nach oben

Erschienen in:

2022 | OriginalPaper | Buchkapitel

FOCUS: Frequency Based Detection of Covert Ultrasonic Signals

verfasst von : Wouter Hellemans, Md Masoom Rabbani, Jo Vliegen, Nele Mentens

Erschienen in: ICT Systems Security and Privacy Protection

Verlag: Springer International Publishing

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

Today’s evolving and inventive attacks allow an adversary to embed tracking identifiers or malicious triggers in ultrasonic sound and covertly transmit them between devices without the users’ knowledge. An adversary can exploit an electronic device by manipulating the microphone, gyroscope or speaker using ultrasonic sound. Almost all types of electronic devices are vulnerable to this type of attack. Indeed, some preventive measures are in place to counter ultrasonic invasion. However, they are primitive and often are not capable of detecting the attacks.

To this end, we propose FOCUS: Frequency based detection of Covert Ultrasonic Signals. In particular, FOCUS displays a low-end, low-cost ultrasonic detection mechanism that can be employed anywhere. We validate FOCUS through two proof-of-concept (PoC) implementations utilizing Raspberry Pi and Arduino based hardware modules, respectively. The results demonstrate that FOCUS can detect ultrasonic sound and alert users of possible ultrasonic invasion.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel DAEMON: Dynamic Auto-encoders for Contextualised Anomaly Detection Applied to Security MONitoring

Nächstes Kapitel Passive, Transparent, and Selective TLS Decryption for Network Security Monitoring

https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_nl.

The upper hearing threshold in practice is around 17 kHz. Thus the near-ultrasonic range is 17–20 kHz.

https://developer.android.com/about/versions/oreo/background.

https://developer.android.com/guide/topics/media/mediarecorder.

https://www.fon.hum.uva.nl/praat/.

https://www.embedded.com/the-goertzel-algorithm/.

https://www.szynalski.com/tone-generator/.

https://play.google.com/store/apps/details?id=com.skypaw.decibel&hl=nl&gl=US.

https://www.instructure.com/en-au/canvas/resources/higher-education/canvas-learning-management-platform-across-globe-higher-education-students-leaders.

Arp, D., Quiring, E., Wressnegger, C., Rieck, K.: Privacy threats through ultrasonic side channels on mobile devices. In: 2017 IEEE European Symposium on Security and Privacy (EuroS P), pp. 35–47 (2017). https://doi.org/10.1109/EuroSP.2017.33

Arp, D., Quiring, E., Wressnegger, C., Rieck, K.: Bat in the Mobile: A Study on Ultrasonic Device Tracking (2016). https://www.sec.cs.tu-bs.de/pubs/2016-batmobile.pdf

Arp, D., Quiring, E., Wressnegger, C., Rieck, K.: Privacy threats through ultrasonic side channels on mobile devices. In: 2017 IEEE European Symposium on Security and Privacy (EuroS & P), pp. 35–47 (2017). https://doi.org/10.1109/EuroSP.2017.33

Butler, C.: Visa makes strategic investment in LISNR, a start-up that wants to rival technology used by Apple Pay, November 2019. https://www.cnbc.com/2019/11/05/visa-invests-in-lisnr-a-start-up-that-wants-to-rival-apple-pay.html. Accessed 01 May 2021

Carrara, B., Adams, C.: On acoustic covert channels between air-gapped systems. In: Cuppens, F., Garcia-Alfaro, J., Zincir Heywood, N., Fong, P.W.L. (eds.) FPS 2014. LNCS, vol. 8930, pp. 3–16. Springer, Cham (2015). https://doi.org/10.1007/978-3-319-17040-4_1CrossRef

Deshotels, L.: Inaudible sound as a covert channel in mobile devices. In: 8th USENIX Workshop on Offensive Technologies (WOOT 14). USENIX Association, San Diego, August 2014. https://www.usenix.org/conference/woot14/workshop-program/presentation/deshotels

Guri, M., Solewicz, Y., Elovici, Y.: Fansmitter: acoustic data exfiltration from air-gapped computers via fans noise. Comput. Secur. 91, 101721 (2020). https://doi.org/10.1016/j.cose.2020.101721. https://www.sciencedirect.com/science/article/pii/S0167404820300080

Guri, M., Solewicz, Y., Elovici, Y.: Speaker-to-speaker covert ultrasonic communication. J. Inf. Secur. Appl. 51, 102458 (2020). https://doi.org/10.1016/j.jisa.2020.102458. https://www.sciencedirect.com/science/article/pii/S2214212619304697

Guri, M., Solewicz, Y.A., Daidakulov, A., Elovici, Y.: DiskFiltration: data exfiltration from speakerless air-gapped computers via covert hard drive noise. CoRR abs/1608.03431 (2016). http://arxiv.org/abs/1608.03431

10.

Joseph, T., Tyagi, K., Kumbhare, D.R.: Quantitative analysis of DTMF tone detection using DFT, FFT and Goertzel algorithm. In: 2019 Global Conference for Advancement in Technology (GCAT), pp. 1–4 (2019). https://doi.org/10.1109/GCAT47503.2019.8978284

11.

Lampson, B.W.: A note on the confinement problem. Commun. ACM 16(10), 613–615 (1973). https://doi.org/10.1145/362375.362389. https://doi.org/10.1145/362375.362389

12.

Madhavapeddy, A., Sharp, R., Scott, D., Tse, A.: Audio networking: the forgotten wireless technology. IEEE Pervasive Comput. 4(3), 55–60 (2005). https://doi.org/10.1109/MPRV.2005.50CrossRef

13.

Matyunin, N., Szefer, J., Katzenbeisser, S.: Zero-permission acoustic cross-device tracking. In: 2018 IEEE International Symposium on Hardware Oriented Security and Trust (HOST), pp. 25–32 (2018). https://doi.org/10.1109/HST.2018.8383887

14.

Mavroudis, V., Hao, S., Fratantonio, Y., Maggi, F., Kruegel, C., Vigna, G.: On the privacy and security of the ultrasound ecosystem. In: Proceedings on Privacy Enhancing Technologies, pp. 95–112 (2017). https://doi.org/10.1515/popets-2017-0018

15.

Mavroudis, V., Hao, S., Fratantonio, Y., Maggi, F., Kruegel, C., Vigna, G.: On the privacy and security of the ultrasound ecosystem. In: Proceedings of the 17th Privacy Enhancing Technologies Symposium, PETS 2017, pp. 95–112. DE GRUYTER (2017). https://doi.org/10.1515/popets-2017-0018

Titel: FOCUS: Frequency Based Detection of Covert Ultrasonic Signals
verfasst von: Wouter Hellemans
Md Masoom Rabbani
Jo Vliegen
Nele Mentens
Verlag: Springer International Publishing
Buch: ICT Systems Security and Privacy Protection
Print ISBN: 978-3-031-06974-1

Electronic ISBN: 978-3-031-06975-8

Copyright-Jahr: 2022
DOI: https://doi.org/10.1007/978-3-031-06975-8_5

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Premium Partner