Modelling Duqu 2.0 Malware using Attack Trees with Sequential Conjunction

In this paper we identify requirements for choosing a threat modelling formalisation for modelling sophisticated malware such as Duqu 2.0. We discuss the gaps in current formalisations and propose the use of Attack Trees with Sequential Conjunction when it comes to analysing complex attacks. The paper models Duqu 2.0 based on the latest information sourced from formal and informal sources. This paper provides a well structured model which can be used for future analysis of Duqu 2.0 and related attacks.

Power Spectral Density Side-Channel Attack Overlapping Window Method

Cryptographic algorithms have been designed to be computationally secure, however it has been shown that when they are implemented in hardware, that these devices leak side channel information that can be used to mount an attack that recovers the secret encryption key. In this paper an overlapping window power spectral density (PSD) side channel attack, targeting an FPGA device running the Advanced Encryption Standard is proposed. This improves upon previous research into PSD attacks by reducing the amount of pre-processing (effort) required. It is shown that the proposed overlapping window method requires less processing effort than that of using a sliding window approach, whilst overcoming the issues of sampling boundaries. The method is shown to be effective for both aligned and misaligned data sets and is therefore recommended as an improved approach in comparison with existing time domain based correlation attacks.

Variable Window Power Spectral Density Attack

Side channel attacks permit the recovery of the secret key held within a cryptographic device. This paper presents a new EM attack in the frequency domain, using a power spectral density analysis that permits the use of variable spectral window widths for each trace of the data set and demonstrates how this attack can therefore overcome both inter-and intra-round random insertion type countermeasures. We also propose a novel re-alignment method exploiting the minimal power markers exhibited by electromagnetic emanations. The technique can be used for the extraction and re-alignment of round data in the time domain.

Revisiting intersectionality for EU Anti-Discrimination Law in an economic crisis –a critical legal studies perspective

This article discusses the role of EU anti-discrimination law in challenging EU anti-crisis measures from a critical legal studies perspective. Critical legal scholarship is defined through its challenge of ‘lex’ through the vision of ‘ius’ and its critical links with social movements. EU anti-discrimination law attracts critique for constituting a compartmentalised socio-legal field, which prevents justice for those at intersections of inequalities. By defining as the aim of anti-discrimination law the combat of disadvantage resulting from ascribed otherness around the nodes sex/gender, race/ethnicity, and disability, the article suggests a convincing normative vision suitable to de-compartmentalise the field and adequately address intersectionality. This critical legal perspective on intersectionality differs from its sociological counterparts by omitting class as a category. The article demonstrates that this distinction is necessary for EU anti-discrimination law to maintain its critical edge.