What are Acoustic Side Channel Attacks and how is AI used to increase its accuracy?

Source: The post is based on the article “What are Acoustic Side Channel Attacks and how is AI used to increase its accuracy?”  published in The Hindu on 21st August 2023.

What is the News?

A research paper titled “A Practical Deep Learning-Based Acoustic Side Channel Attack on Keyboards” has shown how accurate Acoustic Side Channel Attacks (ASCA) can be when advanced deep learning models are used to recognize laptop keystrokes.

What are Side Channel Attacks(SCA’s)?

Side Channel Attacks(SCAs) are a method of hacking a cryptographic algorithm based on the analysis of auxiliary systems used in the encryption method.

These can be performed using a collection of signals emitted by devices including electromagnetic waves, power consumption, mobile sensors as well as sound from keyboards and printers to target devices. 

Once collected, these signals are used to interpret signals that can be then used to compromise the security of a device.

What are Acoustic Side Channel Attacks(ASCA)?

Acoustic Side Channel Attacks(ASCA) uses the sound of clicks generated by a keyboard to analyze keystrokes and interpret what is being typed to leak sensitive information. 

These attacks are particularly dangerous as the acoustic sounds from a keyboard are not only readily available but also because their misuse is underestimated by users.

The use of laptops has increased the scope of ASCAs as laptop models have the same keyboard making it easier for AI-enabled deep learning models to pick up and interpret the acoustics.

What does the study say about Acoustic Side Channel Attacks(ASCA)?

The study has found that the advancement of AI and deep learning has heightened the risks associated with ASCAs.

For instance, it found that when the AI model was made to recognise keystrokes using audio captured through a smartphone microphone, it was able to achieve 95% accuracy.

The study emphasizes that users can adopt defence strategies such as altering typing techniques, using touch-based typing, employing stronger passwords with varied cases and avoiding easily predictable phrases to mitigate the threat of ASCAs.