دورية أكاديمية

Data Exfiltration through Electromagnetic Covert Channel of Wired Industrial Control Systems

التفاصيل البيبلوغرافية
العنوان: Data Exfiltration through Electromagnetic Covert Channel of Wired Industrial Control Systems
المؤلفون: Shakthi Sachintha, Nhien-An Le-Khac, Mark Scanlon, Asanka P. Sayakkara
المصدر: Applied Sciences, Vol 13, Iss 5, p 2928 (2023)
بيانات النشر: MDPI AG, 2023.
سنة النشر: 2023
المجموعة: LCC:Technology
LCC:Engineering (General). Civil engineering (General)
LCC:Biology (General)
LCC:Physics
LCC:Chemistry
مصطلحات موضوعية: covert channel, EM radiation, exfiltration, air-gap, Ethernet, software-defined-radio, Technology, Engineering (General). Civil engineering (General), TA1-2040, Biology (General), QH301-705.5, Physics, QC1-999, Chemistry, QD1-999
الوصف: Industrial control systems (ICS) often contain sensitive information related to the corresponding equipment being controlled and their configurations. Protecting such information is important to both the manufacturers and users of such ICSs. This work demonstrates an attack vector on industrial control systems where information can be exfiltrated through a electromagnetic (EM) radiation covert channel from the wired Ethernet connections commonly used by these devices. The attack leverages compromised firmware for the controller—capable of encoding sensitive/critical information into the wired network as packet transmission patterns. The EM radiation from the wired network’s communication is captured without direct physical interaction using a portable software-defined radio, and subsequently demodulated on the attacker’s computer. This covert channel facilitates the exfiltration of data from a distance of up to two metres with a data rate of 10 bps without any significant data loss. The nature of this covert channel demonstrates that having strong firewalls and network security.
نوع الوثيقة: article
وصف الملف: electronic resource
اللغة: English
تدمد: 2076-3417
العلاقة: https://www.mdpi.com/2076-3417/13/5/2928Test; https://doaj.org/toc/2076-3417Test
DOI: 10.3390/app13052928
الوصول الحر: https://doaj.org/article/684ed1c275814592b18b51232ed840ecTest
رقم الانضمام: edsdoj.684ed1c275814592b18b51232ed840ec
قاعدة البيانات: Directory of Open Access Journals
الوصف
تدمد:20763417
DOI:10.3390/app13052928