משתמשים במצלמות אבטחה? הן עלולות לגרום נזק גדול

http://www.nrg.co.il/online/13/ART2/895/852.html?hp=13&cat=137&loc=23

משתמשים במצלמות אבטחה? הן עלולות לגרום נזק גדול
משתמשים במצלמות אבטחה בארגון שלכם? אתם חושפים את עצמכם לריגול מרחוק. מסתבר שמצלמות האבטחה שמזהות גם את הספקטרום הזה של האור הן כלי נהדר להעברת מידע ממרחק רב אל גורם פנימי

http://cyber.bgu.ac.il/advanced-cyber/airgap

Air-Gap Research Page
By Dr. Mordechai Guri
Cyber-Security Research Center
Ben-Gurion University of the Negev, Israel
aIR-Jumper (Optical)
"aIR-Jumper: Covert Air-Gap Exfiltration/Infiltration via Security Cameras & Infrared (IR)"
Mordechai Guri, Dima Bykhovsky‏, Yuval Elovici

 
Air-Gap Research Page
By Dr. Mordechai Guri
Cyber-Security Research Center
Ben-Gurion University of the Negev, Israel
email: gurim@post.bgu.ac.il (linkedin)



aIR-Jumper (Optical)
"aIR-Jumper: Covert Air-Gap Exfiltration/Infiltration via Security Cameras & Infrared (IR)"
Mordechai Guri, Dima Bykhovsky‏, Yuval Elovici

Paper: http://arxiv.org/abs/1709.05742

Video (infiltration): https://www.youtube.com/watch?v=auoYKSzdOj4

Video (exfiltration): https://www.youtube.com/watch?v=om5fNqKjj2M





xLED (Optical)
Mordechai Guri, Boris Zadov, Andrey Daidakulov, Yuval Elovici. "xLED: Covert Data Exfiltration from Air-Gapped Networks via Router LEDs"

Paper: https://arxiv.org/abs/1706.01140
Or: http://cyber.bgu.ac.il/advanced-cyber/system/files/xLED-Router-Guri_0.pdf

Demo video: https://www.youtube.com/watch?v=mSNt4h7EDKo



AirHopper (Electromagnetic)
Mordechai Guri, Gabi Kedma, Assaf Kachlon, and Yuval Elovici. "AirHopper: Bridging the air-gap between isolated networks and mobile phones using radio frequencies." In Malicious and Unwanted Software: The Americas (MALWARE), 2014 9th International Conference on, pp. 58-67. IEEE, 2014.

Guri, Mordechai, Matan Monitz, and Yuval Elovici. "Bridging the Air Gap between Isolated Networks and Mobile Phones in a Practical Cyber-Attack." ACM Transactions on Intelligent Systems and Technology (TIST) 8, no. 4 (2017): 50.

Demo video: https://www.youtube.com/watch?v=2OzTWiGl1rM&t=20s



BitWhisper (Thermal)
Mordechai Guri, Matan Monitz, Yisroel Mirski, and Yuval Elovici. "Bitwhisper: Covert signaling channel between air-gapped computers using thermal manipulations." In Computer Security Foundations Symposium (CSF), 2015 IEEE 28th, pp. 276-289. IEEE, 2015.

Demo video: https://www.youtube.com/watch?v=EWRk51oB-1Y&t=15s



GSMem (Electromagnetic)
Mordechai Guri, Assaf Kachlon, Ofer Hasson, Gabi Kedma, Yisroel Mirsky, and Yuval Elovici. "GSMem: Data exfiltration from air-gapped computers over gsm frequencies." In 24th USENIX Security Symposium (USENIX Security 15), pp. 849-864. 2015.

Demo video: https://www.youtube.com/watch?v=RChj7Mg3rC4



Fansmitter (Acoustic)
Mordechai Guri, Yosef Solewicz, Andrey Daidakulov, and Yuval Elovici. "Fansmitter: Acoustic Data Exfiltration from (Speakerless) Air-Gapped Computers." arXiv preprint arXiv:1606.05915 (2016).

Demo video: https://www.youtube.com/watch?v=v2_sZIfZkDQ



DiskFiltration (Acoustic)
Mordechai Guri,Yosef Solewicz, Andrey Daidakulov, Yuval Elovici. "Acoustic Data Exfiltration from Speakerless Air-Gapped Computers via Covert Hard-Drive Noise (‘DiskFiltration’)". European Symposium on Research in Computer Security (ESORICS 2017) pp 98-115

Mordechai Guri, Yosef Solewicz, Andrey Daidakulov, and Yuval Elovici. "DiskFiltration: Data Exfiltration from Speakerless Air-Gapped Computers via Covert Hard Drive Noise." arXiv preprint arXiv:1608.03431 (2016).

Demo video: https://www.youtube.com/watch?v=H7lQXmSLiP8

 

USBee (Electromagnetic)
Mordechai Guri, Matan Monitz, and Yuval Elovici. "USBee: Air-Gap Covert-Channel via Electromagnetic Emission from USB." arXiv preprint arXiv:1608.08397 (2016).

Demo video: https://www.youtube.com/watch?v=E28V1t-k8Hk



LED-it-GO (Optical)
Mordechai Guri, Boris Zadov, Yuval Elovici. "LED-it-GO: Leaking (A Lot of) Data from Air-Gapped Computers via the (Small) Hard Drive LED". Detection of Intrusions and Malware, and Vulnerability Assessment - 14th International Conference, DIMVA 2017: 161-184

Mordechai Guri, Boris Zadov, Eran Atias, and Yuval Elovici. "LED-it-GO: Leaking (a lot of) Data from Air-Gapped Computers via the (small) Hard Drive LED." arXiv preprint arXiv:1702.06715 (2017).

Demo video: https://www.youtube.com/watch?v=4vIu8ld68fc



VisiSploit (Optical)
Mordechai Guri, Ofer Hasson, Gabi Kedma, and Yuval Elovici. "An optical covert-channel to leak data through an air-gap." In Privacy, Security and Trust (PST), 2016 14th Annual Conference on, pp. 642-649. IEEE, 2016.

Mordechai Guri, Ofer Hasson, Gabi Kedma, and Yuval Elovici. "VisiSploit: An Optical Covert-Channel to Leak Data through an Air-Gap." arXiv preprint arXiv:1607.03946 (2016).