{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,27]],"date-time":"2026-10-27T18:59:03Z","timestamp":1793127543696,"version":"4.5.0"},"reference-count":129,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/100006785","name":"Google","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100006785","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/sp46214.2022.9833767","type":"proceedings-article","created":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T15:28:05Z","timestamp":1658935685000},"page":"1193-1210","source":"Crossref","is-referenced-by-count":18,"title":["Noise-SDR: Arbitrary Modulation of Electromagnetic Noise from Unprivileged Software and Its Impact on Emission Security"],"prefix":"10.1109","author":[{"given":"Giovanni","family":"Camurati","sequence":"first","affiliation":[{"name":"EURECOM,Software and System Security Group,Sophia-Antipolis,France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aur\u00e9lien","family":"Francillon","sequence":"additional","affiliation":[{"name":"EURECOM,Software and System Security Group,Sophia-Antipolis,France"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref57","article-title":"AndFlmsg","author":"freese","year":"0"},{"key":"ref56","article-title":"FLDigi","author":"freese","year":"0"},{"key":"ref59","article-title":"RTTY50","year":"0"},{"key":"ref58","article-title":"Morse Code (CW)","year":"0"},{"key":"ref53","first-page":"549","article-title":"ARMageddon: Cache attacks on mobile devices","author":"lipp","year":"2016","journal-title":"25th USENIX Security Symposium"},{"key":"ref52","first-page":"247","article-title":"Fantastic timers and where to find them: High-resolution microarchitectural attacks in javascript","volume":"10322","author":"schwarz","year":"2017","journal-title":"Financial Cryptography and Data Security - 21st International Conference FC 2017"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00022"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23271"},{"key":"ref51","first-page":"463","article-title":"Trusted browsers for uncertain times","author":"kohlbrenner","year":"2016","journal-title":"25th USENIX Security Symposium USENIX Security 16"},{"key":"ref50","first-page":"1","article-title":"Side-channel propagation measurements and modeling for hardware security in iot devices","author":"sangodoyin","year":"2020","journal-title":"IEEE Transactions on Antennas and Propagation"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2014.39"},{"key":"ref45","article-title":"Tempest for Eliza","author":"thiele","year":"2001"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2749469.2750394"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TEMC.2014.2300139"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243802"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.23919\/URSIAP-RASC.2019.8738370"},{"key":"ref44","article-title":"System bus radio","author":"entriken","year":"2013"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2020.i3.358-401"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TEMC.2016.2603847"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00031"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/HOST45689.2020.9300268"},{"key":"ref9","article-title":"AIR-FI: Generating covert wi-fi signals from air-gapped computers","volume":"abs 2012 6884","author":"guri","year":"2020","journal-title":"CoRR"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2870641"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2014.6999418"},{"key":"ref6","first-page":"849","article-title":"GSMem: Data exfiltration from air-gapped computers over GSM frequencies","author":"guri","year":"2015","journal-title":"24th USENIX Security Symposium USENIX Security 15"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2016.7906972"},{"key":"ref100","article-title":"Nethammer: Inducing rowhammer faults through network requests","volume":"abs 1805 4956","author":"lipp","year":"2018","journal-title":"CoRR"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/TCSI.2020.2978402"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/EMCEurope.2018.8485134"},{"key":"ref35","article-title":"Universal radio hacker: A suite for analyzing and attacking stateful wireless protocols","author":"pohl","year":"2018","journal-title":"12th USENIX Workshop on Offensive Technologies WOOT 2018"},{"key":"ref34","article-title":"SDRF Cognitive Radio Definitions Working Document SDRF-06-R-0011-V1.0.0","author":"forum","year":"2007"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/SPAWC48557.2020.9154273"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/APCC.2016.7581461"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ESSCIRC.2015.7313835"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-03925-1"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/NORCHIP.2018.8573465"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2009.2020205"},{"key":"ref39","article-title":"Platform