Department of Signal Processing and Multimedia Engineering, West Pomeranian University of Technology in Szczecin, 70-310 Szczecin, Poland.
IBM Polska Sp. z o.o., 02-255 Warszawa, Poland.
Sensors (Basel). 2023 Jan 6;23(2):665. doi: 10.3390/s23020665.
An air gap is a technique that increases the security of information systems. The use of unconventional communication channels allows for obtaining communication that is of interest to the attacker as well as to cybersecurity engineers. One of the very dangerous forms of attack is the use of computer screen brightness modulation, which is not visible to the user but can be observed from a distance by the attacker. Once infected, the computer can transmit data over long distances. Even in the absence of direct screen visibility, transmission can be realized by analyzing the modulated reflection of the monitor's afterglow. The paper presents a new method for the automatic segmentation of video sequences to retrieve the transmitted data that does not have the drawbacks of the heretofore known method of growth (filling) based on an analysis of adjacent pixels. A fast camera operating at 380 fps was used for image acquisition. The method uses the characteristics of the amplitude spectrum for individual pixels, which is specific to the light sources in the room, and clustering with the k-means algorithm to group pixels into larger areas. Then, using the averaging of values for individual areas, it is possible to recover the 2-PAM (pulse-amplitude modulation) signal even at a 1000 times greater level of interference in the area to the transmitted signal, as shown in the experiments. The method does not require high-quality lenses.
气隙是一种提高信息系统安全性的技术。使用非常规的通信通道可以获取攻击者和网络安全工程师都感兴趣的通信。一种非常危险的攻击形式是使用计算机屏幕亮度调制,这种调制对用户不可见,但攻击者可以从远处观察到。一旦感染,计算机就可以远距离传输数据。即使没有直接的屏幕可见性,也可以通过分析监视器余晖的调制反射来实现传输。本文提出了一种新的视频序列自动分割方法,用于检索传输数据,该方法没有基于相邻像素分析的增长(填充)方法的缺点。使用一台以 380 fps 运行的高速摄像机进行图像采集。该方法使用每个像素的幅度谱特征,这是房间内光源特有的,并使用 k-均值算法进行聚类,将像素分组为更大的区域。然后,使用各个区域的值平均值,可以恢复 2-PAM(脉冲幅度调制)信号,即使在传输信号区域的干扰水平高出 1000 倍的情况下,如实验所示。该方法不需要高质量的镜头。