(Press-News.org) BEER-SHEVA, Israel...July 28, 2015 - Researchers at the Ben-Gurion University of the Negev (BGU) Cyber Security Research Center have discovered that virtually any cellphone infected with a malicious code can use GSM phone frequencies to steal critical information from infected "air-gapped" computers.
Air-gapped computers are isolated -- separated both logically and physically from public networks -- ostensibly so that they cannot be hacked over the Internet or within company networks.
Led by BGU Ph.D. student Mordechai Guri, the research team discovered how to turn an ordinary air-gapped computer into a cellular transmitting antenna using software that modifies the CPU firmware. GSMem malicious software uses the electromagnetic waves from phones to receive and exfiltrate small bits of data, such as security keys and passwords.
"GSMem takes the air out of the gap and will force the world to rethink air-gap security," says Dudu Mimran, chief technology officer of BGU's Cyber Security Research Center. "Our GSMem malicious software on Windows and Linux has a tiny computational footprint, which makes it very hard to detect. Furthermore, with a dedicated receiver, we were successful exfiltrating data as far as 90 ft. (30 meters) in distance from the computer."
URL For YouTube video: https://www.youtube.com/watch?v=RChj7Mg3rC4
According to Guri, "Many companies already restrict the use of cell phones or limit the capabilities (no camera, video or Wi-Fi on cell phones) around air-gapped computers. However, phones are often otherwise allowed in the vicinity of air-gapped computers thought to be secure. Since modern computers emit some electromagnetic radiation (EMR) at various wavelengths and strengths, and cellular phones easily receive them, this creates an opportunity for attackers."
The researchers recommend that countermeasures to mitigate the issue use the "Zone" approach: defined areas or zones around these computers where mobile phones and simple devices are prohibited. Insulation of partition walls may help to mitigate signal reception distance growth if a dedicated hardware receiver is used. Additionally, anomaly detection and behavioral dynamic analysis may help.
This is the third threat the BGU cyber team has uncovered related to what are supposed to be secure, air-gapped computers. Last year, the researchers created a method called Air-Hopper, which utilizes FM waves for data exfiltration. Another research initiative, BitWhisper, demonstrated a covert bi-directional communication channel between two close-by air-gapped computers using heat to communicate.
In addition to lead researcher Mordechai Guri, the other BGU researchers include Assaf Kachlon, Ofer Hasson, Gabi Kedma, Yisroel Mirsky, and Prof. Yuval Elovici, director of the BGU Cyber Security Research Center, member of Ben-Gurion University's Department of Information Systems Engineering and director of Deutsche Telekom Laboratories.
Guri will present the findings next month at the USENIX Security '15 Conference on August 14 at 2:00 p.m. at the Hyatt Regency Capitol Hill, 400 New Jersey Ave. NW, Washington, D.C.
INFORMATION:
About American Associates, Ben-Gurion University of the Negev
American Associates, Ben-Gurion University of the Negev (AABGU) plays a vital role in sustaining David Ben-Gurion's vision, creating a world-class institution of education and research in the Israeli desert, nurturing the Negev community and sharing the University's expertise locally and around the globe. With some 20,000 students on campuses in Beer-Sheva, Sede Boqer and Eilat in Israel's southern desert, BGU is a university with a conscience, where the highest academic standards are integrated with community involvement, committed to sustainable development of the Negev. AABGU is headquartered in Manhattan and has nine regional offices throughout the U.S. For more information, please visit http://www.aabgu.org.
Consumers have access to multiple Web sites to search for online health information and can be far more involved in managing their own medical issues than ever before. However, this wealth of resources can make finding accurate information difficult, especially because it is often spread across multiple sites. A new study published in the Journal of Cognitive Engineering and Decision Making aims to evaluate the types of search strategies that Internet users adopt when trying to solve a complicated health problem.
Joseph Sharit, a professor in the Department of Industrial ...
Alexandria, VA - The United States' Icebreaker Fleet - operated by the U.S. Coast Guard - consists of just two ships that are used for everything from search and rescue to national security operations to scientific research. In our August cover story, EARTH Magazine examines the various roles icebreakers play, especially in Arctic research, and how insufficient funding is affecting the icebreakers' roles.
