CRESS: Quantifying Vulnerabilities of Attack Scenarios in Hardware Reverse Engineering

Source: arXiv cs.CR

Published: Fri, 05 Jun 2026 00:00:00 -0400

Summary

arXiv:2606.05459v1 Announce Type: new

Abstract: The safety, security, and reliability of microelectronic systems depend on a trustworthy, secured supply chain and design flow. Globally distributed supply chains or unintentional design weaknesses leave the door open for attacks on the hardware level. These scenarios encompass counterfeiting, hardware trojans, or on-device attacks. For these, hardware reverse engineering (RE) results play a pivotal role. The ongoing publication of new RE-involved attacks motivated the development of the common RE scoring system (CRESS). The system enables a general classification of RE-involved scenarios for a common, consistent rating. In this work, the originally qualitative system is extended to a quantitative system. We performed an extensive interview study with experts in the field. The interview results allowed us to derive weights that measure the severity of different RE-involved attack categories. The weights form an equation that quantifies scenarios, resulting in the severity-indicating CRESS score. The score enables the coherent rating of novel scenarios, renders them comparable, and supports the development of effective countermeasures

Sources

• Original publication on arXiv cs.CR
• arXiv cs.CR feed
• Lyrie research desk