Switched Mode Power Supply Covert Cyberattack Signaling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for detecting cyberattacks in electronic systems often lead to a cycle of detection and counter-strategy, making the system unusable, as notifications can alert attackers and mask subsequent attacks, and existing technologies lack a covert mechanism to communicate such events effectively.
Innovation Solution
The method involves operating electronic components, such as GPUs, to increase power draw from a switched mode power supply, generating a radio frequency (RF) noise signal that is subtly changed and detectable by remote systems, allowing covert communication of cyberattack events without alerting the attacker, using the switched mode power supply's noise frequency changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a notification is sent to alert remote systems of a cyberattack, then the remote systems can respond to the attack, but the attacker may detect the communication and mask subsequent attacks
Solution Approach 1:
The patent uses RF noise signals as an intermediary medium to communicate cyberattack events. Instead of sending direct notifications through conventional communication channels that attackers can monitor, the system embeds attack information within RF noise generated by the switched mode power supply. This intermediary approach allows covert communication because the RF noise appears as ordinary electromagnetic interference rather than a deliberate signal, making it undetectable by attackers while still conveying attack information to remote monitoring systems.
Solution Approach 2:
The patent converts the harmful RF noise, which is normally considered unwanted electromagnetic interference from the power supply, into a beneficial communication channel. By modulating the RF noise signals to encode cyberattack information, the system transforms a harmful byproduct into a useful covert communication medium. This allows attack notifications to be sent without requiring additional communication hardware or creating new signal sources that might be detected.
2Loss of information
If conventional communication channels are used to notify remote systems, then the communication is reliable, but the communication can be detected by attackers
Solution Approach 1:
The RF noise signals serve as an intermediary that carries event information without being detectable as a communication signal. The switched mode power supply's natural RF emissions are modulated to encode cyberattack events, allowing information to be transmitted through a medium that blends into the background electromagnetic environment rather than standing out as a deliberate communication channel.
Solution Approach 2:
The system changes parameters of the RF noise signals, such as frequency, amplitude, or temporal characteristics, to encode event information. By varying these parameters in response to detected cyberattacks, the system communicates event status without creating a new communication protocol that would be easily identifiable. The parameter changes are subtle and embedded within the normal operational variations of the power supply.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach enables covert notification of cyberattacks to remote entities, preventing attackers from detecting the communication and maintaining system usability by using RF noise signals that are outside normal frequency ranges, allowing for effective event detection and response.
Implementation Method 1
The change in the amount of power that the electronic component draws causes the switched mode power supply to output a radio frequency 'RF' noise signal
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An example method includes detecting an event in an electronic system. The electronic system includes an electronic component and a switched mode power supply. The electronic component draws an amount of power from the switched mode power supply during operation. In response to detecting the event, the electronic component is operated to cause the electronic component to change the amount of power that the electronic component draws from the switched mode power supply. The change in the amount of power that the electronic component draws causes the switched mode power supply to output a signal that is evidence of the event.