出版社:Academy & Industry Research Collaboration Center (AIRCC)
摘要:Single-Board Computers (SBC) refer to pocket-sized computers built on a single circuit board. Anumber of studies have explored the use of these highly popular devices in a variety of domains,including military, agriculture, healthcare, and more. However, no attempt was made to signifypossible security risks that misuse of these devices may bring to organizations. In this study, weperform a series of experiments to validate the possibility of using SBCs as an espionage gadget.We show how an attacker can turn a Raspberry Pi device to an attacking gadget and benefit fromshort-term physical access to attach the gadget to the network in order to access unauthorizeddata or perform other malicious activities. We then provide experimental results of placing suchtools in two real-world networks. Given the small size of SBCs, traditional physical securitymeasures deployed in organizations may not be sufficient to detect and restrict the entrance ofSBCs to their premises. Therefore, we reiterate possible directions for network administrators todeploy defensive mechanisms for detecting and preventing such attacks.