Secure platform implementing dynamic countermeasures

1. A secure platform implementing dynamic countermeasures against malicious attacks in relation with execution of a computer code by the secure platform, said secure platform comprising:

at least a security sensor configured to detect a security thread;

a countermeasure controller; and

a countermeasure means,

wherein said countermeasure controller includes:

(i) at least one security sensor flag configured to output at least two sensor flag values depending on the output of the security sensor of the secure platform,

(ii) a memory comprising a table storing N possible security configurations for the countermeasures, each security configuration, when selected, causes said countermeasure means to apply a corresponding countermeasure relative to the execution of the computer code by the secure platform,

(iii) a random generator configured to generate a random configuration value, and

(iv) a selection function using the sensor flag value on a basis of the output of the security sensor of the secure platform and the random configuration value to select a security configuration among the N possible security configurations listed in the table stored in the memory, said security configuration being executed by the countermeasure means during the execution of the computer code by the secure platform.

2. The secure platform according to claim 1 , wherein a default configuration is executed when the security sensor flag is cleared.

3. The secure platform according to claim 1 , wherein the security sensor flag is of a semi-persistent kind.

4. The secure platform according to claim 3 , wherein the semi-persistence is such that the security sensor flag is decreased after a given number of consecutive executions without detection of a security thread.

5. A method to control, by a secure platform, dynamic countermeasures against malicious attacks in relation with execution of a computer code by the secure platform, said method comprising the following steps:

monitoring a security sensor included in the secure platform,

modifying a sensor flag value depending on the outputs from the security sensor included in the secure platform,

generating, by a countermeasure controller of the secure platform, a random configuration value,

selecting, by the countermeasure controller of the secure platform, a security configuration for the countermeasures from a table stored in a memory of the countermeasure controller, said table storing N possible security configurations, wherein each possible security configuration causes, when selected, a countermeasure means to apply a corresponding countermeasure relative to the execution of the computer code by the secure platform, and wherein said selection depends on the sensor flag value based on the output of the security sensor included in the secure platform and on the generated random configuration value, and

executing the countermeasures of the selected security configuration during the execution of the computer code by the secure platform according to the security configuration.

6. The secure platform according to claim 1 , wherein the security configuration comprises a set of settings of at least one of a clock setting, hardware countermeasure settings, software countermeasure settings, and a voltage range setting.

7. The secure platform according to claim 2 , wherein the security configuration comprises a set of settings of at least one of a clock setting, hardware countermeasure settings, software countermeasure settings, and a voltage range setting.

8. The secure platform according to claim 3 , wherein the security configuration comprises a set of settings of at least one of a clock setting, hardware countermeasure settings, software countermeasure settings, and a voltage range setting.

9. The secure platform according to claim 4 , wherein the security configuration comprises a set of settings of at least one of a clock setting, hardware countermeasure settings, software countermeasure settings, and a voltage range setting.

10. The secure platform according to claim 1 , wherein the selection is triggered each time the security sensor is checked.

11. The secure platform according to claim 2 , wherein the selection is triggered each time the security sensor is checked.

12. The secure platform according to claim 3 , wherein the selection is triggered each time the security sensor is checked.

13. The secure platform according to claim 4 , wherein the selection is triggered each time the security sensor is checked.

14. The secure platform according to claim 6 , wherein the selection is triggered each time the security sensor is checked.

15. The secure platform according to claim 1 , wherein the generation of a random configuration value is performed subsequently or simultaneously of the output of a not null sensor's output.

16. The secure platform according to claim 2 , wherein the generation of a random configuration value is performed subsequently or simultaneously of the output of a not null sensor's output.

17. The secure platform according to claim 3 , wherein the generation of a random configuration value is performed subsequently or simultaneously of the output of a not null sensor's output.

18. The secure platform according to claim 4 , wherein the generation of a random configuration value is performed subsequently or simultaneously of the output of a not null sensor's output.

19. The secure platform according to claim 6 , wherein the generation of a random configuration value is performed subsequently or simultaneously of the output of a not null sensor's output.

20. The secure platform according to claim 10 , wherein the generation of a random configuration value is performed subsequently or simultaneously of the output of a not null sensor's output.