Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What kind of equipment would be required to sniff data from the electromagnetic emissions of data / address buses on an average motherboard?

I'd imagine a sensitive hall probe, a faraday cage and some expensive analysis equipment (e.g. spectrum analyser) would be necessary, racking up a pretty significant cost, but I don't really have any sources to suggest that this is correct or incorrect.

Anyone had any experience in this field? Are there homebrew methods, or is this the kind of attack that requires significant resources to pull off?

share|improve this question

1 Answer 1

up vote 4 down vote accepted

I recall a video I saw from one of the big conventions, in which a researcher was able to decode emissions from a PS/2 keyboard using nothing but a slow oscilloscope - he simply observed the ground pin of the target machine and he could pick bits straight off. I had previously assumed that such attacks required spectrum analysers and a degree in RF black magic - but apparently not!

The video is by 'Andrea Barisana and Daniele Bianco' and is from a BlackHat 2009 talk - talk slides are at https://www.blackhat.com/presentations/bh-usa-09/BARISANI/BHUSA09-Barisani-Keystrokes-SLIDES.pdf.

I should point out that I haven't tried to replicate their research myself.

share|improve this answer
    
I've seen similar stuff with large antennas picking up the EM from keyboard strokes in an adjacent room (there's a video out there somewhere), but I was thinking more specifically about high frequency data buses, especially the RAM / PCI buses on motherboards. +1 for the info though, very interesting. –  Polynomial Jul 4 '12 at 14:10

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.