Dimecres 24 de febrer - Xerrada "Security Evaluation on Electronic, Communication and Informatics' Systems"

Time and place: 18.00 h - 128B

Title and speaker: "Security Evaluation on Electronic, Communication and Informatics' Systems", David Hernández, R&D Engineer, Applus Laboratories - IT Labs

Bio: David Hernández, PhD in Electronic Engineering, has dedicated his research at Applus Laboratories - IT Labs in the fields of physical attacks and side channel analysis on smart card related devices for more than 5 years.

Abstract: After the session, participants will have a good overview of the evaluation process that a Security Lab conducts on embedded devices before they are sold to the market.

Devices include from hardware components (chips, flash memories) to Smart Cards, mobile phones, Android/iOS applications and other opening markets such as automobile and aerospace.

The session will be focused on the process of a white box evaluation. This is a kind of evaluation where the laboratory has access to all the information on the product under analysis, and conducts an informed vulnerability analysis.

Once vulnerabilities are defined, a testing process follows to either confirm the strength of the product or assess if the weaknesses are really exploitable or not (in terms of security). The talk will review the main attack paths: physical and perturbation attacks, side channel analysis and malware exploitation.