Side-Channel Attacks & Data Exfiltration Using Wall Outlet USB Power Adapters  

作　　者：Andrew Masters Vijay K. Madisetti Andrew Masters;Vijay K. Madisetti(School of Cybersecurity and Privacy, Georgia Institute of Technology, Atlanta, United States)

机构地区：[1]School of Cybersecurity and Privacy, Georgia Institute of Technology, Atlanta, United States

出　　处：《Journal of Information Security》2024年第4期433-447,共15页信息安全（英文）

摘　　要：The number and creativity of side channel attacks have increased dramatically in recent years. Of particular interest are attacks leveraging power line communication to 1) gather information on power consumption from the victim and 2) exfiltrate data from compromised machines. Attack strategies of this nature on the greater power grid and building infrastructure levels have been shown to be a serious threat. This project further explores this concept of a novel attack vector by creating a new type of penetration testing tool: an USB power adapter capable of remote monitoring of device power consumption and communicating through powerline communications.The number and creativity of side channel attacks have increased dramatically in recent years. Of particular interest are attacks leveraging power line communication to 1) gather information on power consumption from the victim and 2) exfiltrate data from compromised machines. Attack strategies of this nature on the greater power grid and building infrastructure levels have been shown to be a serious threat. This project further explores this concept of a novel attack vector by creating a new type of penetration testing tool: an USB power adapter capable of remote monitoring of device power consumption and communicating through powerline communications.

关 键 词：CYBERSECURITY Side Channel Attack Power Line Communication Penetration Testing Hotplug Attack Tool 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]