PowerHammer：通过电力线从空气隔离的计算机中泄漏数据
PowerHammer: Exfiltrating Data from Air-Gapped Computers through Power Lines
摘要：
在本文中，我们提供了PowerHammer的实现、评估和分析，PowerHammer是一种恶意软件（Bridgeware [1]），它使用电力线从空气间隙的计算机中窃取数据。在这种情况下，在受损计算机上运行的恶意代码可以通过故意调节CPU利用率来控制系统的功耗。数据在电流波动的基础上进行调制、编码和传输，然后通过电力线进行传导和传播。这种现象被称为“传导发射”。我们提出了两个版本的攻击。线路水平的强力锤击：在这种攻击中，攻击者敲击直接连接到电源插座的家庭电源线1。相级电力锤击：在这种攻击中，攻击者在主电气服务面板的相级电力线上敲击。在这两种版本的攻击中，攻击者测量所进行的发射，然后解码泄露的数据。我们描述了对抗攻击模型，并提出了调制和编码方案以及传输协议。我们在不同的情况下评估隐蔽信道，并讨论信噪比（SNR），信号处理和干扰形式。我们还提出了一套防御对策。我们的研究结果表明，二进制数据可以秘密地从空气间隙的计算机通过电力线泄漏的比特率为1000位/秒的线路级功率锤击攻击和10位/秒的相位级功率锤击攻击。
英文摘要：
In this paper we provide an implementation, evaluation, and analysis of PowerHammer, a malware (bridgeware [1]) that uses power lines to exfiltrate data from air-gapped computers. In this case, a malicious code running on a compromised computer can control the power consumption of the system by intentionally regulating the CPU utilization. Data is modulated, encoded, and transmitted on top of the current flow fluctuations, and then it is conducted and propagated through the power lines. This phenomena is known as a 'conducted emission'. We present two versions of the attack. Line level powerhammering: In this attack, the attacker taps the in-home power lines1 that are directly attached to the electrical outlet. Phase level power-hammering: In this attack, the attacker taps the power lines at the phase level, in the main electrical service panel. In both versions of the attack, the attacker measures the emission conducted and then decodes the exfiltrated data. We describe the adversarial attack model and present modulations and encoding schemes along with a transmission protocol. We evaluate the covert channel in different scenarios and discuss signal-to-noise (SNR), signal processing, and forms of interference. We also present a set of defensive countermeasures. Our results show that binary data can be covertly exfiltrated from air-gapped computers through the power lines at bit rates of 1000 bit/sec for the line level power-hammering attack and 10 bit/sec for the phase level power-hammering attack.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
