谨防扒手：一种针对屏蔽卡的实用攻击
Beware of Pickpockets: A Practical Attack against Blocking Cards
AI总结：
本文首次系统评估屏蔽卡对非接触式智能卡的防护有效性，提出一种可绕过干扰信号并读取卡内容的新型攻击，在11款屏蔽卡中成功绕过8款，并据此提出改进屏蔽卡设计的对策。
摘要：
如今，我们依赖非接触式智能卡执行多项关键操作（例如支付和进入建筑物）。攻击智能卡可能造成严重后果，例如损失金钱或泄露敏感信息。尽管智能卡中嵌入的安全保护多年来不断演进，但安全属性较弱的卡仍被广泛使用。在众多解决方案中，屏蔽卡是保护智能卡的一种低成本设备。这些设备被放置在智能卡附近，产生噪声干扰信号或对其进行屏蔽。尽管厂商声称其屏蔽卡具有可靠性，但此前尚无研究专门评估其有效性。本文揭示了在存在屏蔽卡的情况下智能卡面临的安全威胁，证明攻击者有可能绕过屏蔽卡。我们通过检测屏蔽卡发出的信号并评估其内部设计中的漏洞来分析屏蔽卡。我们提出一种新型攻击，能够绕过屏蔽卡发出的干扰信号并读取智能卡内容。我们评估了11款屏蔽卡在保护MIFARE Ultralight智能卡和MIFARE Classic卡时的有效性。在这11款卡中，我们成功绕过了其中8款，并在屏蔽卡存在的情况下成功转储了智能卡内容。我们的研究结果表明，屏蔽卡所实现的噪声类型极大地影响其所达到的防护水平。基于这一观察，我们提出了一种可能有助于设计有效屏蔽卡的对策。为进一步提升安全性，我们发布了所开发的工具，用于检测屏蔽卡发出的频谱并搭建我们的攻击。
英文摘要：
Today, we rely on contactless smart cards to perform several critical operations (e.g., payments and accessing buildings). Attacking smart cards can have severe consequences, such as losing money or leaking sensitive information. Although the security protections embedded in smart cards have evolved over the years, those with weak security properties are still commonly used. Among the different solutions, blocking cards are affordable devices to protect smart cards. These devices are placed close to the smart cards, generating a noisy jamming signal or shielding them. Whereas vendors claim the reliability of their blocking cards, no previous study has ever focused on evaluating their effectiveness. In this paper, we shed light on the security threats on smart cards in the presence of blocking cards, showing the possibility of being bypassed by an attacker. We analyze blocking cards by inspecting their emitted signal and assessing a vulnerability in their internal design. We propose a novel attack that bypasses the jamming signal emitted by a blocking card and reads the content of the smart card. We evaluate the effectiveness of 11 blocking cards when protecting a MIFARE Ultralight smart card and a MIFARE Classic card. Of these 11 cards, we managed to bypass 8 of them and successfully dump the content of a smart card despite the presence of the blocking card. Our findings highlight that the noise type implemented by the blocking cards highly affects the protection level achieved by them. Based on this observation, we propose a countermeasure that may lead to the design of effective blocking cards. To further improve security, we released the tool we developed to inspect the spectrum emitted by blocking cards and set up our attack.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
