arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 1503.07919cs.CR
收藏

BitWhisper:利用热操纵实现计算机间的隐蔽信号通道

BitWhisper: Covert Signaling Channel between Air-Gapped Computers using Thermal Manipulations

Mordechai Guri, Matan Monitz, Yisroel Mirski, Yuval Elovici

摘要:

人们一直认为,计算机的物理隔离(气隙)提供了可靠的安全级别,如果两台相邻的计算机受到损害,它们之间的秘密数据交换将是不可能的。在本文中,我们展示了BitWhisper,这是一种通过使用它们的热排放和内置的热传感器来创建隐蔽通信通道来桥接相邻受损计算机之间的气隙的方法。我们的方法在两个方面是独一无二的:它支持双向通信,它不需要额外的专用外围硬件。我们提供的实验结果的基础上实现的BitWhisper原型,并检查信道属性和限制。我们的实验包括不同的布局,计算机位于彼此不同的距离,以及几种传感器类型和CPU配置(例如,虚拟机)。我们还讨论了信号调制和通信协议,展示了BitWhisper如何用于以每小时1-8位的有效速率在两台计算机之间(距离为0- 40厘米)交换数据,该速率使得可以渗透简短的命令并渗出少量数据(例如,密码)通过隐蔽信道。

英文摘要:

It has been assumed that the physical separation (air-gap) of computers provides a reliable level of security, such that should two adjacent computers become compromised, the covert exchange of data between them would be impossible. In this paper, we demonstrate BitWhisper, a method of bridging the air-gap between adjacent compromised computers by using their heat emissions and built-in thermal sensors to create a covert communication channel. Our method is unique in two respects: it supports bidirectional communication, and it requires no additional dedicated peripheral hardware. We provide experimental results based on implementation of BitWhisper prototype, and examine the channel properties and limitations. Our experiments included different layouts, with computers positioned at varying distances from one another, and several sensor types and CPU configurations (e.g., Virtual Machines). We also discuss signal modulation and communication protocols, showing how BitWhisper can be used for the exchange of data between two computers in a close proximity (at distance of 0-40cm) at an effective rate of 1-8 bits per hour, a rate which makes it possible to infiltrate brief commands and exfiltrate small amount of data (e.g., passwords) over the covert channel.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