CSCI4974/index.html
2025-09-13 18:07:18 +02:00

352 lines
No EOL
11 KiB
HTML

<html>
<head><script type="text/javascript" src="https://web-static.archive.org/_static/js/bundle-playback.js?v=FC38Hc5A" charset="utf-8"></script>
<script type="text/javascript" src="https://web-static.archive.org/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script>
<script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden","showSwfDownload":true};</script>
<script type="text/javascript" src="https://web-static.archive.org/_static/js/ruffle/ruffle.js"></script>
<script type="text/javascript">
__wm.init("https://web.archive.org/web");
__wm.wombat("http://security.cs.rpi.edu:80/courses/hwre-spring2014/","20150201085737","https://web.archive.org/","web","https://web-static.archive.org/_static/",
"1422781057");
</script>
<link rel="stylesheet" type="text/css" href="https://web-static.archive.org/_static/css/banner-styles.css?v=p7PEIJWi" />
<link rel="stylesheet" type="text/css" href="https://web-static.archive.org/_static/css/iconochive.css?v=3PDvdIFv" />
<!-- End Wayback Rewrite JS Include -->
<title>CSCI 4974 / 6974 Hardware Reverse Engineering</title>
</head>
<body>
<h1>CSCI 4974 / 6974 Hardware Reverse Engineering</h1>
<p>
<b>Important info:</b>
</p>
<ul>
<li>Classes: Tuesday/Friday, 2:00 - 3:50, Low 3130</li>
<li>Professor: Bulent Yener (yener@cs.rpi.edu). Office hours TBA</li>
<li>TA: Andrew Zonenberg (zonena@rpi.edu). Office hours AE 119 Tuesday/Friday 5-7 PM.</li>
<li>Download the <a href="syllabus.pdf">Syllabus</a></li>
</ul>
<p>
<b>Timeline</b><br/>
<i>Draft notes for upcoming lectures are provided for advance study purposes only and are subject to change. The version posted as of the end of lecture is authoritative as far as material which will be covered on quizzes etc.</i>
</p>
<table border="solid 1px" cellspacing="0px" cellpadding="5px">
<tr style="font-weight:bold">
<td>Date</td>
<td>Class</td>
</tr>
<tr>
<td>1/21/2014</td>
<td><a href="Lecture1_Intro.pdf">Lecture 1: Course overview, motivation, legal issues, switch model of CMOS logic</a></td>
</tr>
<tr>
<td>1/24/2014</td>
<td><a href="Lecture2_Packaging.pdf">Lecture 2: Package construction</a></td>
</tr>
<tr>
<td>1/28/2014</td>
<td>
<a href="Quiz1_CMOS_Sch.pdf">Quiz 1: CMOS schematics, packaging</a><br/>
<a href="Quiz1a_CMOS_Sch_makeup.pdf">Quiz 1a: Makeup exam</a><br/>
<a href="Lecture3_Depackaging.pdf">Lecture 3: Depackaging</a>
</td>
</tr>
<tr>
<td>1/31/2014</td>
<td>
Lab 1: Depackaging demo (Lab group A only, no class for group B. Location: MRC 166 EM lab)
</td>
</tr>
<tr>
<td>2/4/2014</td>
<td>Lab 1: Depackaging demo (Lab group B only, no class for group A. Location: MRC 166 EM lab)
</td>
</tr>
<tr>
<td>2/7/2014</td>
<td>
Lab 1a reports due<br/>
<a href="Quiz2_Decapping.pdf">Quiz 2: Depackaging</a><br/>
<a href="Lecture4_Layout.pdf">Lecture 4: CMOS layout</a><br/>
<a href="Lecture4_Examples.tar.gz">Download the example layouts</a>
</td>
</tr>
<tr>
<td>2/11/2014</td>
<td>
Lab 1b reports due<br/>
<a href="Quiz3_Layout.pdf">Quiz 3: CMOS layout</a><br/>
<a href="hw1.pdf">Homework 1</a> out<br/>
<a href="hw1_data.tar.gz">Homework 1 images</a><br/>
<a href="hw1_data2.tar.gz">More homework 1 images</a><br/>
<a href="Lecture5_FabProcesses.pdf">Lecture 5: Fabrication processes</a>
</td>
</tr>
<tr>
<td>2/14/2014</td>
<td>
<b>No class</b>: Canceled due to heavy snow.
</td>
</tr>
<tr>
<td>2/18/2014</td>
<td>
<b>No class</b>: Follow Monday schedule.
</td>
</tr>
<tr>
<td>2/21/2014</td>
<td>
<a href="Lecture6_Deprocessing.pdf">Lecture 6: Deprocessing</a>
</td>
<tr>
<td>2/25/2014</td>
<td>
<a href="Quiz4_Deprocessing.pdf">Quiz 4: Process ID and deprocessing</a><br/>
<a href="Lecture7_CPLDArch.pdf">Lecture 7: CPLD architecture</a>
</td>
</tr>
<tr>
<td>2/28/2014</td>
<td>
<a href="Quiz5_CPLDArch.pdf">Quiz 5: CPLD architecture</a><br/>
<a href="Lecture8_Microscopy.pdf">Lecture 8: Microscopy and Imaging</a><br/>
<a href="hugindemo.tar.gz">Files for in-class exercise</a><br/>
</td>
</tr>
<tr>
<td>3/4/2014</td>
<td>
Lab 2: SEM Imaging (Lab group A only, no class for group B. Location: MRC EM lab)
</td>
</tr>
<tr>
<td>3/7/2014</td>
<td>
Lab 2: SEM Imaging (Lab group B only, no class for group A. Location: MRC EM lab)<br/>
</td>
</tr>
<tr>
<td>3/11/2014</td>
<td>
<b>No class:</b> Spring break
</td>
</tr>
<tr>
<td>3/14/2014</td>
<td>
<b>No class:</b> Spring break<br/>
Happy pi day!
</td>
</tr>
<tr>
<td>3/18/2014</td>
<td>
Homework 1 due (tentative)<br/>
Lab 2 reports due (both groups)<br/>
<a href="Quiz6_Microscopy.pdf">Quiz 6: Microscopy and imaging</a><br/>
<a href="Lecture9_MaskROM.pdf">Lecture 9: Mask ROM layout</a>
</td>
</tr>
<tr>
<td>3/21/2014</td>
<td>
<a href="Lecture10_EEPROM.pdf">Lecture 10: PROM/EPROM/EEPROM/efuse/Flash layout</a>
</td>
</tr>
<tr>
<td>3/25/2014</td>
<td>
<a href="Lecture11_SRAM.pdf">Lecture 11: SRAM layout</a>
</td>
</tr>
<tr>
<td>3/28/2014</td>
<td>
<a href="Quiz7_Memory.pdf">Quiz 7: Memory technology</a><br/>
<a href="Lecture12_NoninvasiveAttacks.pdf">Lecture 12: Non-invasive attacks on logic</a>
</td>
</tr>
<tr>
<td>4/1/2014</td>
<td>
Lecture 13: Fault attacks on crypto (joint lecture by Prof. Yener and graduate student Brennan)<br/>
<a href="Fault-Attacks-short.pdf">Prof. Yener's slides</a><br/>
<a href="DPA_Presentation.pdf">Brennan's slides</a>
</td>
</tr>
<tr>
<td>4/4/2014</td>
<td>
<a href="Lecture14_InvasiveAttacks.pdf">Lecture 14: Invasive and semi-invasive attacks</a><br/>
Lab 3: UV light attacks on PIC12F683 (both groups, during normal class period)
</td>
</tr>
<tr>
<td>4/8/2014</td>
<td>
Lab 4: Invasive attacks (Lab group A only, no class for group B. Location: Cleanroom test area)
</td>
</tr>
<tr>
<td>4/11/2014</td>
<td>
Lab 4: Invasive attacks (Lab group B only, no class for group A. Location: Cleanroom test area)
</td>
</tr>
<tr>
<td>4/15/2014</td>
<td>
<a href="Quiz8_Attacks.pdf">Quiz 8: Attacks</a><br/>
Homework 2 out: PCB RE (see slides)<br/>
<a href="Lecture16_PCB_Analysis.pdf">Lecture 15: PCB RE: Component ID, block diagram extraction</a>
</td>
</tr>
<tr>
<td>4/18/2014</td>
<td>
Lecture 16: Guest lecture by Danny Walters (MITRE) on electromagnetic side-channel attacks
</td>
</tr>
<tr>
<td>4/22/2014</td>
<td>
<a href="Lecture15_Antitamper.pdf">Lecture 17: Anti-tamper / anti-analysis techniques</a>
</td>
</tr>
<tr>
<td>4/25/2014</td>
<td>
<a href="Lecture18_PCB_Analysis2.pdf">Lecture 18: PCB RE: Fab, deprocessing, netlist extraction</a>
</td>
</tr>
<tr>
<td>4/29/2014</td>
<td>
<a href="Quiz9_PCBRE.pdf">Quiz 9: PCB RE</a><br/>
<a href="Lecture19_FPGA.pdf">Lecture 19: Programmable logic: FPGAs</a>
</td>
</tr>
<tr>
<td>5/2/2014</td>
<td>
<a href="Lecture20_MachineVision.pdf">Lecture 20: Machine vision, automated RE tools</a>
</td>
</tr>
<tr>
<td>5/6/2014</td>
<td>
Homework 2 presentations. No final exam.
</td>
</tr>
</table>
<p>
<b>Announcements</b>
</p>
<ul>
<li>1/25/2014: Syllabus updated for new lab schedule and office hour times/locations</li>
<li>1/28/2014: Check out the <a href="https://web.archive.org/web/20150201085737/https://docs.google.com/spreadsheet/ccc?key=0AkqT3htW1sFydFBaU0lfX2k5TjVudzhHR2tOQmhQRXc#gid=0">list of interesting chips</a> we might decap in lab #1. If anyone has votes, send them to the TA.
(Large CPU packages are off limits for the lab because they tend to take a while to process.)
