Recent research has shown that the integrity of sensor measurements can be violated through out-of-band signal injection attacks. These attacks target the conversion process from a physical quantity to an analog property—a process that fundamentally cannot be authenticated. Out-of-band signal injection attacks thus pose previously-unexplored security risks by exploiting hardware imperfections in the sensors themselves, or in their interfaces to microcontrollers. In response to the growing-yet-disjointed literature in the subject, this article presents the first survey of out-of-band signal injection attacks. It focuses on unifying their terminology and identifying commonalities in their causes and effects through a chronological, evolutionary, and thematic taxonomy of attacks. By highlighting cross-influences between different types of out-of-band signal injections, this paper underscores the need for a common language irrespective of the attack method. By placing attack and defense mechanisms in the wider context of their dual counterparts of side-channel leakage and electromagnetic interference, this study identifies common threads and gaps that can help guide and inform future research. Overall, the ever-increasing reliance on sensors embedded in everyday commodity devices necessitates that a stronger focus be placed on improving the security of such systems against out-of-band signal injection attacks.

中文翻译：

---

带外信号注入攻击和防御的分类和挑战

最近的研究表明，带外信号注入攻击可能会破坏传感器测量的完整性。这些攻击的目标是从物理量到模拟属性的转换过程——从根本上无法验证的过程。因此，带外信号注入攻击会利用传感器本身或其与微控制器的接口中的硬件缺陷，从而带来以前未曾探索过的安全风险。针对该主题中不断增长但又不连贯的文献，本文首次介绍了带外信号注入攻击。它侧重于通过攻击的时间顺序、进化和主题分类来统一它们的术语并确定它们的原因和影响的共性。通过强调不同类型的带外信号注入之间的交叉影响，本文强调需要一种通用语言，而不管攻击方法如何。通过将攻击和防御机制置于侧信道泄漏和电磁干扰双重对应物的更广泛背景下，本研究确定了有助于指导和为未来研究提供信息的共同线索和差距。总体而言，对嵌入在日常商品设备中的传感器的日益依赖，需要更加关注提高此类系统的安全性，以防止带外信号注入攻击。通过将攻击和防御机制置于侧信道泄漏和电磁干扰双重对应物的更广泛背景下，本研究确定了有助于指导和为未来研究提供信息的共同线索和差距。总体而言，对嵌入在日常商品设备中的传感器的日益依赖，需要更加关注提高此类系统的安全性，以防止带外信号注入攻击。通过将攻击和防御机制置于侧信道泄漏和电磁干扰双重对应物的更广泛背景下，本研究确定了有助于指导和为未来研究提供信息的共同线索和差距。总体而言，对嵌入在日常商品设备中的传感器的日益依赖，需要更加关注提高此类系统的安全性，以防止带外信号注入攻击。