# Protecting Data at Risk of Unintentional Electromagnetic Emanation: TEMPEST Profiling
## 2 Related Work  
Attacks against user information can be either passive or active [14]. Passive attacks do not affect the transmitter, receiver, or data sent over the communication channel, while active attacks can be performed by malicious users to compromise any of these. An active attack is a type of cyber security breach in which an unauthorized intruder attempts to modify or delete data or disrupt the regular function of a system or network. The malicious user in this attack directly takes action against the targeted system or network [15]. Cybercriminals often use tactics to disguise their true identity or impersonate themselves to infiltrate restricted areas within networks or systems to reach the data. During an active attack, they aim to use or modify compromised data to facilitate access to more confidential and valuable data. The most used types of active attacks are denial-of-service, masquerading, message tampering, replay, and bounce. Denial-of-service occurs when an attacker disrupts the regular operation of communication systems. In a masquerade attack, malicious users impersonate themselves to obtain confidential information. Message tampering is an attack on the integrity of the original data. A replay attack involves intercepting and resending a message to achieve a semblance of authorization. A bounce attack occurs when a malicious user manipulates data and stores false data in log files. To improve protection against an active attack, it is critical to implement certain protective measures that may include the use of one-time passwords for transaction and session authentication, a unique session key for each transaction, an authentication protocol, and cyber risk ratings to monitor the threat environment in real time. Passive attacks include various techniques allowing attackers to monitor or exploit system data without any noticeable impact on system resources or data modifications. These attacks can be difficult to detect, leaving the victim unaware of the attack. The primary goal of passive attacks is to gather sensitive information or identify network vulnerabilities. An example of a passive attack is eavesdropping; attackers intercept and use data transmitted between two devices connected to a computer network. Eavesdropping attacks often involve inserting software into the network that intercepts and analyzes current network traffic. The release of messages is another form of passive attack; attackers install malware on the device to monitor activities such as sending messages, email exchanges, or file sharing. Protection against passive attacks involves access control and data encryption. Two encryption methods are most commonly used: symmetric key encryption, which uses a single encryption/decryption key for both parties, and public key encryption, where each party has a public and private key in communication. A side-channel attack is a passive attack based on monitoring communication between two (or more) parties by \"sniffing\" on devices, equipment, and transmissions without leaving any trace. This attack uses specific factors such as EM emission, timing, and power consumption [16]. The side-channel attack goal is to exploit unintentional EM emissions [13; 17]. According to [18], side-channel attacks usually involve physical intrusions. An attacker steals protected and sensitive data by observing the physical behavior of a system. This problem is also related to the compromising EM radiation (CER) associated with devices protected by some of the cryptographic techniques [19]. The best way to effectively counter side-channel attacks is to develop encryption systems resistant to physical observation and manipulation. This can be achieved through the implementation of various techniques, such as balancing, blinding, and masking. To effectively counter side-channel attacks, it is also necessary to monitor and detect unusual behavior within the encryption system using sensors that measure and document various system parameters, such as energy consumption or EM radiation.