What are you looking for?
Keysight Device Security Workshop 2025
This is our annual event that serves as a platform for sharing the latest developments both at Keysight and in the broader field of device security.
What is the Keysight Device Security Workshop?
The Keysight Device Security Workshop is designed to bring together security professionals, researchers, and engineers to share the latest updates in the embedded security space. Our goal is to engage with current and future users of our Inspector toolset, providing hands-on demonstrations of our hardware and software solutions.
Optional Training Day: Introduction to Side-Channel Analysis & Fault Injection
At select locations, we will be hosting a Training Day before the main workshop. We are offering an exclusive hands-on training day for those new to Side-Channel Analysis (SCA) and Fault Injection (FI). This session will provide a structured introduction to these attack techniques, covering fundamental concepts, common testing methodologies, and basic tool usage. Each participant who attends the training will receive a Certificate of Completion, acknowledging their engagement with the foundational principles of SCA and FI. Due to limited seats, participation in the training is limited — please indicate your interest in the registration form below if you’d like to participate.
LOCATIONS & DATES
Delft, Netherlands: June 30 - July 2 (training) - July 3 (workshop)
Kuala Lumpur, Malaysia: September 19 (After CHES2025)
TRAINING DATES
Delft, Netherlands: June 30 - July 2
VENUE INFORMATION
Delft, Netherlands:
Workshop day: Vakwerkhuis, Professor Snijdersstraat 2, 2628 RA Delft;
3-day training program: Delftechpark 49, 2628 XJ Delft (Keysight office)
Workshop Agenda
Start time |
Session title |
|---|---|
8:30am - 9:00am |
-- Registration / Coffee -- |
9:00am - 10:00am |
What's Hot, What's Happened
During this 50-minute talk, Riscure founder Marc Witteman will share his thoughts on recent market developments and gives an insight on his expectations of trends that have a chance to become mainstream soon. |
10:00am - 10:30am |
Post Quantum Cryptography (PQC)
Development of PQC implementations is a necessity nowadays. Usage of PQC algorithms is for example mandated by the US government. In this session we will cover the state-of-the art regarding Post Quantum market developments and will cover side channel and fault injection vulnerabilities for various ciphers: Dilithium, Kyber, XMSS and LMS. Leakage assessment (TVLA) for ciphers using transformations in NTT domain. |
10:30am - 10:45am |
-- Morning Coffee & Snack Break -- |
| 10:45am - 11:30am | Inspector Update - Next Generation Workstation (PXI)
The latest Inspector developments are discussed and demonstrated in this session. Next to that we will present the next generation embedded security testbench. This development of security test devices based on Keysight PXI products will deliver a boost in performance, additional capabilities, and improved user experience. We will cover what is available today and what our roadmap is. |
| 11:30am - - 12:00pm | Automotive - Achieving UN-R155 and 156 Type Approval: Real-World Experiences and Best Practices. In this session we will cover in what way security labs approach a security evaluation project for a vehicle. We will give insights on the process a typical security lab will follow and though the examples we cover are focused on the automotive industry, concepts can be applied to testing of any other product. |
| 12:00pm - 1:00pm | -- Lunch Break -- |
1:00pm - 1:45pm |
Invited Speaker (See each location for invited speaker information) |
1:45pm - 2:30pm |
Artificial Intelligence
We already presented the benefits of using AI to improve FI and SCA test scenarios. For both scenarios Inspector offers modules you can benefit from. Lately though, we see more publications on using SCA and FI to attack AI chips to extract secrets, mostly the configuration of trained networks. In this session, we will explain how these attacks work and what attackers can gain. Next to that we will also explain how FI can be used to influence the outcome of decisions from AI networks. |
| 2:30pm - 2:45pm | -- Afternoon Snack Break -- |
