File:A Wolf in Sheep’s Clothing - Spreading Deadly Pathogens Under the Disguise of Popular Music.pdf
Size of this JPG preview of this PDF file: 463 × 599 pixels. Other resolutions: 185 × 240 pixels | 371 × 480 pixels | 593 × 768 pixels | 1,275 × 1,650 pixels.
Original file (1,275 × 1,650 pixels, file size: 2.17 MB, MIME type: application/pdf, 15 pages)
File information
Structured data
Captions
Summary
editDescriptionA Wolf in Sheep’s Clothing - Spreading Deadly Pathogens Under the Disguise of Popular Music.pdf |
English: A Negative Pressure Room (NPR) is an essential requirement by the Bio-Safety Levels (BSLs) in biolabs or infectious-control hospitals to prevent deadly pathogens from being leaked from the facility. An NPR maintains a negative pressure inside with respect to the outside reference space so that microbes are contained inside of an NPR. Nowadays, differential pressure sensors (DPSs) are utilized by the Building Management Systems (BMSs) to control and monitor the negative pressure in an NPR. This paper demonstrates a non-invasive and stealthy attack on NPRs by spoofing a DPS at its resonant frequency. Our contributions are: (1) We show that DPSs used in NPRs typically have resonant frequencies in the audible range. (2) We use this finding to design malicious music to create resonance in DPSs, resulting in an overshooting in the DPS's normal pressure readings. (3) We show how the resonance in DPSs can fool the BMSs so that the NPR turns its negative pressure to a positive one, causing a potential leak of deadly microbes from NPRs. We do experiments on 8 DPSs from 5 different manufacturers to evaluate their resonant frequencies considering the sampling tube length and find resonance in 6 DPSs. We can achieve a 2.5 Pa change in negative pressure from a ~7 cm distance when a sampling tube is not present and from a ~2.5 cm distance for a 1 m sampling tube length. We also introduce an interval-time variation approach for an adversarial control over the negative pressure and show that the forged pressure can be varied within 12 - 33 Pa. Our attack is also capable of attacking multiple NPRs simultaneously. Moreover, we demonstrate our attack at a real-world NPR located in an anonymous bioresearch facility, which is FDA approved and follows CDC guidelines. We also provide countermeasures to prevent the attack. |
Date | |
Source | https://dl.acm.org/doi/10.1145/3548606.3560643 |
Author | Anomadarshi Barua, Yonatan Gizachew Achamyeleh, and Mohammad Abdullah Al Faruque |
Licensing
editThis file is licensed under the Creative Commons Attribution 4.0 International license.
- You are free:
- to share – to copy, distribute and transmit the work
- to remix – to adapt the work
- Under the following conditions:
- attribution – You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
File history
Click on a date/time to view the file as it appeared at that time.
Date/Time | Thumbnail | Dimensions | User | Comment | |
---|---|---|---|---|---|
current | 16:22, 25 November 2022 | 1,275 × 1,650, 15 pages (2.17 MB) | Koavf (talk | contribs) | Uploaded a work by Anomadarshi Barua, Yonatan Gizachew Achamyeleh, and Mohammad Abdullah Al Faruque from https://dl.acm.org/doi/10.1145/3548606.3560643 with UploadWizard |
You cannot overwrite this file.
File usage on Commons
The following page uses this file:
Metadata
This file contains additional information such as Exif metadata which may have been added by the digital camera, scanner, or software program used to create or digitize it. If the file has been modified from its original state, some details such as the timestamp may not fully reflect those of the original file. The timestamp is only as accurate as the clock in the camera, and it may be completely wrong.
Short title |
|
---|---|
Image title |
|
File change date and time | 00:19, 25 November 2022 |
Date and time of digitizing | 04:55, 7 September 2022 |
Software used | LaTeX with acmart 2022/04/09 v1.84 Typesetting articles for the Association for Computing Machinery and hyperref 2022-06-13 v7.00r Hypertext links for LaTeX |
Date metadata was last modified | 00:19, 25 November 2022 |
Conversion program | GPL Ghostscript 9.55.0; modified using iText 4.2.0 by 1T3XT |
Encrypted | no |
Page size | 612 x 792 pts (letter) |
Version of PDF format | 1.4 |