~/talk

TimeTravel: Real-time Timing Drift Attack on System Time Using Acoustic Waves

on YouTube 16m
Talkat USENIX Security '25 · 2025-08-13..08-15· [security, embedded-and-hardware]

speakers

name:Jianshuo Liu
links:none on file
name:Hong Li
links:none on file
name:Haining Wang
links:none on file
name:Mengjie Sun
links:none on file
name:Hui Wen
links:none on file
name:Jinfa Wang
links:none on file
name:Limin Sun
links:none on file

resources

video:https://youtu.be/PXehr5Yf2DA
slides:none on file

summary

Shows a practical attack that uses a ceramic transducer to launch guided acoustic waves through solids to a 32.768 kHz RTC crystal, injecting phase bursts timed from an H-field probe to shift edge triggers and accelerate or decelerate system time. Offline calibration builds material-specific burst params; experiments repeat 100 trials per setting and achieve up to 93% accuracy and maintain ≥77–78% success with typical obstacles, with effective sensing and coupling within about 5 cm.

AI-written summary · about

chapters (6)

  1. 0:00Timing drift via acoustic waves
  2. 3:24Crystal oscillators and real-time clocks
  3. 7:23Acoustic resonance and timing shifts
  4. 10:38Attack method and parameters
  5. 13:27Experimental validation
  6. 15:32Defense strategies

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.