Don't Look Up: Ubiquitous Data Exfiltration Pathways in Commercial Spaces

06/26/2022
by   Anku Adhikari, et al.
0

We show that as a side effect of building code requirements, almost all commercial buildings today are vulnerable to a novel data exfiltration attack, even if they are air-gapped and secured against traditional attacks. The new attack uses vibrations from an inconspicuous transmitter to send data across the building's physical infrastructure to a receiver. Our analysis and experiments with several large real-world buildings show a single-frequency bit rate of 300Kbps, which is sufficient to transmit ordinary files, real-time MP3-quality audio, or periodic high-quality still photos. The attacker can use multiple channels to transmit, for example, real-time MP4-quality video. We discuss the difficulty of detecting the attack and the viability of various potential countermeasures.

READ FULL TEXT

page 7

page 13

research
04/03/2018

Cognitive Radio from Hell: Flipping Attack on Direct-Sequence Spread Spectrum

In this paper, we introduce a strong adversarial attack, referred to as ...
research
10/17/2022

Development of a hardware-In-the-Loop (HIL) testbed for cyber-physical security in smart buildings

As smart buildings move towards open communication technologies, providi...
research
06/30/2023

BuildingsBench: A Large-Scale Dataset of 900K Buildings and Benchmark for Short-Term Load Forecasting

Short-term forecasting of residential and commercial building energy con...
research
07/24/2021

BIoTA Control-Aware Attack Analytics for Building Internet of Things

Modern building control systems adopt demand control heating, ventilatio...
research
06/28/2021

Open government geospatial data on buildings for planning sustainable and resilient cities

As buildings are central to the social and environmental sustainability ...
research
02/26/2018

A Generative Model for Non-Intrusive Load Monitoring in Commercial Buildings

In the recent years, there has been an increasing academic and industria...
research
01/16/2017

Real-Time Energy Disaggregation of a Distribution Feeder's Demand Using Online Learning

Though distribution system operators have been adding more sensors to th...

Please sign up or login with your details

Forgot password? Click here to reset