I Know What Your Layers Did: Layer-wise Explainability of Deep Learning Side-channel Analysis

IACR Communications in Cryptology, vol. 2

Abstract

Deep neural networks have proven effective for second-order profiling side-channel attacks, even in a black-box setting with no prior knowledge of masks and implementation details. While such attacks have been successful, no explanations were provided for understanding why a variety of deep neural networks can (or cannot) learn high-order leakages and what the limitations are. In other words, we lack the explainability on neural network layers combining (or not) unknown and random secret shares, which is a necessary step to defeat, e.g., Boolean masking countermeasures. In this paper, we use information-theoretic metrics to explain the internal activities of deep neural network layers. We propose a novel methodology for the explainability of deep learning-based profiling side-channel analysis (denoted ExDL-SCA) to understand the processing of secret masks. Inspired by the Information Bottleneck theory, our explainability methodology uses perceived information to explain and detect the different phenomena that occur in deep neural networks, such as fitting, compression, and generalization. We provide experimental results on masked AES datasets showing what relevant features deep neural networks use, and where in the networks relevant features are learned and irrelevant features are compressed. Using our method, evaluators can determine what secret masks are being exploited by the network, which allows for more detailed feedback on the implementations. This paper opens new perspectives for understanding the role of different neural network layers in profiling side-channel attacks

Authors 4

1. Guilherme Perin Aachen

   Leiden University

   Affiliation as printed

   Leiden University

2. Sengim Karayalçın Aachen

   Leiden University

   Affiliation as printed

   Leiden University

3. Lichao Wu

   Technische Universität Darmstadt

   Affiliation as printed

   Technical University Darmstadt

4. Stjepan Picek

   Radboud University Nijmegen · University of Zagreb · Faculty of Electrical Engineering and Computing in Zagreb

   Affiliation as printed

   Radboud University

   University of Zagreb Faculty of Electrical Engineering and Computing