interference in wireless systems: Models, measurement, and mitigation","author":"slattery","year":"2011"},{"key":"ref38","article-title":"Wireless LAN Radios: System Definition to Transistor Design (IEEE Press Series on Microelectronic Systems)","author":"behzad","year":"2008"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_6"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/DESEC.2018.8625124"},{"key":"ref26","article-title":"Fansmitter: Acoustic data exfiltration from (speakerless) air-gapped computers","volume":"abs 1606 5915","author":"guri","year":"2016","journal-title":"CoRR"},{"key":"ref25","first-page":"3","article-title":"On acoustic covert channels between air-gapped systems","volume":"8930","author":"carrara","year":"2014","journal-title":"Foundations and Practice of Security - 7th International Symposium FPS 2014"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484373"},{"key":"ref22","article-title":"AiR-ViBeR: Exfiltrating data from air-gapped computers via covert surface vibrations","volume":"abs 2004 6195","author":"guri","year":"2020","journal-title":"CoRR"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2013.6654855"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2015.26"},{"key":"ref27","first-page":"516","article-title":"POWER-SUPPLaY: Leaking data from air-gapped systems by turning the power-supplies into speakers","volume":"2020","author":"guri","year":"2020","journal-title":"IACR Cryptol ePrint Arch"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TCOM.1973.1091763"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2952257"},{"key":"ref12","first-page":"525","article-title":"Covert channels using mobile device’s magnetic field sensors","author":"matyunin","year":"2016","journal-title":"2016 21st Asia and South Pacific Design Automation Conference (ASP-DAC) ASP-DAC"},{"key":"ref15","first-page":"264","article-title":"Exfiltration of information from air-gapped machines using monitor’s LED indicator","author":"sepetnitsky","year":"2014","journal-title":"IEEE Joint Intelligence and Security Informatics Conference"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2020.107751"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3393691.3394178"},{"key":"ref129","first-page":"873","article-title":"Earfisher: Detecting wireless eavesdroppers by stimulating and sensing memory EMR","author":"shen","year":"2021","journal-title":"18th USENIX Symposium on Networked Systems Design and Implementation NSDI 2021"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23094"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/ECTC.2016.68"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133996"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382245"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2938404"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-40667-1_15"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.5772\/36152"},{"key":"ref10","article-title":"MAGNETO: Covert channel between air-gapped systems and nearby smartphones via cpu-generated magnetic fields","volume":"abs 1802 2317","author":"guri","year":"2018","journal-title":"CoRR"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1145\/2872362.2872390"},{"key":"ref125","doi-asserted-by":"crossref","first-page":"1","DOI":"10.23972\/det2017iss14pp1-10","article-title":"RFI and receiver sensitivity analysis in mobile electronic devices","volume":"7","author":"scogna","year":"2017","journal-title":"DesignCon"},{"key":"ref17","first-page":"161","article-title":"LED-it-GO: Leaking (A lot of) data from air-gapped computers via the (small) hard drive LED","volume":"10327","author":"guri","year":"2017","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment - 14th International Conference DIMVA 2017 Bonn Germany July 6-7 2017 Proceedings ser Lecture Notes in Computer Science"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/545186.545189"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.11.004"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2018.8514196"},{"key":"ref93","article-title":"RTL-SDR","year":"0"},{"key":"ref92","article-title":"TYT MD-UV 380","year":"0"},{"key":"ref95","article-title":"DTMF","year":"0"},{"key":"ref94","article-title":"RFAnalyzer","author":"mantz","year":"2014"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.67"},{"key":"ref90","article-title":"Technical aspects of RS ID and Call ID and use","author":"lindecker","year":"2010"},{"key":"ref89","article-title":"DominoEX","year":"0"},{"key":"ref86","article-title":"TBWA2","year":"0"},{"key":"ref85","article-title":"NAE-HPROBE-15","author":"inc","year":"0"},{"key":"ref88","article-title":"Wireless Communications","author":"molisch","year":"2011"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/ICECS.2018.8617880"},{"key":"ref82","article-title":"USRP