Acoustic Damage to Hard Disk Drives
The use of sonic and ultrasonic sound waves as a strategic weapon is nothing new however recent applications have shown that they can be used to disrupt the operation hard disk drives (HDD) used in Computers, Computer Networks , Laptops, CCTV , ATM and the like. Researchers said the attack can be performed by integral or proximity sound emitters such as a laptops installed speakers.
Adversaries without special-purpose equipment can cause errors in the hard disk drive using either audible or ultrasonic acoustic waves. Audible waves vibrate the read/write head and platters; ultrasonic waves alter the output of the HDD’s shock sensor, intentionally causing the head to park, Both of these types of errors can lead to operating system-level or application-level problems, including persistent corruption and system reboots.
The experiments show that audible sound causes the head stack assembly to vibrate outside of operational design limits ; ultrasonic sound causes false positives in the shock sensor, which is designed to prevent a head crash.
In one attack scenario against a PC with a Western Digital Blue WD5000LPVX drive, researchers exposed the drive to vibrations induced by a 5 kHz tone at 115.3 dB SPL and a 5 kHz tone at 117.2 dB SPL. Those noise levels are roughly equivalent to sound of a car horn, live rock music or chainsaw, according to a comparison.
Prolonged exposure to those levels can cause “permanent data loss, program crashes and unrecoverable physical loss in HDDs.”
Tests were conducted on three different HDD manufacturers: Western Digital, Toshiba and Seagate. Attack scenarios also involved vibrations created by ultrasonic tones, which is sound that is created at a frequency higher than can be heard by humans (20 kHz and up).
“Ultrasonic attacks are less likely to cause a head crash, but could be damaging the drive in other ways such as causing the head to become unstable over time because of excessive parking,” researchers said.
In tests using a Toshiba HDD exposed to ultrasonic signals, researchers said they were able to make the HDD’s read/write head park in rapid succession on the hard disk platter, “possibly causing damage to the head controller.”
They added, “This instability could make the drive less reliable in its reads and writes, leading to sectors being marked as bad.”
A third type of attack targeted a HP Elite Minitower desktop PC equipped with an internal HP DC7600U speaker. Using the system’s own speaker, the proof of concept was able to cause intermittent freezing of the system running a Western Digital Blue WD5000LPVX HHD.
“For self-stimulation attacks, the victim accesses the adversary’s website — perhaps through a phishing attack or a link within a malicious email,” researchers wrote. “The site then plays malicious audio without permission over the system’s built-in speaker to attack the HDD. The frequency response of a built-in speaker may limit the ability for an adversary to deliver ultrasonic attacks, but some speakers may be able to deliver ultrasonic or near ultrasonic tones.”
The answer to why sound vibrations cause system interruptions and crashes varies. In one case, researchers analyzed the Windows 10 system crash dump files of a targeted computer. They were able to establish that the hardware driver called “miniport” was returning a device error that the OS could not handle properly.
“The operating system does not seem to handle this error correctly, leading to UNEXPECTED_STORE_EXCEPTION. This indicates that the memory manager required data from the disk, but was unable to write into memory because of an in-page I/O error,” researchers said.
Disproportionately vulnerable to these type attacks, say researchers, are older systems that still rely on legacy magnetic HHD technology. This is typically found in medical devices and other systems that are difficult to retire, such as CCTV surveillance camera storage, according to the paper.
One ingenious attack scenario demonstrated by the researchers saw them target a digital video security camera.
The surveillance camera contained a DVR that stored footage on a hard disk drive. However, when hit by an acoustic attack the system could no longer write any data to its hard disk drive. The camera continued to try to save video data in its RAM, but within about 12 seconds it ran out of available space, and lost all data until the acoustic attack was stopped.
It’s easy to picture how a criminal could use such a technique to avoid being recorded on security cameras.
The researchers from the University of Michigan and Zhejian University in China. presented their research last week in San Francisco at the IEEE Symposium on Security and Privacy.
Find out more:- about Datlabs Data Recovery from Damaged Hard Disk Drives.