On Covert Acoustical Mesh Networks in Air

“…3;2014 Concerning the Type of Object Location, the target can be connected to a reachable network (wired or wireless) or isolated. In the latter case, the system may be reached by mobile storage devices or by even more sophisticated techniques to bridge the air gap (have a look at the recent discussion of using covert acoustical channels, e.g., see (Hanspach & Goetz, 2013)). Therefore, capabilities to bridge the air gap are treated as more dangerous than limited propagation possibilities.…”

Section: Iso/osi Layermentioning

confidence: 99%

A Revised Attack Taxonomy for a New Generation of Smart Attacks

Koch¹,

Golling²,

Rodosek³

2014

CIS

View full text Add to dashboard Cite

The last years have seen an unprecedented amount of attacks. Intrusions on IT-Systems are rising constantlyboth from a quantitative as well as a qualitative point of view. Well-known examples like the hack of the Sony Playstation Network or the compromise of RSA are just some samples of high-quality attack vectors. Since these Smart Attacks are specifically designed to permeate state of the art technologies, current systems like Intrusion Detection Systems (IDSs) are failing to guarantee an adequate protection. In order to improve the protection, a comprehensive analysis of Smart Attacks needs to be performed to provide a basis against emerging threats.Following these ideas and inspired by the original definition of the term Advanced Persistent Threat (APT) given by U.S. Department of Defense, this publication starts with defining the terms, primarily the group of Smart Attacks. Thereafter, individual facets of Smart Attacks are presented in more detail, before recent examples are illustrated and classified using these dimensions. Next to this, current taxonomies are presented including their individual shortcomings. Our revised taxonomy is introduced, specifically addressing the latest generation of Smart Attacks. The different classes of our taxonomy are discussed, showing how to address the specifics of sophisticated, modern attacks. Finally, some ideas of addressing Smart Attacks are presented.

show abstract

“…Mordechai et al [6] proposed a method of transmitting data through an air gap using electromagnetic waves from a display cable. Hanspach et al [7] proposed a method of transmitting data through an air gap using ultrasonic waves from a speaker.…”

Section: Introductionmentioning

confidence: 99%

Data Exfiltration from Air-Gapped Computers based on ARM CPU

Yamamoto¹,

Hirose²,

Saito³

2018

ijacsa

View full text Add to dashboard Cite

Abstract-Air-gapped Network is a network isolated from public networks. Several techniques of data exfiltration from airgapped networks have been recently proposed. Air-gap malware is a malware that breaks the isolation of an air-gapped computer using air-gap covert channels, which extract information from air-gapped computers running on air-gap networks. Guri et al. presented an air-gap malware "GSMem", which can exfiltrate data from air-gapped computers over GSM frequencies, 850 MHz to 900MHz. GSMem makes it possible to send data using the radio waves leaked out from the system bus between CPU and RAM. It generates binary amplitude shift keying (B-ASK) modulated waves with x86 SIMD instruction. In order to efficiently emit electromagnetic waves from the system-bus, it is necessary to access the RAM without being affected by the CPU caches. GSMem adopts an instruction that writes data without accessing CPU cache in Intel CPU. This paper proposes an airgap covert channel for computers based on ARM CPU, which includes a software algorithm that can effectively cause cache misses. It is also a technique to use NEON instructions and transmit B-ASK modulated data by radio waves radiated from ARM based computer (e.g. Raspberry Pi 3). The experiment shows that the proposed program sends binary data using radio waves (about 1000kHz ~ 1700kHz) leaked out from system-bus between ARM CPU and RAM. The program can also run on Android machines based on ARM CPU (e.g. ASUS Zenpad 3S 10 and OnePlus 3).

show abstract

On Covert Acoustical Mesh Networks in Air

Cited by 121 publications

References 19 publications

An Approach to Secure Air-gap system from Intentional Radio Transmission

An Approach to Secure Air-gap system from Intentional Radio Transmission

A Revised Attack Taxonomy for a New Generation of Smart Attacks

Data Exfiltration from Air-Gapped Computers based on ARM CPU

Contact Info

Product

Resources

About