1.5k citations · 3.1k across the 169 of their papers we have counts for
12 papers · 2 filters
aIR-Jumper: Covert Air-Gap Exfiltration/Infiltration via Security Cameras & Infrared (IR)
Mordechai Guri, Dima Bykhovsky, Yuval Elovici
Infrared (IR) light is invisible to humans, but cameras are optically sensitive to this type of light. In this paper, we show how attackers can use surveillance cameras and infrare…
Detection of Unauthorized IoT Devices Using Machine Learning Techniques
Yair Meidan, Michael Bohadana, Asaf Shabtai +4
Security experts have demonstrated numerous risks imposed by Internet of Things (IoT) devices on organizations. Due to the widespread adoption of such devices, their diversity, sta…
Power Consumption-based Detection of Sabotage Attacks in Additive Manufacturing
Samuel B. Moore, Jacob Gatlin, Sofia Belikovetsky +3
Additive Manufacturing (AM), a.k.a. 3D Printing, is increasingly used to manufacture functional parts of safety-critical systems. AM's dependence on computerization raises the conc…
Protecting Military Avionics Platforms from Attacks on MIL-STD-1553 Communication Bus
Orly Stan, Yuval Elovici, Asaf Shabtai +3
MIL-STD-1553 is a military standard that defines the physical and logical layers, and a command/response time division multiplexing of a communication bus used in military and aero…
Generic Black-Box End-to-End Attack Against State of the Art API Call Based Malware Classifiers
Ishai Rosenberg, Asaf Shabtai, Lior Rokach +1
In this paper, we present a black-box attack against API call based machine learning malware classifiers, focusing on generating adversarial sequences combining API calls and stati…
xLED: Covert Data Exfiltration from Air-Gapped Networks via Router LEDs
Mordechai Guri, Boris Zadov, Andrey Daidakulov +1
In this paper we show how attackers can covertly leak data (e.g., encryption keys, passwords and files) from highly secure or air-gapped networks via the row of status LEDs that ex…
DROPWAT: an Invisible Network Flow Watermark for Data Exfiltration Traceback
Alfonso Iacovazzi, Sanat Sarda, Daniel Frassinelli +1
Watermarking techniques have been proposed during the last 10 years as an approach to trace network flows for intrusion detection purposes. These techniques aim to impress a hidden…
Detecting Cyber-Physical Attacks in Additive Manufacturing using Digital Audio Signing
Sofia Belikovetsky, Yosef Solewicz, Mark Yampolskiy +2
Additive Manufacturing (AM, or 3D printing) is a novel manufacturing technology that is being adopted in industrial and consumer settings. However, the reliance of this technology…
HVACKer: Bridging the Air-Gap by Attacking the Air Conditioning System
Yisroel Mirsky, Mordechai Guri, Yuval Elovici
Modern corporations physically separate their sensitive computational infrastructure from public or other accessible networks in order to prevent cyber-attacks. However, attackers…
Oops!...I think I scanned a malware
Ben Nassi, Adi Shamir, Yuval Elovici
This article presents a proof-of-concept illustrating the feasibility of creating a covert channel between a C\&C server and a malware installed in an organization by exploiting an…
LED-it-GO: Leaking (a lot of) Data from Air-Gapped Computers via the (small) Hard Drive LED
Mordechai Guri, Boris Zadov, Eran Atias +1
In this paper we present a method which allows attackers to covertly leak data from isolated, air-gapped computers. Our method utilizes the hard disk drive (HDD) activity LED which…
SIPHON: Towards Scalable High-Interaction Physical Honeypots
Juan Guarnizo, Amit Tambe, Suman Sankar Bhunia +4
In recent years, the emerging Internet-of-Things (IoT) has led to rising concerns about the security of networked embedded devices. In this work, we focus on the adaptation of Hone…