TK Study

Software Engineering › Key terms › Y12 Secure Software Architecture › Side channel attack

Side channel attack

Term Key terms bank Y12 Secure Software Architecture

Also listed as: Side-channel attack

Definition

An attack that learns secrets from indirect information such as timing, power use or electromagnetic emissions rather than breaking the algorithm. Protect with constant-time code, noise and physical shielding.

Example: Measuring response time to guess a password character.

Found in: syllabus, school notes.

Short version to memorise (key terms bank)

Learning secrets from timing, power or electromagnetic leakage.

Where it is used in the test

Syllabus area: Y12 Secure Software Architecture.

Question types it can appear in

No past question in this bank is linked to this term yet. It can still be tested through the question types above.

Study links

How to use it in an answer

A model sentence

General advice, built from the definition and example above

“An attack that learns secrets from indirect information such as timing, power use or electromagnetic emissions rather than breaking the algorithm.” Then apply it: Measuring response time to guess a password character.

In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.

Command words used with it

General advice

No linked question shows the command word for this term. Across the past short answer questions in this bank the words used most are: Explain, Outline, Describe, Compare, Classify, Analyse. Check the actual word in your question.

Technique for the question types

Common mistakes

General advice
  • Use the term exactly as the syllabus words it, then link it to the scenario in the question; the 2025 feedback repeatedly rewards using the stimulus.
  • Answer the command word: outline gives main points only, explain gives a reason or cause, discuss gives both sides.

Same group in the syllabus: Broken authentication and session management · Cross-site scripting (XSS) · Cross-site request forgery (CSRF) · Invalid forwarding and redirecting · Race condition · File attacks