B210","author":"research","year":"0"},{"key":"ref81","article-title":"The physical layer of low power wide area networks: Strategies, information theory’s limit and existing solutions","volume":"1","author":"roth","year":"2018","journal-title":"Advances in Signal Processing Reviews"},{"key":"ref84","article-title":"gnss-sdr","year":"0"},{"key":"ref83","article-title":"Gqrx SDR","author":"csete","year":"0"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1948.tb00917.x"},{"key":"ref79","article-title":"Screen gleaning: A screen reading TEMPEST attack on mobile devices exploiting an electromagnetic side channel","volume":"abs 2011 9877","author":"liu","year":"2020","journal-title":"CoRR"},{"key":"ref108","article-title":"Esp8266 analog broadcast television interface","year":"2016"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660292"},{"key":"ref109","article-title":"Experimental software-defined radio using a serial port","author":"yapo","year":"2018"},{"key":"ref106","article-title":"FM transmitter RPi3","year":"0"},{"key":"ref107","article-title":"Rasberry pirate radio FM transmitter","year":"0"},{"key":"ref75","article-title":"SSTV","year":"0"},{"key":"ref104","article-title":"Funtenna","author":"cui","year":"2015"},{"key":"ref74","article-title":"HamDRM","year":"0"},{"key":"ref105","article-title":"Turning the Raspberry Pi into an FM transmitter","author":"mattos","year":"0"},{"key":"ref77","article-title":"NBFM","year":"0"},{"key":"ref102","article-title":"RTL-SDR","year":"0"},{"key":"ref76","article-title":"AM","year":"0"},{"key":"ref103","article-title":"RTL TRX","year":"0"},{"key":"ref2","article-title":"Soft Tempest - an opportunity for NATO","author":"anderson","year":"1999"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-49380-8_10"},{"key":"ref71","article-title":"GNU Radio Android Toolchain","author":"bloessl","year":"0"},{"key":"ref111","article-title":"Ridiculous radios","author":"spill","year":"2018"},{"key":"ref70","article-title":"WSPR instructions","author":"taylor","year":"0"},{"key":"ref112","article-title":"Etherify - bringing the ether back to ethernet","author":"lipkowski","year":"2020"},{"key":"ref73","article-title":"GLONASS interface control document","author":"center","year":"1998"},{"key":"ref72","article-title":"FT4","author":"taylor","year":"0"},{"key":"ref110","article-title":"PAL-Streamer","author":"seet","year":"2020"},{"key":"ref68","article-title":"GNU Radio","year":"0"},{"key":"ref119","article-title":"Nexmon: The C-based firmware patching framework","author":"schulz","year":"2017"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3266444.3266454"},{"key":"ref117","article-title":"PiccoloSDR (WIP)","author":"cruz","year":"2021"},{"key":"ref69","article-title":"Qsstv","year":"0"},{"key":"ref118","article-title":"One-bit BT","author":"newhouse","year":"2021"},{"key":"ref64","article-title":"FLDigi Modes","author":"freese","year":"0"},{"key":"ref115","article-title":"VGAtoIQBaseband","author":"rudolph","year":"2013"},{"key":"ref63","article-title":"OLIVIA","year":"0"},{"key":"ref116","article-title":"Osmo-fl2k for using USB 3.0 VGA adapters as SDR transmitters","author":"markgraf","year":"2018"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978406"},{"key":"ref113","article-title":"Analog and digital TV (DVB-T) signal generation","author":"bellard","year":"2005"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00060"},{"key":"ref114","article-title":"VGASIGFM radio transmitter using a VGA graphics card","author":"kania","year":"2009"},{"key":"ref60","article-title":"MFSK","year":"0"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/3098243.3098253"},{"key":"ref123","first-page":"350","article-title":"The analysis of EMI noise coupling mechanism for GPS reception performance degradation from SSD\/USB module","author":"lin","year":"2014","journal-title":"2014 International Symposium on Electromagnetic Compatibility"},{"key":"ref62","article-title":"THOR","year":"0"},{"key":"ref120","article-title":"Teaching your wireless card new tricks: Smartphone performance and security enhancements through wi-fi firmware modifications","author":"schulz","year":"2018"},{"key":"ref61","article-title":"PSK","year":"0"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1145\/3210240.3210333"}],"event":{"name":"2022 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2022,5,22]]},"end":{"date-parts":[[2022,5,26]]}},"container-title":["2022 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9833550\/9833558\/09833767.pdf?arnumber=9833767","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T18:24:30Z","timestamp":1699467870000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833767\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":129,"URL":"https:\/\/doi.org\/10.1109\/sp46214.2022.9833767","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}