arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1801.03218cs.CR
收藏

IREXF:通过红外遥控信号从空气隔离网络中泄漏数据

IREXF: Data Exfiltration from Air-gapped Networks by Infrared Remote Control Signals

Zheng Zhou, Weiming Zhang, Nenghai Yu

摘要:

红外遥控技术在人们的日常生活中有着广泛的应用。在安全级别最高的地方也适用。红外遥控信号被认为是一种简单、安全、清洁的资源,可以帮助我们控制附近的电器。在本文中,我们建立IREXF,一种新的红外光学隐蔽通道,从一个良好的保护空气间隙网络通过恶意红外模块植入到键盘。在气隙PC中预先安装的恶意软件接收来自恶意红外模块的数据,以研究气隙网络中的红外环境。一旦找到合适的电器,红外遥控指令将在适当的时间发送。随着物联网技术的发展,越来越多的家电产品可以接入互联网。这些红外命令信号泄漏出的空气间隙网络可以被接收的设备没有任何恶意的配置。在我们的实验中,通过一个智能电视机顶盒,隐蔽通道的速率可以高达2.62比特每秒没有任何进一步的优化。最后给出了检测和消除这种隐蔽信道的对策。

英文摘要:

he technology on infrared remote control is widely applied in human daily life. It is also applied in the place with a top security level. Infrared remote control signal is regarded as a simple, safe and clean resource that can help us control the electrical appliances nearby. In this paper, we build IREXF, a novel infrared optical covert channel from a well-protected air-gapped network via a malicious infrared module implanted previously into a keyboard. A malware preinstalled in the air-gapped PC receives the data from the malicious infrared module to study the infrared surroundings in the air-gapped network. Once a suitable appliance is found, infrared remote control commands will be sent in a proper time. With the development of technology on Internet of Things, more and more electrical appliances can access Internet. Those infrared command signals exfiltrating out of the air-gapped network can be received by an appliance without any malicious configuration. In our experiment, via a smart TV set-top box, the rate of the covert channel can be up to 2.62 bits per second without any further optimization. Finally, we give a list of countermeasures to detect and eliminate this kind of covert channels.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