基于主动检测的电子设备电磁信息泄漏新型威胁分析  

New Threat Analysis of Electromagnetic Information Leakage in Electronic Equipment based on Active Detection

作　　者：丁建锋 刘文斌 丁磊 张健 严承涛 宋滔 DING Jian-feng;LIU Wen-bin;DING Lei;ZHANG Jian;YAN Cheng-tao;SONG Tao(China Cyber Security Co.,Ltd.,Chengdu Sichuan 610041,China;Unit 61569 of PLA,Beijing 100072,China)

机构地区：[1]中国电子科技网络信息安全有限公司 [2]61569部队

出　　处：《通信技术》2018年第4期936-940,共5页Communications Technology

基　　金：四川省青年科技创新研究团队专项计划项目(No.2016TD0029)~~

摘　　要：通过恶意程序操作构建调制特征信号,成为电磁信息泄漏的新型威胁。应对该威胁,应深入分析其设计机理,主动重构与之近似的调制特征信号,从而快速定位电子设备中潜在的电磁泄漏源,并挖掘防护薄弱点,提出针对性的预防方法。具体地,介绍了国外基于恶意程序的电磁信息泄漏威胁研究情况,针对VGA显示接口构建调制信号并测试其谐波频率、传导网络等特征,推测其辐射-传导关联泄漏机理。然后,针对RS232接口进行了新型威胁的扩展性验证。基于标准信号源搭建新型威胁的验证环境,通过定量分析验证其普适性,归纳了应对新型威胁的主动检测方法。The construction of a modulation signature signal through a malicious program operation becomes a new threat to the leakage of electromagnetic information.To deal with this threat,the design mechanism should be deeply analyzed and the modulation characteristic signal that is similar to it should be actively reconstructed.In this way,the potential source of electromagnetic leakage in electronic devices can be quickly located,and weak points of protection can be excavated,then targeted preventive measures can be proposed.Specifically,the research on the threat of electromagnetic information leakage based on malicious programs abroad is introduced.The VGA display interface was used to construct the modulated signal and its harmonic frequency,conducting network and other characteristics are tested to speculate its radiation-conduction related leakage mechanism.Finally,new threat extensibility verification is performed for the RS232 interface.Based on standard signal sources,new type of threat verification environment is constructed,and its universality is verified through quantitative analysis.An active detection method for responding to new threats is summarized.

关 键 词：物理隔离网络 脆弱性 调制信号 主动检测 传导发射 

分 类 号：TN924[电子电信—通信与信息系统] TP309.2[电子电信—信息与通信工程]