The uncertainty of Side-Channel Analysis: A way to leverage from heuristics

TL;DR

This paper introduces a Six Sigma-based statistical methodology to optimize and reduce variability in side-channel analysis of embedded devices, making the process more accessible and reliable for less-experienced analysts.

Contribution

It adapts and customizes Six Sigma methodology for side-channel analysis, enhancing process consistency and aiding analysts in parameter selection.

Findings

Improved consistency in side-channel analysis results.

Reduced trial-and-error in parameter tuning.

Enhanced process understanding for less-experienced analysts.

Abstract

Performing a comprehensive side-channel analysis evaluation of small embedded devices is a process known for its variability and complexity. In real-world experimental setups, the results are largely influenced by a huge amount of parameters that are not easily adjusted without trial and error and are heavily relying on the experience of professional security analysts. In this paper, we advocate the use of an existing statistical methodology called Six Sigma (6{\sigma}) for side-channel analysis optimization for this purpose. This well-known methodology is commonly used in other industrial fields, such as production and quality engineering, to reduce the variability of industrial processes. We propose a customized Six Sigma methodology, which enables even a less-experienced security analysis to select optimal values for the different variables that are critical for the side-channel analysis procedure. Moreover, we show how our methodology helps in improving different phases in the side-channel analysis process.