HOTSPOT: Crossing the air-gap between isolated pcs and nearby smartphones using temperature

    Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

    12 Scopus citations

    Abstract

    Air-gapped computers are hermetically isolated from the Internet to eliminate any means of information leakage. In this paper we present HOTSPOT - a new type of airgap crossing technique. Signals can be sent secretly from air-gapped computers to nearby smartphones and then on to the Internet - in the form of thermal pings. The thermal signals are generated by the CPUs and GPUs and intercepted by a nearby smartphone. We examine this covert channel and discuss other work in the field of air-gap covert communication channels. We present technical background and describe thermal sensing in modern smartphones. We implement a transmitter on the computer side and a receiver Android App on the smartphone side, and discuss the implementation details. We evaluate the covert channel and tested it in a typical work place. Our results show that it possible to send covert signals from air-gapped PCs to the attacker on the Internet through the thermal pings. We also propose countermeasures for this type of covert channel which has thus far been overlooked.

    Original languageEnglish
    Title of host publicationProceedings of the 2019 European Intelligence and Security Informatics Conference, EISIC 2019
    EditorsJoel Brynielsson
    PublisherInstitute of Electrical and Electronics Engineers
    Pages94-100
    Number of pages7
    ISBN (Electronic)9781728167350
    DOIs
    StatePublished - 1 Nov 2019
    Event2019 European Intelligence and Security Informatics Conference, EISIC 2019 - Oulu, Finland
    Duration: 26 Nov 201927 Nov 2019

    Publication series

    NameProceedings of the 2019 European Intelligence and Security Informatics Conference, EISIC 2019

    Conference

    Conference2019 European Intelligence and Security Informatics Conference, EISIC 2019
    Country/TerritoryFinland
    CityOulu
    Period26/11/1927/11/19

    Keywords

    • Air-gap
    • Covert-channels
    • Exfiltration
    • Smartphones
    • Temperature
    • Thermal

    ASJC Scopus subject areas

    • Artificial Intelligence
    • Computer Science Applications
    • Information Systems
    • Information Systems and Management
    • Safety, Risk, Reliability and Quality

    Fingerprint

    Dive into the research topics of 'HOTSPOT: Crossing the air-gap between isolated pcs and nearby smartphones using temperature'. Together they form a unique fingerprint.

    Cite this