دورية أكاديمية
Data Exfiltration through Electromagnetic Covert Channel of Wired Industrial Control Systems
العنوان: | Data Exfiltration through Electromagnetic Covert Channel of Wired Industrial Control Systems |
---|---|
المؤلفون: | Shakthi Sachintha, Nhien-An Le-Khac, Mark Scanlon, Asanka P. Sayakkara |
المصدر: | Applied Sciences, Vol 13, Iss 5, p 2928 (2023) |
بيانات النشر: | MDPI AG, 2023. |
سنة النشر: | 2023 |
المجموعة: | LCC:Technology LCC:Engineering (General). Civil engineering (General) LCC:Biology (General) LCC:Physics LCC:Chemistry |
مصطلحات موضوعية: | covert channel, EM radiation, exfiltration, air-gap, Ethernet, software-defined-radio, Technology, Engineering (General). Civil engineering (General), TA1-2040, Biology (General), QH301-705.5, Physics, QC1-999, Chemistry, QD1-999 |
الوصف: | Industrial control systems (ICS) often contain sensitive information related to the corresponding equipment being controlled and their configurations. Protecting such information is important to both the manufacturers and users of such ICSs. This work demonstrates an attack vector on industrial control systems where information can be exfiltrated through a electromagnetic (EM) radiation covert channel from the wired Ethernet connections commonly used by these devices. The attack leverages compromised firmware for the controller—capable of encoding sensitive/critical information into the wired network as packet transmission patterns. The EM radiation from the wired network’s communication is captured without direct physical interaction using a portable software-defined radio, and subsequently demodulated on the attacker’s computer. This covert channel facilitates the exfiltration of data from a distance of up to two metres with a data rate of 10 bps without any significant data loss. The nature of this covert channel demonstrates that having strong firewalls and network security. |
نوع الوثيقة: | article |
وصف الملف: | electronic resource |
اللغة: | English |
تدمد: | 2076-3417 |
العلاقة: | https://www.mdpi.com/2076-3417/13/5/2928Test; https://doaj.org/toc/2076-3417Test |
DOI: | 10.3390/app13052928 |
الوصول الحر: | https://doaj.org/article/684ed1c275814592b18b51232ed840ecTest |
رقم الانضمام: | edsdoj.684ed1c275814592b18b51232ed840ec |
قاعدة البيانات: | Directory of Open Access Journals |
تدمد: | 20763417 |
---|---|
DOI: | 10.3390/app13052928 |