LED there be DoS: Exploiting variable bitrate IP cameras for network DoS

TL;DR

This paper demonstrates a novel physical attack on variable-bitrate IP cameras using laser light to induce traffic spikes, causing network disruption without digital intrusion.

Contribution

It introduces a new cyber-physical attack method exploiting physical environment to manipulate IP camera traffic, and provides a taxonomy of multidimensional cyberattacks.

Findings

Laser attack reduces video compression efficiency by up to 6X.

Single laser attack causes 90% bandwidth reduction in shared networks.

The attack affects both wired and wireless IP camera systems.

Abstract

Variable-bitrate video streaming is ubiquitous in video surveillance and CCTV, enabling high-quality video streaming while conserving network bandwidth. However, as the name suggests, variable-bitrate IP cameras can generate sharp traffic spikes depending on the dynamics of the visual input. In this paper, we show that the effectiveness of video compression can be reduced by up to 6X using a simple laser LED pointing at a variable-bitrate IP camera, forcing the camera to generate excessive network traffic. Experiments with IP cameras connected to wired and wireless networks indicate that a laser attack on a single camera can cause significant packet loss in systems sharing the network with the camera and reduce the available bandwidth of a shared network link by 90%. This attack represents a new class of cyber-physical attacks that manipulate variable bitrate devices through changes in the physical environment without a digital presence on the device or the network. We also analyze the broader view of multidimensional cyberattacks that involve both the physical and digital realms and present a taxonomy that categorizes attacks based on their direction of influence (physical-to-digital or digital-to-physical) and their method of operation (environment-driven or device-driven), highlighting multiple areas for future research.