IEMI Threats for Information Security: Remote Command Injection on Modern Smartphones

IEEE Transactions on Electromagnetic Compatibility

Volumn 57, Issue 6, 2015, Pages 1752-1755

  Kasmi, Chaouki ^a   Lopes Esteves, Jose ^a  

^a ANSSI   (France)

Author keywords

Electronic warfare; information security; intentional electromagnetic interference

Indexed keywords

DENIAL-OF-SERVICE ATTACK; ELECTROMAGNETIC PULSE; SECURITY OF DATA; SMARTPHONES;

COMMAND INJECTIONS; DENIAL OF SERVICE; ELECTROMAGNETIC ATTACK; ELECTROMAGNETIC WAVEFORMS; ELECTRONIC DEVICE; INTENTIONAL ELECTROMAGNETIC INTERFERENCES; VOICE COMMAND;

MOBILE SECURITY;

EID: 84939445531     PISSN: 00189375     EISSN: None     Source Type: Journal    
DOI: 10.1109/TEMC.2015.2463089     Document Type: Article

References (19)

1. L. Palisek and L. Suchy, "High power microwave effects on computer networks," in Proc. EMC Europe 2011 York Conf., York, U.K., Sept. 26-30, 2011, pp. 18-21.
2. M. G. Bäckström and K. G. Lövstrand, "Susceptibility of electronic systems to high-power microwaves: Summary of test experience," IEEE Trans. Electromagn. Compat., vol. 46, no. 3, pp. 396-403, Aug. 2004.
3. F. Sabath, "Classification of electromagnetic effects at system level," in Proc. Electromagn. Compat. EMC Europe Int. Symp. Conf., Hamburg, Germany, Sep. 8-12, 2008, pp. 1-5.
4. C. Kasmi, J. Lopes-Esteves, N. Picard, and M. Renard, "Event logs generated by an operating system running on a COTS computer during IEMI exposure," IEEE Trans. Electromagn. Compat., vol. 56, no. 6, pp. 1723-1726, Dec. 2014.
5. Y. Hayashi, S. Gomisawa, and Y. Li, "Intentional electromagnetic interference for fault analysis on AES block cipher IC," in Proc. Electromagn. Compat. Integr. Circuits, Nov. 6-9, 2011, pp. 235-240.
6. T. Fuhr, E. Jaulmes, V. Lomne, and A. Thillard, "Fault Attacks on AES with faulty ciphertexts only," in Proc. Workshop Fault Diagnosis Tolerance Cryptography, Aug. 20-20 2013, pp. 108-118.
7. K. B. Rasmussen, C. Castlluccia, T. Heydt-Benjamin, and S. Capkun, "Proximity-based access control for implantable medical devices," presented at the 16th ACM Conf. Computer Communication Security, Chicago, IL, USA, Nov. 9-13, 2009.
8. A. Tatematsu, M. Rubinstein, F. Rachidi et al., "On the feasibility of low-power IEMI attacks on communication and control lines," presented at the 34th Progress Electromagn. Res. Symp., Stockholm, Sweden, Aug. 12-15, 2013.
9. Samsung. (2014). How do I Use Samsung S-Voice. [Online]. Available: http://www.samsung.com/us/support/supportOwnersHowToGuidePopup. do?howto-guide-seq=7061&prd-ia-cd=N0000003&map-seq=54784
10. Apple. (2015). Siri. [Online]. Available: https://www.apple.com/ios/siri/
11. Google. (2015). Ok Google. [Online]. Available: https://support. google.com/websearch/answer/2940021?hl=en
12. Microsoft. (2015). Meet Cortana. [Online]. Available: http://www.windowsphone.com/en-us/how-to/wp8/cortana/meet-cortana
13. Microsoft. (2015). Speech. [Online]. Available: http://www.windowsphone.com/en-us/how-to/wp8/apps/use-speech-on-my-phone
14. N. Gonzalez. (2014). Siri exploited again-how to bypass the lock screen in iOS 8. [Online]. Available: ios.wonderhowto.com
15. Applidium. (2011). Cracking Siri. [Online]. Available: GitHub
16. W. Wei. (2015). Apple admits Siri voice data is being shared with third parties. [Online]. Available: www.hackernews.com
17. W. Diao, X. Liu, Z. Zhou, and K. Zhang, "Your voice assistant is mine: How to abuse speakers to steal information and control your phone," in Proc. 4th ACM Workshop Security Privacy Smartphones Mobile Devices, New York, USA, 2014, pp. 63-74.
18. A. Moulu, Abusing Samsung KNOX to remotely install a malicious application, Quarkslab, 2014.
19. C. Kasmi and J. Lopes Esteves, "Automated analysis of the effects induced by radio-frequency pulses on embedded systems for EMC functional safety," presented at the URSI Atlantic Radio Science Conf., Canarias Islands, Spain, 2015.