Memory Carving in Embedded Devices: Separate the Wheat from the Chaff

Abstract : This paper investigates memory carving techniques for embedded devices. Given that cryptographic material in memory dumps makes carving techniques inefficient, we introduce a methodology to distinguish meaningful information from cryptographic material in smallsized memory dumps. The proposed methodology uses an adaptive boosting technique with statistical tests. Experimented on EMV cards, the methodology recognized 92% of meaningful information and 98% of cryptographic material.
Document type :
Conference papers
Complete list of metadatas

Cited literature [22 references]  Display  Hide  Download

https://hal.archives-ouvertes.fr/hal-01338109
Contributor : Morgan Barbier <>
Submitted on : Friday, July 1, 2016 - 3:34:53 PM
Last modification on : Thursday, April 4, 2019 - 10:18:05 AM

File

132-Paper.pdf
Files produced by the author(s)

Identifiers

Citation

Thomas Gougeon, Morgan Barbier, Patrick Lacharme, Gildas Avoine, Christophe Rosenberger. Memory Carving in Embedded Devices: Separate the Wheat from the Chaff. 14th International Conference on Applied Cryptography and Network Security (ACNS 2016), Jun 2016, Guilford, United Kingdom. ⟨10.1007/978-3-319-39555-5_32⟩. ⟨hal-01338109v2⟩

Share

Metrics

Record views

734

Files downloads

327