2227
Example Language: (Attack)
The attacker runs a loop program on the core they control, and this causes a cache miss in every iteration for the RSA
algorithm. Thus, by observing network-traffic bandwidth and timing, the attack program can determine when the RSA
algorithm is doing a multiply operation (i.e., when the secret key bit is 1) and eventually extract the entire, secret key.
There may be different ways to fix this particular weakness.
Example Language: Other (Good)
Implement priority-based arbitration inside the NoC and have dedicated buffers or virtual channels for routing secret data
from trusted agents.
Observed Examples
Reference Description
CVE-2021-33096 Improper isolation of shared resource in a network-on-chip leads to denial of
service
https://www.cve.org/CVERecord?id=CVE-2021-33096
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1203 Peripherals, On-chip Fabric, and Interface/IO Problems 1194 2472
MemberOf 1418 Comprehensive Categorization: Violation of Secure
Design Principles
1400 2549
Related Attack Patterns
CAPEC-ID Attack Pattern Name
124 Shared Resource Manipulation
References
[REF-1155]Hassan M. G. Wassel, Ying Gao, Jason K. Oberg, Tedd Huffmire, Ryan Kastner,
Frederic T. Chong, Timothy Sherwood. "SurfNoC: A Low Latency and Provably Non-Interfering
Approach to Secure Networks-On-Chip". 2013. < http://cseweb.ucsd.edu/~kastner/papers/isca13-
surfNOC.pdf >.
[REF-1241]Wikipedia. "Network on a chip". < https://en.wikipedia.org/wiki/Network_on_a_chip
>.2021-10-24.
[REF-1242]Subodha Charles and Prabhat Mishra. "A Survey of Network-on-Chip Security
Attacks and Countermeasures". ACM Computing Surveys. 2021 May. < https://dl.acm.org/doi/
fullHtml/10.1145/3450964 >.2023-04-07.
[REF-1245]Subodha Charles. "Design of Secure and Trustworthy Network-on-chip Architectures".
2020. < https://www.cise.ufl.edu/research/cad/Publications/charlesThesis.pdf >.
CWE-1332: Improper Handling of Faults that Lead to Instruction Skips
Weakness ID : 1332
Structure : Simple
Abstraction : Base
Description
The device is missing or incorrectly implements circuitry or sensors that detect and mitigate the
skipping of security-critical CPU instructions when they occur.
CWE Version 4.14
CWE-1332: Improper Handling of Faults that Lead to Instruction Skips
CWE-1332: Improper Handling of Faults that Lead to Instruction Skips