<li>2/2/2014: Lab 1a data is available:
<ul>
<li><a href="https://web.archive.org/web/20150201085737/http://siliconpr0n.org/archive/doku.php?id=azonenberg:xilinx:xc3s50an">Xilinx XC3S50AN</a> (70% nitric, live decap)</li>
<li><a href="https://web.archive.org/web/20150201085737/http://siliconpr0n.org/archive/doku.php?id=azonenberg:xilinx:xc9572xl">Xilinx XC9572XL</a> (70% nitric, bare die)</li>
<li><a href="https://web.archive.org/web/20150201085737/http://siliconpr0n.org/archive/doku.php?id=azonenberg:xilinx:xc2c128">Xilinx XC2C128</a> (98% sulfuric, bare die)</li>
<li><a href="https://web.archive.org/web/20150201085737/http://imgur.com/a/ihTzB">Photos from lab session</a></li>
</ul>
</li>
<li>2/4/2014: You may find <a href="https://web.archive.org/web/20150201085737/http://siliconexposed.blogspot.com/2014/02/process-overview-umc-180nm-envm.html">this blog post on UMC's 180nm process</a> an interesting read.</li>
<li>2/4/2014: Lab 1b data is being uploaded. Stay tuned for more!
<ul>
<li><a href="https://web.archive.org/web/20150201085737/http://siliconpr0n.org/archive/doku.php?id=azonenberg:siliconimage:sii1364">Silicon Image SII1364</a> (70% nitric, bare die)</li>
<li><a href="https://web.archive.org/web/20150201085737/http://siliconpr0n.org/archive/doku.php?id=azonenberg:xilinx:xc95144xl">Xilinx XC95144XL</a> (98% sulfuric, bare die</li>
<li><a href="https://web.archive.org/web/20150201085737/http://siliconpr0n.org/archive/doku.php?id=azonenberg:winbond:w9751g6kb">Winbond W9751G6KB</a> (98% sulfuric, bare die, started prior to lab)</li>
<li><a href="https://web.archive.org/web/20150201085737/http://siliconpr0n.org/archive/doku.php?id=azonenberg:xilinx:xc3s50a">Xilinx XC3S50A</a> (98% sulfuric, bare die, started prior to lab)</li>
<li><a href="https://web.archive.org/web/20150201085737/http://siliconpr0n.org/archive/doku.php?id=azonenberg:atmel:atmega3216">Atmel ATmega3216 (70% nitric, live decap)</a></li>
<li><a href="https://web.archive.org/web/20150201085737/http://imgur.com/a/LfKGr">Photos from lab session</a></li>
</ul>
</li>
<li>2/23/2014: Office hours moved one hour later, new time is 5-7 PM. Same location and days.</li>
<li>3/4/2014: <a href="lab2a.tar.gz">Lab 2a data</a> is now available</li>
<li>3/13/2014: <a href="lab2b.tar.gz">Lab 2b data</a> is now available</li>
<li>3/31/2014:
<ul>
<li>Some scheduling changes for the later part of the semester have been made, please pay attention to the calendar above.</li>
<li><a href="https://web.archive.org/web/20150201085737/http://siliconexposed.blogspot.com/2014/03/getting-my-feet-wet-with-invasive.html">This blog post</a> is a sneak peek at what to expect from lab 4.</li>
<li>The final project has been removed and final course grades will be computed from HW1/2, lab grades, and quiz grades only. HW2 is now a group assignment and presentations are due the last day of class.</li>
</ul>
</li>
<li>4/13/2014: Lab 4 data is now available
<ul>
<li><a href="xc2c32a_fib.tar.gz">FIB photos</a></li>
<li><a href="lab4.tar.gz">Cleanroom photos</a></li>
</ul>
</li>
</ul>
<hr/>
<p>
<a rel="license" href="https://web.archive.org/web/20150201085737/http://creativecommons.org/licenses/by/4.0/"><img alt="Creative Commons License" style="border-width:0" src="https://web.archive.org/web/20150201085737im_/http://i.creativecommons.org/l/by/4.0/88x31.png"/></a><br/>
This work is licensed under a <a rel="license" href="https://web.archive.org/web/20150201085737/http://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 International License</a>.
</p>
</body>
</html>
<!--
FILE ARCHIVED ON 08:57:37 Feb 01, 2015 AND RETRIEVED FROM THE
INTERNET ARCHIVE ON 15:52:50 Sep 13, 2025.
JAVASCRIPT APPENDED BY WAYBACK MACHINE, COPYRIGHT INTERNET ARCHIVE.
ALL OTHER CONTENT MAY ALSO BE PROTECTED BY COPYRIGHT (17 U.S.C.
SECTION 108(a)(3)).
-->
<!--
playback timings (ms):
captures_list: 0.856
exclusion.robots: 0.041
exclusion.robots.policy: 0.022
esindex: 0.017
cdx.remote: 157.468
LoadShardBlock: 1377.575 (3)
PetaboxLoader3.datanode: 547.231 (5)
PetaboxLoader3.resolve: 461.608 (2)
load_resource: 200.458 (2)
-->