Protection of Elliptic Curve Implementations against side-channel attacks Recent fast elliptic curve implementations, for example a presentation at Eurocrypt 2014 (earlier presentation slides, the paper) talks about protection against only timing attacks. Why only timing attacks? 

If these methods are implemented in hardware then I think it should have been protected against power attack and fault attack also.
It all comes down to your threat model, right? Just because an implementation is done in hardware does not mean that power and fault attacks must be considered. If I host the hardware in my secure facility with armed guards at the door, but the hardware is connected to a machine which is connected to the internet, I might feel that it is okay to not be concerned about power and fault injection attacks. On the other hand, if my hardware is being deployed "behind enemy lines" where it could be captured, you better believe that I should be worried about those sorts of attacks.