Protection of automated workstations against information leakage through compromising electromagnetic emissions and conducted signals: contradictions and modern approaches
DOI:
https://doi.org/10.34169/2414-0651.2025.4(48).81-89Keywords:
information security, compromising electromagnetic emissions (CEME), TEMPEST, unintentional emissions, information leakage channels, security profile, differentiated protection, information protection standardsAbstract
The article addresses the challenges of protecting automated workstations (AWS) against information leakage through compromising electromagnetic emissions (CEME). A comparative review of key international standards in this field (United States, Germany, russia, China) is presented. Particular attention is paid to a fundamental contradiction: despite significant state expenditures on the protection of AWS from information leakage via CEME channels, there is no publicly available data on modern technical intelligence systems exploiting CEME channels, nor confirmed experiments on intercepting information through this channel at distances greater than ten meters. The physical principles of electromagnetic wave propagation and the factors limiting the interception range of information signals are examined. Current research on near-field CEME registration, patents and the market for secure AWS are analyzed. The necessity of Ukraine’s transition from the paradigm of total protection to a differentiated, risk-oriented approach based on security profiles is substantiated, especially under wartime conditions. Priority directions of work in this area are proposed, which, if successfully implemented, will minimize state expenditures and provide optimal solutions for organizing the protection of AWS.
Downloads
References
National Security Telecommunications and Information Systems Security Advisory Memorandum (NSTISSAM) TEMPEST/1-92. Website: https://fas.org/irp/nsa/rainbow/nstissam_1-92.htm.
Bundesamt für Sicherheit in der Informationstechnik (BSI). Zonen-Modell. Website: https://www.bsi.bund.de/DE/Themen/Oeffentliche-Verwaltung/VS-Informationen-und-Geheimschutz/Abstrahlsicherheit-TEMPEST/Zonen-Modell/zonen-modell_node.html.
Van Eck, W. (1985). Electromagnetic Radiation from Video Display Units: An Eavesdropping Risk. Computers & Security. № 4(4). Рр. 269—286. Website: https://www.researchgate.net/publication/222442438_Electromagnetic_radiation_from_video_display_units_An_eavesdropping_risk. DOI: https://doi.org/10.1016/0167-4048(85)90046-X
Friis, H.T. (1946). A Note on a Simple Transmission Formula. Proc. of the IRE. № 34(5). Рр. 254—256. Website: https://ieeexplore.ieee.org/document/1697282. DOI: https://doi.org/10.1109/JRPROC.1946.234568
Kuhn, M.G. & Anderson, R.J. (1998). Soft Tempest: Hidden Data Transmission Using Electromagnetic Emanations. In Information Hiding. Second Intern. Workshop. IH'98. Springer-Verlag. Website: https://www.cl.cam.ac.uk/~mgk25/ih98-tempest.pdf. DOI: https://doi.org/10.1007/3-540-49380-8_10
Genkin, D., Shamir, A., & Tromer, E. (2014). RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis. In Advances in Cryptology – CRYPTO 2014. Website: https://www.cs.tau.ac.il/~tromer/acoustic/. DOI: https://doi.org/10.1007/978-3-662-44371-2_25
Website: https://youtu.be/Z_VmQXZP9Vw?feature=shared.
Website: https://www.youtube.com/watch?v=QjqpKtGNbQo&t=365s.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 Олександр Ковалько,Олег Костина,Людмила Оникієнко,Сергій Ступак

This work is licensed under a Creative Commons Attribution 4.0 International License.