SATan：通过SATA电缆无线电信号的气隙渗透攻击
SATAn: Air-Gap Exfiltration Attack via Radio Signals From SATA Cables
摘要：
本文介绍了一种新型的攻击隔离，空气间隙的工作站。虽然气隙计算机没有无线连接，我们表明，攻击者可以使用SATA电缆作为无线天线传输无线电信号在6 GHz频段。串行ATA（SATA）是在现代计算机中广泛使用的总线接口，并且将主机总线连接到诸如硬盘驱动器、光驱和固态驱动器的海量存储器设备。SATA接口的流行使得这种攻击在各种计算机系统和IT环境中对攻击者高度可用。我们讨论了这个主题的相关工作，并提供技术背景。我们展示了发射机和接收机的设计，并提出了这些组件的实现。我们还演示了不同的计算机上的攻击，并提供评估。结果表明，攻击者可以使用SATA电缆将少量敏感信息从高度安全的气隙计算机无线传输到附近的接收器。此外，我们还证明了攻击可以从用户模式运行，即使在虚拟机（VM）内部也是有效的，并且可以成功地与后台运行的其他工作负载一起工作。最后，我们讨论了这种新的气隙攻击的防御和缓解技术。
英文摘要：
This paper introduces a new type of attack on isolated, air-gapped workstations. Although air-gap computers have no wireless connectivity, we show that attackers can use the SATA cable as a wireless antenna to transfer radio signals at the 6 GHz frequency band. The Serial ATA (SATA) is a bus interface widely used in modern computers and connects the host bus to mass storage devices such as hard disk drives, optical drives, and solid-state drives. The prevalence of the SATA interface makes this attack highly available to attackers in a wide range of computer systems and IT environments. We discuss related work on this topic and provide technical background. We show the design of the transmitter and receiver and present the implementation of these components. We also demonstrate the attack on different computers and provide the evaluation. The results show that attackers can use the SATA cable to transfer a brief amount of sensitive information from highly secured, air-gap computers wirelessly to a nearby receiver. Furthermore, we show that the attack can operate from user mode, is effective even from inside a Virtual Machine (VM), and can successfully work with other running workloads in the background. Finally, we discuss defense and mitigation techniques for this new air-gap attack.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
