BitWhisper: Covert Signaling Channel between Air-Gapped Computers Using Thermal Manipulations

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

It has been assumed that the physical separation ('air-gap') of computers provides a reliable level of security, such that should two adjacent computers become compromised, the covert exchange of data between them would be impossible. In this paper, we demonstrate BitWhisper, a method of bridging the air-gap between adjacent compromised computers by using their heat emissions and built-in thermal sensors to create a covert communication channel. Our method is unique in two respects: it supports bidirectional communication, and it requires no additional dedicated peripheral hardware. We provide experimental results based on the implementation of the Bit-Whisper prototype, and examine the channel's properties and limitations. Our experiments included different layouts, with computers positioned at varying distances from one another, and several sensor types and CPU configurations (e.g., Virtual Machines). We also discuss signal modulation and communication protocols, showing how BitWhisper can be used for the exchange of data between two computers in a close proximity (positioned 0-40 cm apart) at an effective rate of 1-8 bits per hour, a rate which makes it possible to infiltrate brief commands and exfiltrate small amount of data (e.g., passwords) over the covert channel.

Original languageAmerican English
Title of host publicationProceedings - 2015 IEEE 28th Computer Security Foundations Symposium, CSF 2015
EditorsPatrick Kellenberger
Pages276-289
Number of pages14
ISBN (Electronic)9781467375382
DOIs
StatePublished - 4 Sep 2015
Event28th IEEE Computer Security Foundations Symposium, CSF 2015 - Verona, Italy
Duration: 13 Jul 201517 Jul 2015

Publication series

NameProceedings of the Computer Security Foundations Workshop
Volume2015-September

Conference

Conference28th IEEE Computer Security Foundations Symposium, CSF 2015
Country/TerritoryItaly
CityVerona
Period13/07/1517/07/15

Keywords

  • air-gap
  • bridging
  • covert channel
  • exfiltration
  • infiltration
  • sensors
  • temperature

All Science Journal Classification (ASJC) codes

  • Software

Fingerprint

Dive into the research topics of 'BitWhisper: Covert Signaling Channel between Air-Gapped Computers Using Thermal Manipulations'. Together they form a unique fingerprint.

Cite this