Information Leakage from Optical Emanations
arXiv:2307.07043 · doi:10.1145/545186.545189
Abstract
A previously unknown form of compromising emanations has been discovered. LED status indicators on data communication equipment, under certain conditions, are shown to carry a modulated optical signal that is significantly correlated with information being processed by the device. Physical access is not required; the attacker gains access to all data going through the device, including plaintext in the case of data encryption systems. Experiments show that it is possible to intercept data under realistic conditions at a considerable distance. Many different sorts of devices, including modems and Internet Protocol routers, were found to be vulnerable. A taxonomy of compromising optical emanations is developed, and design changes are described that will successfully block this kind of "Optical TEMPEST" attack.
26 pages, 11 figures
Cited by in corpus (14)
- Practical Approaches Towards Deep-Learning Based Cross-Device Power Side Channel Attack
- Security and Privacy in the Emerging Cyber-Physical World: A Survey
- CTRL-ALT-LED: Leaking Data from Air-Gapped Computers via Keyboard LEDs
- BRIGHTNESS: Leaking Sensitive Data from Air-Gapped Workstations via Screen Brightness
- ETHERLED: Sending Covert Morse Signals from Air-Gapped Devices via Network Card (NIC) LEDs
- GAIROSCOPE: Injecting Data from Air-Gapped Computers to Nearby Gyroscopes
- DiskFiltration: Data Exfiltration from Speakerless Air-Gapped Computers via Covert Hard Drive Noise
- LANTENNA: Exfiltrating Data from Air-Gapped Networks via Ethernet Cables
- Oops!...I think I scanned a malware
- AiR-ViBeR: Exfiltrating Data from Air-Gapped Computers via Covert Surface ViBrAtIoNs
- POWER-SUPPLaY: Leaking Data from Air-Gapped Systems by Turning the Power-Supplies Into Speakers
- AIR-FI: Generating Covert Wi-Fi Signals from Air-Gapped Computers
- Your Noise, My Signal: Exploiting Switching Noise for Stealthy Data Exfiltration from Desktop Computers
- Data Exfiltration via Multipurpose RFID Cards and Countermeasures