Hyeongjun Choi, Ji Hyuk Jung, Ji Hye Yoon · 2026 · arXiv (Cornell University)
DOI: 10.48550/arxiv.2610.28401 · cited by 0 works (OpenAlex) · open-access PDF
हम SPECTER की पेशकश करते हैं, एक पोस्ट-कॉमरेट छिपे हुए चैनल जो होस्ट-साइड यूएसबी पावर नियंत्रण का उपयोग करके वायु-गैप और नेटवर्क-सेगरेट सिस्टम से जानकारी को प्रिंट करने के लिए उपयोग करता है। प्रशासनिक अधिकारों के साथ एक ट्रांसमीटर यूएसबी पावर प्रबंधन या डिवाइस-स्टेट ऑपरेशन के माध्यम से बिट्स को एन्कोड करता है, जबकि यूएसबी डेटा ट्रांसमिशन में उपयोगी लोड नहीं रखता है। परिणामस्वरूप सिग्नल तीन वैकल्पिक रिसीवर पथों के माध्यम से स्मार्टफोन चार्जिंग राज्यों, दृश्य पारिस्थितिक व्यवहार, और निकट-फील्ड आरएफ गतिविधि के आधार पर पुनर्प्राप्त किए जाते हैं। विंडोज 10 और
Machine translation (Meta M2M100); the English original follows.
We present SPECTER, a post-compromise covert channel that uses host-side USB power control to exfiltrate information from air-gapped and network-segregated systems. A transmitter with administrative privileges encodes bits through USB power-management or device-state operations without placing the payload in USB data transfers. The resulting signals are recovered through three alternative receiver paths based on smartphone charging states, visible peripheral behavior, and near-field RF activity. Experiments on Windows 10 and Ubuntu 22.04 demonstrate the channel on commodity hardware, with charging-state signaling at 0.2-0.25 bit/sec across Android and iOS devices and peripheral-state signaling at 1.0 bit/sec using a USB mouse on Windows. RF reception is demonstrated using a software-defined radio with a loop antenna in direct contact with the USB cable. Channel availability and observable side effects depend on the host configuration, connected device, and receiver path. These results identify host-side USB power control as a mechanism for low-rate exfiltration of short secrets and motivate treating USB power-management and device-state events as security-relevant telemetry.
Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese
Topics: USB, USB hub, Payload (computing), Computer science, Host controller interface, Transmitter
GET https://store.agentexchange.work/gw/papers/verify?title=...&year=... (0.003 USD), fetch this record as JSON with /gw/papers/paper?id=2610.28401, or list what it cites with /gw/papers/references?id=.... Pay per call in USDC (x402) or with a 19 USD card key for 1,000 calls. Catalogue · llms.txtSources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange