Trojan bio-hacking of DNA-sequencing pipeline

Islam, M. S. and Ivanov, S. and Doolin, K. and Coffey, L. and Dooley-Cullinane, T. M. and Berry, D. and Balasubramaniam, S. (2019) Trojan bio-hacking of DNA-sequencing pipeline. In: Proceedings of the 6th ACM International Conference on Nanoscale Computing and Communication, NANOCOM 2019 :. Proceedings of the 6th ACM International Conference on Nanoscale Computing and Communication, NANOCOM 2019 . Association for Computing Machinery, Inc, IRL. ISBN 9781450368971

Full text not available from this repository. (Request a copy)

Abstract

The article focuses on the information security risks that arise from the use of dubious software as part of a DNA-sequencing pipeline. We show how the perpetrator can use a biologically engineered sample that contains the remote machine’s IP address and port number to trigger Trojan spyware previously dormant, and create a connection to the remote machine. The spyware is then used to either steal sensitive data processed by the pipeline (e.g. DNA-sample of crime suspect) or manipulate its control-flow (e.g. via opening a backdoor). To avoid detection the spyware can accept and expect required payload in fragments, which are also hidden inside the sample in a distributed manner. We show how the adversary can use cryptographic tools such as encryption and steganography to make such detection even harder while limiting the footprint that either identifies the attacker or makes the trigger-sample substantially different from its biological species. Therefore, we prove the viability of the attack and further stress the need to account for attacks being launched from the physical, rather than cyber-world. Furthermore, DNA sequencing error can hinder the successful delivery of a payload, hence the success of such attacks. We estimate the success rates for different sequencing error rates, where the calculated results are also verified with corresponding results from simulations.

Item Type:	Book Section
Additional Information:	Funding Information: This work was supported by Science Foundation Ireland through the SFI VistaMilk (16/RC/3835) and CONNECT (13/RC/2077) research centres. Publisher Copyright: © 2019 Association for Computing Machinery.
Uncontrolled Keywords:	/dk/atira/pure/subjectarea/asjc/1700/1703
Departments or Groups:
Depositing User:	Admin SSL
Date Deposited:	19 Oct 2022 23:16
Last Modified:	07 Jun 2023 18:39
URI:	http://repository-testing.wit.ie/id/eprint/5011

Actions (login required)

View Item