Return to search

Physical Layer Detection of Hardware Keyloggers

This work addresses the problem of detecting devices which are stealthily attached to the computer for logging keystrokes from keyboards. These devices are known as hardware keyloggers (HKL). When an HKL is attached to the keyboard, certain electrical characteristics of the keyboard signal are altered. Based on these characteristics (features), differences have been identified in an accurate assertion was made about the presence of HKL.
The characteristics from which the differences were obtained were used to make distributions and compared with distance-measuring methods. An experiment was done to collect data from a number of keyboards and form two distributions (training and test) to perform the comparison. It was possible to detect the presence of HKL in the keyboard with a minimum of 4 to 100 keystrokes.
For justifying the stability of the features, the temperature of the surroundings was obtained and the dependence of the features on temperature was obtained. Also, an experiment was done to see whether the keyboards were uniquely affected by the HKLs. This was done without using any training data, i.e., the distribution of features which was used did not come from a known state of the system (either with HKL or not with HKL).

Identiferoai:union.ndltd.org:UTAHS/oai:digitalcommons.usu.edu:etd-4985
Date01 May 2014
CreatorsMallick, Saptarshi
PublisherDigitalCommons@USU
Source SetsUtah State University
Detected LanguageEnglish
Typetext
Formatapplication/pdf
SourceAll Graduate Theses and Dissertations
RightsCopyright for this work is held by the author. Transmission or reproduction of materials protected by copyright beyond that allowed by fair use requires the written permission of the copyright owners. Works not in the public domain cannot be commercially exploited without permission of the copyright owner. Responsibility for any use rests exclusively with the user. For more information contact Andrew Wesolek (andrew.wesolek@usu.edu).

Page generated in 0.0017 seconds