PowerEar: An Audio Eavesdropping Attack on Mobile Devices through USB Power Side Channel

- 1 - Description of the PowerEar attack

PowerEar is an acoustic eavesdropping attack that leverages the power side channel to reconstruct any audio reproduced by the built-in speaker of a mobile device, with a non-constrained vocabulary. Our approach relies on a combination of signal processing and generative artificial intelligence techniques to learn the mapping between power consumption and audio playback, enabling the reconstruction of such audio through spectrogram enhancement. Figure 1 provides a overview for the PowerEar system. For additional details refer to the paper.

missing
(1) Overview of the PowerEar system

Fundamentals of human speech and audio-induced power traces

Typically, the fundamental frequencies of the human voice range from 300Hz to 3.4kHz. The English language has a total of 48 phonemes that can be bisected into 20 vowels and 28 consonants. As we can observe in the figures, vowels have their main frequency components below 2kHz (see Figure 2a) while labial and fricative consonants can reach frequencies up to 8kHz (see Figure 2c).

The built-in speaker of a mobile device causes current fluctuations that are related to the audio played. Therefore, we measure the resulting power traces, for which we report the spectrograms of the vowels in Figure 2b and the consonants in Figure 2d.

Audio of vowels

(2a) Audio of vowels

Audio of vowels

(2b) Power trace of vowels

Audio of vowels

(2c) Audio of consonants

Audio of vowels

(2d) Power trace of consonants

- 2 - README file and source code

We provide the source code of our PowerEar framework at the following links:

READMe.md

source code

- 3 - Examples of Original and Reconstructed audio with different devices

iPhone 11

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right), MCD:2.97 WER:9.8 MOS:3.28

iPhone 12

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right), MCD:2.59, WER:9.6, MOS:3.23

iPhone 14

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right), MCD:3.11, WER:9.7, MOS:3.39

Oneplus 12

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right), MCD:2.92, WER:7.6, MOS:3.45

Sony Xperia

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right), MCD:3.21, WER:9.6, MOS: 3.28

- 4 - Examples of Original and Reconstructed Audio with different languages.

English

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right) in English language, MCD:2.4, WER:8.2, MOS:4.2

Chinese

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right) in Chinese language, MCD:2.2, WER:5.8, MOS:4.5

Italian

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right) in Italian language, MCD:2.35, WER:6.4, MOS:3.9

French

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right) in French language, MCD:2.42, WER:6.8, MOS:3.9

Spanish

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right) in Spanish language, MCD:2.11, WER:5.0, MOS:4.4

German

Original audio

(a) Spectrogram of Original Audio

Powertrace raw

(b) Spectrogram of raw power trace

Powertrace denoise

(c) Spectrogram of de-noised power trace

reconstructed audio

(d) Spectrogram of Reconstructed Audio

Original Audio (left) and Reconstructed Audio (right) in German language, MCD:2.41, WER:10.2, MOS:3.9