| 2:45pm - 3:15pm | OCP Safe We'll provide insights into the Open Compute Poject (OCP) Security and Compliance Framework, including the OCP Security Appraisal Framework (OCP SAFE), and how your company can align with these standards to enhance hardware security and resilience. Additionally, we'll explore the evolving securiting landscape of hyperscalers and data centers, discussing the unique challenges in securing large-scale infrastructure, mitigating emerging threats, and implementeing robust hardware and firmware protections. We will also highlight some attacks that can be categorized as remote SCA or FI. |
| 3:15pm - 3:45pm | Pre-Silicon We achieved breakthroughs in identifying leakage and root cause in a protected AES implementation. Results from pre-silicon testing correlated extremely well with test results from physical testing on a FPGA. We will provide details on the appraoch and gains to achieve with this emerging technology. |
| 3:45pm - 4:15pm | RED Certification We explain how medium assurance product certification like RED can be achieved through chip certification based on the SESIP or ARM PSA schemes. This will leverage the efforts of chip vendors to provide security assurance and enable product vendors to acquire a RED certificate quickly. |
| 4:15pm - 4:45pm | Screaming Channels Mixed signal chips can be vulnerable for SCA attacks, leaking secret information from cryptographic operation through a modulated signal over a transmitted carrier wave: WIFI, Bluetooth and now cellular. We will go into the details on how this remote SCA attacks works and demonstrate how we were able to find leakage in transmitted cellular signals. For this attack we used several security test devices and Inspector software in combination with Keysight dedicated 5G test equipment. |
| 4:45pm - 5:00pm | -- Closing & Lucky Draw -- |
Training Programs
3-Day Advanced Training Program
ABSTRACT
3 days program Advanced Training Program Abstract Fault Injection (FI) is often the weapon of choice for breaking into devices when exploitable software vulnerabilities are not known or absent. While FI attacks are nowadays common, typical concepts, methodologies, techniques, and attacks are often not sufficiently understood. While achieving success by simply glitching a target can yield results, it's important to note that this approach alone doesn't facilitate the creation of innovative attacks. In this training, students will experience and appreciate the Art of Fault Injection to exploit the full potential of FI attacks.
Students will experience, with guidance from experts, performing real-world Voltage FI attacks, that were found by Raelize. Students will be use Keysight's Voltage FI tooling in their dedicated training room in Delft, The Netherlands. This training takes students on a multi-day journey during which they perform hands-on exercises (75%) and attend insightful lectures (25%).
Upon completing the training, students will be proficient in executing sophisticated FI attacks on real-world targets using Keysight's Voltage FI tooling. The knowledge gained from understanding the underlying concepts, methodologies, techniques, and attacks, can be used by the students to perform novel FI attacks on other targets of interest.
The training starts at 9:00 AM, includes a lunch break from 12:00 to 1:00 PM, and ends at 5:00 PM.
AGENDA
Day 1: Characterization
- Lecture: Target & Tooling
- Lecture: Finding Faults
- Exercise: Bootloader communication
- Exercise: Characterizing the Espressif ESP32 SoC
Day 2: Bypassing Secure Boot
- Lecture: Modeling Faults
- Lecture: Secure Boot
- Exercise: Bypassing Secure Boot of the Espressif ESP32 SoC (CVE2019-15894)
Day 3: Advanced Attacks
- Lecture: Attacking OTP Transfers
- Exercise: Attacking the OTP transfer of the Espressif ESP32 SoC (CVE-2019-17391)
- Lecture: Attacking Data Transfers
- Exercise: Attacking Data Transfers on the Espressif ESP32 SoC (CVE2020-13629)
AUDIENCE
Trained Inspector users with experience in SCA/FI testing
LOCATION
Delft – June 30 – July 3 – At Riscure training room
PREREQUISITES
Keysight (Riscure) hardware will be used and no need to bring your own laptop
PRICING
3,000 EUR per person for 3 days. Including free access to the workshop Registration through Keysight. Payment is arranged by Raelize directly outside Keysight.
Register for your preferred workshop location by filling out the form below, please also indicate if you would like to participate in one of the Training Days.
Have questions or need help?