Hacking 3-D Printers via Waves
Friday, September 9, 2016 @ 03:09 PM gHale
Smartphones and the intense technology behind them the perfect tool to steal sensitive data from 3-D printers.
That is the conclusion of a new study that looks at security vulnerabilities of 3-D printing, also called additive manufacturing, which could become a multibillion-dollar industry employed to build everything from rocket engines to heart valves, said researchers at the University at Buffalo (UB).
“Many companies are betting on 3-D printing to revolutionize their businesses, but there are still security unknowns associated with these machines that leave intellectual property vulnerable,” said Wenyao Xu, PhD, assistant professor in UB’s Department of Computer Science and Engineering, and the study’s lead author.
Unlike most security hacks, the researchers did not simulate a cyberattack. Many 3-D printers have features, such as encryption and watermarks, designed to foil such incursions.
Instead, the researchers programmed a common smartphone’s built-in sensors to measure electromagnetic energy and acoustic waves that emanate from 3-D printers. These sensors can infer the location of the print nozzle as it moves to create the three-dimensional object printed.
The smartphone, at 20 centimeters away from the printer, gathered enough data to enable the researchers to replicate printing a simple object, such as a door stop, with a 94 percent accuracy rate. For complex objects, such as an automotive part or medical device, the accuracy rate was lower but still above 90 percent.
“The tests show that smartphones are quite capable of retrieving enough data to put sensitive information at risk,” said Kui Ren, PhD, professor in UB’s Department of Computer Science and Engineering, a co-author of the study.
The richest source of information came from electromagnetic waves, which accounted for about 80 percent of the useful data. The remaining data came from acoustic waves.
Ultimately, the results are eye-opening because they show how anyone with a smartphone — from a disgruntled employee to an industrial spy — might steal intellectual property from an unsuspecting business, especially “mission critical” industries where one breakdown of a system can have a serious impact on the entire organization.
“Smartphones are so common that industries may let their guard down, thus creating a situation where intellectual property is ripe for theft,” said Chi Zhou, PhD, assistant professor in UB’s Department of Industrial and Systems Engineering, another study co-author.
The researchers suggest several ways to make 3-D printing more secure. Perhaps the simplest deterrent from such an attack is distance. The ability to obtain accurate data for simple objects diminished to 87 percent at 30 centimeters, and 66 percent at 40 centimeters, according to the study.
Another option is to increase the print speed. The researchers said emerging materials may allow 3-D printers to work faster, thus making it more difficult for smartphone sensors to determine the print nozzle’s movement.
Other ideas include software-based solutions, such as programming the printer to operate at different speeds, and hardware-based ideas, such as acoustic and electromagnetic shields.