A supervised machine learning-based framework to detect low-level fault injections in software systems

Fault injection attacks inject faults into system components, inducing abnormal software behavior. Software vulnerability analysis cannot prevent new attack vectors without software modifications. Attack detection methods utilize system-specific software features and unsupervised learning due to lack of labelled data. Unsupervised pattern recognition is vulnerable to false data injection, and Machine Learning algorithms such as Artificial and Recurrent Neural Networks are not feasible for resource-constrained software systems. Supervised detection of low-level attack effects presents a possible solution to these issues. This thesis introduces a supervised ML-based framework to detect low-level software fault injections consisting of labelled dataset generation using an instruction-level software fault injection tool to simulate attack effects. The framework is implemented on two software systems and the results demonstrate its feasibility. The thesis explores system-level threat detection due to simulated low-level attack effects and demonstrates that combining application data and software properties improves the low-level software fault injection prediction.

Name thesis:degree_name

Master of Applied Science (MASc)

Discipline thesis:degree_discipline

Electrical and Computer Engineering

Grantor

University of Ontario Institute of Technology

Year dc:date.issued

2022

Author dc:creator

• Gangolli, Aakash Anil

Advisors dc:contributor.advisor

• Mahmoud, Qusay H.
• Azim, Akramul

• Attack detection
• Fault injection attack
• Low-level software fault injection
• Machine learning
• Software fault injection dataset

Language dc:language.iso

en

Handle dc:identifier.uri

https://hdl.handle.net/10155/1545

OAI identifier oai:identifier

oai:ontariotechu.scholaris.ca:10155/1545