Keyboard Compromission Through Electromagnetic

**Keyboard Compromission Through Electromagnetic Attacks using Wavefront Shaping**:

- Réf **ABG-123853**
- Sujet de Thèse- 14/05/2024- Contrat doctoral- Université de Rennes- Lieu de travail- Rennes - Bretagne - France- Intitulé du sujet- Keyboard Compromission Through Electromagnetic Attacks using Wavefront Shaping- Champs scientifiques- Electronique
- Sciences de l’ingénieur
- Télécommunications
- Mots clés- Electromagnetic cybersecurity, Optimal coupling, Guided wave propagation, Keyboard compromission**Description du sujet**:
**Supervision**
- François Sarrazin: Junior Professor Chair at Université de Rennes- Philippe Besnier: Research Director at CNRS**Keywords**: Electromagnetic compatibility/cybersecurity, Wave control, Fault-injection**PhD Context**:Electromagnetic cybersecurity relates to the use of electromagnetic waves to compromise data. Keyboards are critical targets because they are widely used as a computer peripheral and keystroke retrieval may lead to sensitive information recovery. Various attacks have been proposed to remotely retrieve keystrokes by listening to electromagnetic emanations either in a passive [Vua09] or active [Kaj23] manner using backscattering measurement. However, the feasibility of denial-of-service attacks on computer keyboard remains an open challenge.**PhD Objectives and Work Plan**:This PhD aims at developing beyond-state-of-the-art electromagnetic attacks to compromise keyboard availability (denial of service) and integrity (fault injection). To that end, we will take benefit of wavefront shaping techniques in a guided propagation medium such as power or communication cables, in order to enable non-line-of-sight attacks at an extended range. The thesis is organized as follows:
- Electromagnetic compatibility study of keyboards for both immunity and susceptibility
- Development of denialof-service and fault-injection attacks
- Attack range extension using spatial diversity [Yeo21]
- Proposals for countermeasures**Applicant Profile**
- Education level_: Master or equivalent degree- Background_: electrical engineering, physics, or hardware cybersecurity- Language_: French is not required**Practical Details and Application**
- Application deadline: May 31_st_ 2024_
- Starting date_: Around October 2024 for 36 months- How to apply_**:send a resume, cover letter and last academic transcripts**

**Bibliography**
- [Vua09] M. Vuagnoux and S. Pasini, “_Compromising Electromagnetic Emanations of Wired and Wireless Keyboards_,” **Conference on USENIX Security Symposium**, Berkeley, CA, USA, pp. 1-16, 2009.- [Kaj23] S. Kaji, D. Fujimoto, M. Kinugawa and Y. Hayashi, "Echo TEMPEST: EM Information Leakage Induced by IEMI for Electronic Devices," **IEEE Transactions on Electromagnetic Compatibility**, vol. 65, no. 3, pp. 655-666, June 2023, doi: 10.1109/TEMC.2023.3252636.- [Yeo21] K. B. Yeo, M. Davy and P. Besnier, “_Non-invasive Optimal Coupling Upon Detection of a Local Change of Impedance in a Cable Network_,” **2021 IEEE International Joint EMC/SI/PI and EMC Europe Symposium**, Raleigh, NC, USA, 2021, pp. 528-532, doi: 10.1109/EMC/SI/PI/EMCEurope52599.2021.9559312.**Prise de fonction**:

- 01/10/2024**Nature du financement**:

- Contrat doctoral**Précisions sur le financement**:

- 1700€ net pr month**Présentation établissement et labo d'accueil**:

- Université de Rennes**Site web**:
**Etablissement délivrant le doctorat**:

- Université de Rennes- Education level_: Master of equivalent degree in electrical engineering or physics- Background_: wave physics, electromagnetic compatibility, signal processing- Language_: French is not required-
- 31/05/2024