vibration). The lab, which is established with support from the Israeli Science Foundation and the Israeli National Cyber Security Bureau, is based on knowledge collected as part of the EU-funded project ECRYPT. In the lab we use highly sensitive measurement equipment such as oscilloscopes, wideband receivers and signal generators, and apply advanced techniques such as correlation power analysis, differential power analysis and template attacks to assess the impact of side-channel attacks by measuring the leakage of a target device, such as an IoT device, under test.

Not all side-channel attacks require knowledge in electrical engineering and a fancy lab. Micro-architectural side-channel attacks, in particular cache attacks, are a very interesting type of attack which targets PCs and smartphones. These attacks require nothing more than a web browser and some Javascript code. The Lab’s new home in the Weinstein Building in Ben-Gurion University includes a custom-designed space with a central location for sensitive measurement apparatus, lab benches for measurement work and for work with electronics hand tools, and ample shelf space for the other components. If you want to study side-channel attacks in Israel, there is simply no better place.

Why study at BGU?

Because other students who did it had a great time.

Join the lab!

Some research groups have a very famous boss with a huge budget, a strictly defined research agenda and lots of academic connections. If you join this lab, you’ll get none of that! Instead, you’ll get to play with a lot of cool toys and have the opportunity to work in a friendly group where your individual contribution can really make a difference. A generous stipend will be offered to appropriate candidates.

Still interested in joining? Send me an e-mail now!