Anomalous activity detection using RF emanations

IF 3.6 2区 工程技术 Q2 ENGINEERING, ELECTRICAL & ELECTRONIC
Venkatesh Sathyanarayanan , Peter Gerstoft
{"title":"Anomalous activity detection using RF emanations","authors":"Venkatesh Sathyanarayanan ,&nbsp;Peter Gerstoft","doi":"10.1016/j.sigpro.2025.110201","DOIUrl":null,"url":null,"abstract":"<div><div>Electronic activity in digital systems unintentionally emits radio frequency (RF) signals called emanations. These emanations compromise data security, which is important for corporate and military establishments. This work focuses on detecting anomalous activity that compromises data security through emanations. An example of such anomalous activity is emanations from damaged peripherals, such as a mouse or keyboard, which can be used to steal digital data. Prior work on emanation detection uses profiling on specific hardware (HW). However, this is not scalable across all types of HW. We propose a HW-agnostic solution for finding anomalous activity using emanations by scanning the signature of harmonics from leakages of clock signals. An algorithm for multi-harmonic pitch estimation is introduced for wireless applications. A preprocessing technique is developed that removes the effect of artifacts. Thorough mathematical derivations demonstrate the algorithm theoretically. In-phase and Quadrature-phase (IQ) data are collected from emanation sources placed in a shielded room from 0.1–1.1 GHz using software-defined radios (SDR). Results are presented for use cases emulating anomalous activity that compromises data security, such as damaged peripherals and unauthorized data copy onto external devices.</div></div>","PeriodicalId":49523,"journal":{"name":"Signal Processing","volume":"238 ","pages":"Article 110201"},"PeriodicalIF":3.6000,"publicationDate":"2025-07-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Signal Processing","FirstCategoryId":"5","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S0165168425003159","RegionNum":2,"RegionCategory":"工程技术","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"ENGINEERING, ELECTRICAL & ELECTRONIC","Score":null,"Total":0}
引用次数: 0

Abstract

Electronic activity in digital systems unintentionally emits radio frequency (RF) signals called emanations. These emanations compromise data security, which is important for corporate and military establishments. This work focuses on detecting anomalous activity that compromises data security through emanations. An example of such anomalous activity is emanations from damaged peripherals, such as a mouse or keyboard, which can be used to steal digital data. Prior work on emanation detection uses profiling on specific hardware (HW). However, this is not scalable across all types of HW. We propose a HW-agnostic solution for finding anomalous activity using emanations by scanning the signature of harmonics from leakages of clock signals. An algorithm for multi-harmonic pitch estimation is introduced for wireless applications. A preprocessing technique is developed that removes the effect of artifacts. Thorough mathematical derivations demonstrate the algorithm theoretically. In-phase and Quadrature-phase (IQ) data are collected from emanation sources placed in a shielded room from 0.1–1.1 GHz using software-defined radios (SDR). Results are presented for use cases emulating anomalous activity that compromises data security, such as damaged peripherals and unauthorized data copy onto external devices.
利用射频辐射进行异常活动检测
数字系统中的电子活动会无意中发出射频(RF)信号,称为辐射。这些辐射损害了数据安全,这对企业和军事机构来说很重要。这项工作的重点是通过辐射检测危及数据安全的异常活动。这种异常活动的一个例子是从损坏的外围设备(如鼠标或键盘)发出的信号,可以用来窃取数字数据。先前的辐射检测工作使用特定硬件(HW)的分析。然而,这并不是在所有类型的硬件上都可以扩展的。我们提出了一种hw不可知的解决方案,用于通过扫描时钟信号泄漏的谐波特征来发现异常活动。介绍了一种用于无线应用的多谐波基音估计算法。提出了一种消除伪影影响的预处理技术。详尽的数学推导从理论上论证了该算法。同相和正交相(IQ)数据使用软件定义无线电(SDR)从放置在0.1-1.1 GHz屏蔽室内的辐射源收集。给出了模拟危害数据安全的异常活动的用例的结果,例如损坏的外围设备和未授权的数据复制到外部设备。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
Signal Processing
Signal Processing 工程技术-工程:电子与电气
CiteScore
9.20
自引率
9.10%
发文量
309
审稿时长
41 days
期刊介绍: Signal Processing incorporates all aspects of the theory and practice of signal processing. It features original research work, tutorial and review articles, and accounts of practical developments. It is intended for a rapid dissemination of knowledge and experience to engineers and scientists working in the research, development or practical application of signal processing. Subject areas covered by the journal include: Signal Theory; Stochastic Processes; Detection and Estimation; Spectral Analysis; Filtering; Signal Processing Systems; Software Developments; Image Processing; Pattern Recognition; Optical Signal Processing; Digital Signal Processing; Multi-dimensional Signal Processing; Communication Signal Processing; Biomedical Signal Processing; Geophysical and Astrophysical Signal Processing; Earth Resources Signal Processing; Acoustic and Vibration Signal Processing; Data Processing; Remote Sensing; Signal Processing Technology; Radar Signal Processing; Sonar Signal Processing; Industrial Applications; New Applications.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信