新研究展示RAMBO攻击：利用内存总线无线电泄露隔离计算机机密

研究人员提出了一种名为“RAMBO”的新型攻击手段，旨在突破物理隔离（Air-Gap）计算机的安全防护。 1 该攻击的核心原理是利用恶意软件操控计算机内存总线（RAM），通过生成隐蔽的无线电信号来编码并传输敏感数据，如文件和密钥。 1 这项研究成果已于2024年9月3日提交发表，归属于计算机科学领域的密码学与安全技术方向。 1

在接收端，攻击者仅需使用软件定义无线电（SDR）硬件配合现成天线，即可在远处拦截并解码这些由内存产生的信号。 1 实验数据显示，这种基于硬件侧信道的数据传输速率可达每秒1000比特。 1 尽管存在安全威胁，该研究团队同时也提出了相应的缓解措施，以应对此类通过RAM产生无线电信号的潜在攻击。 1

Researchers have introduced a new attack method named RAMBO (Leaking Secrets from Air-Gap Computers by Spelling Covert Radio Signals from Computer RAM) that enables the exfiltration of sensitive data from physically isolated systems 1. Submitted on September 3, 2024, this technique involves malware generating covert radio signals directly through the computer’s memory bus, or RAM, to encode confidential information such as files and cryptographic keys 1. The study categorizes this work under Computer Science, specifically within the domain of Cryptography and Security 1.

The intercepted signals can be received and decoded at a distance using standard off-the-shelf antennas paired with software-defined radio (SDR) hardware 1. According to the findings, the RAMBO attack achieves a data transmission rate of 1,000 bits per second 1. While the summary indicates that corresponding mitigation strategies were proposed, specific details of these countermeasures are not elaborated in the provided fact package 1.