Authors:
Wojciech Wodo
and
Lucjan Hanzlik
Affiliation:
Wroclaw Univeristy of Technology, Poland
Keyword(s):
Thermal Imaging Cameras, Thermal Imaging Attacks, Cash Machine, Cipher, Terminal, Keys, Access Code, PIN Number, Side Channel.
Related
Ontology
Subjects/Areas/Topics:
Data and Application Security and Privacy
;
Information and Systems Security
;
Insider Threats and Countermeasures
;
Intrusion Detection & Prevention
;
Security and Privacy in Pervasive/Ubiquitous Computing
;
Security Engineering
;
Security in Information Systems
Abstract:
The paper discusses the issue of thermal imaging attacks on a variety of keyboard devices, such as cash machines, payment terminals, combination locks or computer keyboards. The aim of the research was to obtain the entered code or password in the most non-invasive way. As it turned out, attacks based on images from thermal imaging cameras are very easy to carry out and work in almost every case, which calls for extra safety measures. The authors consider various attack scenarios and come up with recommendations for both manufacturers and users of electronic keyboard security systems.