Implementing Penetration Testing in Simulation Environment

Penetration testing of the CAN bus-based XCP protocol for automotive ECMs

A layered test architecture tailored for ECM applications is constructed, security risks of the XCP protocol under unauthenticated and weak-permission scenarios are identified, and engineering-oriented mitigation strategies are proposed.

Lessons from the Hardware Hacking Competitions: Verification Techniques, Findings, and Insights

A multi-strategy vulnerability analysis methodology is presented, combining simulation-based verification, formal verification, lint analysis, Large Language Model-assisted bug detection, and coverage-guided hybrid fuzzing to derive practical lessons for pre-silicon security verification.

Torturing OpenSSL

The Role of Penetration Testing in Identifying Cybersecurity Vulnerabilities

It is found that regular, authorized penetration testing can support vulnerability identification, risk assessment, and the implementation of appropriate remediation measures, and the study concludes that regular, authorized penetration testing can support vulnerability identification, risk assessment, and the implemen...

Analysis of Countermeasures Techniques Against Side-Channel Attacks on Electronic Circuits: A Review

Side-channel attacks (SCAs) exploit unintended physical leakages in digital systems, such as power consumption, electromagnetic emissions, and execution time, to extract sensitive information, including cryptographic keys. This article presents a comprehensive comparative study of several families of countermeasures, i...

LLM-Assisted Detection and Repair of Hardware Security Vulnerabilities in Verilog Designs

The results demonstrate the potential of LLMs to augment traditional hardware security analysis by providing automated, scalable assistance for identifying security vulnerabilities during the hardware design process.