Safeguarding Underwater Data Centers (UDCs) from Acoustic Attacks

Underwater data centers (UDCs) offer exciting potential for data storage and remote computing infrastructures, as they demonstrate advantages due to the natural cooling properties of water, space efficiency, and renewable energy integration (eg, Microsoft project Natick, Texas Subsea Clouds, Beijing Highlander). However, the dense water also quickly carries acoustic signals that can damage or break underwater storage drives. We investigated these vulnerabilities in submerged data centers and storage platforms against targeted acoustic attacks. We found that at the resonance frequency of the drives (between 0.3-1 KHz), the acoustic source can affect the read-write speed and throughput performance of the victim HDDs. We observed up to 100% throughput loss when the source distance is within 10-25cm, using an unsophisticated commercial underwater speaker. We also showed that prolonged attacks for over 80 seconds can cause Denial of Service of system-level applications. While physical access to UDCs is challenging, such targeted attacks can be carried out remotely by underwater robots without tampering with the communication systems or having access to the datacenter structure.

In this project, we will design a software defense system and intelligent surveillance strategies for physical/remote acoustic attacks on hardware storage drives of UDCs. Our investigations include the development and assessment of comprehensive preventive and reactive measures against such attacks on a real UDC prototype. We are working on this project in collaboration with the CPSEC lab (Dr. Rampazzi) at UF.


This capstone project will explore methods to identify vulnerable ways that an assailant (divers or underwater ROVs) may exploit to carry out acoustic attacks on UDCs. Subsequent efforts will explore how to identify and possibly encrypt energy signatures of UDCs to eliminate or mitigate such attacks by software architecture designs and through innovative deployment strategies. Our preventive measures include a novel software stack, an agent-based surveillance system, and acoustic attack-proof structural designs. We will develop an actual UDC prototype pod with operational servers and deploy it underwater to assess the proposed security and surveillance features comprehensively.



In News!!



AquaSonic Project

This project explores unique vulnerabilities of UDC storage devices, resource allocation softwares, and distributed file systems to acoustic attacks. We investigate the effectiveness of standard defenses against acoustic injection attacks and propose a novel ML-based detection system that reaches 96% True Positive Rate and 1.75% False Negative Rate. We aim to help manufacturers proactively protect UDCs against acoustic attacks and ensure the security of emerging subsea computing infrastructures.

Paper (IEEE S&P-24) Project Page News


BlueNote Project

This project investigates potential vulnerabilities of storage devices deployed in UDCs and subsea storage platforms against targeted acoustic attacks. Based on our initial investigation of a simplified scenario, a victim HDD deployed in an enclosed submerged container is especially vulnerable to those acoustic attacks, which at frequencies ranging from 300 Hz 1300 Hz can result in up to 100% throughput loss and application crashes.

Paper (ACM HotStorage-23)


Publications