3 ms·
What are the most effective and sneaky backdoor mechanisms you know? I'll be forced to implement a one myself so it better be good.
by daGrevis 13y ago
What are the most effective and sneaky backdoor mechanisms you know? I'll be forced to implement a one myself so it better be good.
- EthanHeilman 13y agoBackdooring Chips by Altering Silicon Doping http://sharps.org/wp-content/uploads/BECKER-CHES.pdf http://sharps.org/wp-content/uploads/BECKER-CHES.pdf
- shabble 13y agoI came across a paper on the first GPU keylogger[1] recently, which is quite clever, but maybe not sneaky enough. Sneaky-wise, hypervisor/system management processor/other embedded stuff (SMBus, BIOS/EFI, etc) are persistent, and really quite tricky to be sure you're rid of. Disk controllers, and especially network controllers could be very effective since there are a vast number of ways of getting something down a network/into a file remotely. Sneaky exfiltration/comms could include some of the EMI TEMPEST-style attacks if you can get close enough. For bonus points, if you can get line-of-sight, optical TEMPEST[2] using status LEDs is just about plausible. [1] http://www.cs.columbia.edu/~mikepo/papers/gpukeylogger.eurosec13.pdf http://www.cs.columbia.edu/~mikepo/papers/gpukeylogger.euros... [2] http://rootsecure.net/content/downloads/pdf/optical_tempest_optical.pdf http://rootsecure.net/content/downloads/pdf/optical_tempest_...