Intrinsic Rowhammer PUFs: Leveraging the Rowhammer Effect for Improved Security
This work addresses the need for improved hardware security primitives for device fingerprinting and identification, offering a novel application of a known vulnerability in a positive context.
The paper tackles the problem of designing a new type of memory-based Physically Unclonable Function (PUF) by leveraging the Rowhammer effect in DRAM modules, resulting in a PUF that demonstrates required security properties and could be deployed on commercial devices without custom hardware.
Physically Unclonable Functions (PUFs) have become an important and promising hardware primitive for device fingerprinting, device identification, or key storage. Intrinsic PUFs leverage components already found in existing devices, unlike extrinsic silicon PUFs, which are based on customized circuits that involve modification of hardware. In this work, we present a new type of a memory-based intrinsic PUF, which leverages the Rowhammer effect in DRAM modules; the Rowhammer PUF. Our PUF makes use of bit flips, which occur in DRAM cells due to rapid and repeated access of DRAM rows. Prior research has mainly focused on Rowhammer attacks, where the Rowhammer effect is used to illegitimately alter data stored in memory, e.g., to change page table entries or enable privilege escalation attacks. Meanwhile, this is the first work to use the Rowhammer effect in a positive context: to design a novel PUF. We extensively evaluate the Rowhammer PUF using commercial, off-the-shelf devices, not relying on custom hardware or an FPGA-based setup. The evaluation shows that the Rowhammer PUF holds required properties needed for the envisioned security applications, and could be deployed today.