Icebreakers are becoming more important every year, as more commerce is conducted in Arctic regions as seasonal ice cover decreases. Yet over recent fiscal cycles, Congress ...
West Orange, NJ. July 28, 2015 Recommendations for improving clinical cognitive testing were reported by the American Academy of Neurology's (AAN) Behavioral Neurology Section (BNS) Group, led by Kirk R. Daffner, MD, of Boston, Mass. The Group focused on the Neurobehavioral Status Exam (NBSE), conducting evidence-based reviews of testing used for five domains - attention, language, memory, spatial cognition, and executive function). "Improving clinical cognitive testing" (doi: 10.1212/WNL.0000000000001763) was published online ahead of print on July 10, 2015, in Neurology, ...
Are the same regions and even the same cells of the brain area called hippocampus involved in encoding and retrieving memories or are different areas of this structure engaged? This question has kept neuroscientists busy for a long time. Researchers at the Mercator Research Group "Structure of Memory" at RUB have now found out that the same brain cells exhibit activity in both processes. They have published their results in the journal "Hippocampus".
Hippocampus: the key to memory
In the course of their project, Dr Nozomu Nakamura and Prof Dr Magdalena Sauvage from ...
Like to go your own way? Most of us actually prefer to follow the pack, according to UBC research.
That's one of the outcomes from a study published in Evolution and Human Behavior that examines how mathematical models predict human behaviour.
The research tested theories about when people should rely on "social information" - information that we learn vicariously from others - and when we should choose to go it alone.
"People are conformist - and that's a good thing for cultural evolution," said Michael Muthukrishna, a Vanier and Liu Scholar and recent PhD recipient ...
More and more Americans on-the-go are skipping the "most important meal of the day," not eating until lunch. This tendency to miss breakfast has already been linked to the growing epidemic of obesity and cardiovascular problems in the US -- and it may put the health of diabetics at risk as well.
Very little was known regarding the effect of skipping breakfast on the health of diabetics -- until now. A new Tel Aviv University study reveals the substantial impact of skipping breakfast on type-2 diabetics. "Fasting" until noon triggers major blood sugar spikes (postprandial ...
Amsterdam, July 28, 2015 - Policy makers need to take factors like geography, available skills and knowledge and the networks of local companies into account to boost the impact of higher education on economic development, according to a new Atlas Award-winning paper published in the International Journal of Educational Development.
The authors of the study, from the University of Nottingham, say it's not quite as simple as more students equals higher income: higher education is key to economic development, but the way the two relate is complex, they say.
"Of course ...
People with a common form of hearing loss not helped by hearing aids achieved significant and sometimes profound improvements in their hearing and understanding of speech with hybrid cochlear implant devices, according to a new multicenter study led by specialists at NYU Langone Medical Center.
In the study, described online ahead of print in the journal The Laryngoscope July 7, researchers at 10 medical centers and private clinics in the United States implanted hybrid cochlear implants into one ear of 50 men and women. All study volunteers had badly damaged high-frequency, ...
The disposal and recycling of electronic devices has increased exposure to lead and other toxicants and created "an emerging health concern," according to a pediatrician who directs the Environmental Health and Lead Clinic at Cincinnati Children's Hospital Medical Center.
In a recent Morbidity and Mortality Weekly Report, published by the Centers for Disease Control, Dr. Nick Newman reports on two children, ages 1 and 2, whose father worked at an e-scrap recycling company crushing cathode ray tubes (CRTs). CRTs, made from leaded glass, were commonly used in televisions ...
TAMPA, Fla. - The Lesbian, Gay, Bisexual, Transgender/Transsexual, Queer/Questioning (LGBTQ) community is a growing and medically-underserved minority population in the United States, with 3 to 12 percent of the population estimated to identify as LGBTQ. Moffitt Cancer Center researchers published one of the first articles that describe the current knowledge about cancers that may disproportionately affect the LGBTQ community, and also offered suggestions for improving their healthcare.
LGBTQ community deals with significant economic and health disparities. Gay and lesbian ...
