Identifying class of previously unseen programs using RF side channels

Mark Chilenski; Corey Cleveland; Isaac Dekine; Catherine O'Donnell; Gil Raz; Andrew Sciotti; Laura Vertatschitsch

doi:10.1117/12.2562343

24 April 2020 Identifying class of previously unseen programs using RF side channels

Mark Chilenski, Corey Cleveland, Isaac Dekine, Catherine O'Donnell, Gil Raz, Andrew Sciotti, Laura Vertatschitsch

Proceedings Volume 11417, Cyber Sensing 2020; 114170A (2020) https://doi.org/10.1117/12.2562343
Event: SPIE Defense + Commercial Sensing, 2020, Online Only

Abstract

We present results showing that software programs which are not part of the training set can be characterized into broad classes using involuntary RF side channels. This extends previous work on program identification through analog side channels focused on identifying the specific program out of the training set or flagging previously-unseen programs as "anomalous." This new approach enables an intrusion detection system to be robust to benign changes such as software updates and eliminates the need for an exhaustive training set which covers all possible device functions and states. We have applied our approach to a variety of devices under test, ranging from microcontrollers to laptop computers, and identify program classes such as processor-bound, signal processing, database access, etc. This approach is particularly applicable for defending devices which lack the computational resources to run traditional cybersecurity solutions, including industrial control systems (ICS) and internet of things (IoT) devices.

Conference Presentation

Citation Download Citation

Mark Chilenski, Corey Cleveland, Isaac Dekine, Catherine O'Donnell, Gil Raz, Andrew Sciotti, and Laura Vertatschitsch "Identifying class of previously unseen programs using RF side channels", Proc. SPIE 11417, Cyber Sensing 2020, 114170A (24 April 2020); https://doi.org/10.1117/12.2562343

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available