Capture: How does Bit2Watt's own reverse 'Watt2Bit' path allegedly exfiltrate data covertly via EMI side channels — and is it demonstrated or just proposed?

hardware-securityside-channelemicovert-channelbit2wattwatt2bitexfiltrationcyber-physical-systems

Claim: Watt2Bit's exfiltration mechanism encodes bits by modulating the GPU-power/EMI attack signal's frequency, and decodes them from a ratio between two frequency bands in the captured EMI trace

Claim type: specific technical-mechanism claim Sourcing floor: Tier 1–2 required Source tier achieved: Tier 1 (direct primary read of the paper's own text) verifies: question-watt2bit-emi-exfiltration-mechanism

Bit2Watt's §4.4 ("Watt2Bit Risk") first states the mechanism in general form: "an adversary could encode bits by modulating either the attack frequency or the attack amplitude, thereby inducing distinguishable patterns in the measured power/EMI traces. A receiver observing these side-channel emissions could then demodulate the corresponding spectral or amplitude features to recover the transmitted symbols." §5.3.5 then gives the concrete implementation used in the experiment: "binary bits are frequency-shift keying (FSK)-encoded on the GPU load profile using 2 kHz ("1") and 200 Hz ("0") modulation frequencies, with a 10 ms bit duration." Decoding uses a relative-energy metric between two fixed frequency bands of the captured EMI trace — "the relative energy ratio M = Eupper/Elower (Elower: 600–800 kHz; Eupper: 1080–1180 kHz) remains discriminative" — thresholded over a sliding window to recover each bit.

Claim: Watt2Bit's EMI exfiltration channel is empirically demonstrated, not merely proposed — a controlled lab test recovered a 50-bit sequence with over 99% decode accuracy and zero bit errors, using a near-field antenna and a software-defined radio

Claim type: quantitative claim Sourcing floor: Tier 1–2 required Source tier achieved: Tier 1 (direct primary read of the paper's own reported experiment) verifies: question-watt2bit-emi-exfiltration-mechanism

Section 5.3.5 ("Watt2Bit Risk") reports an actual experiment, not just an analytical projection: "EMI traces captured via a near-field antenna-coupled USRP B210 reveal that while the absolute spectral power lacks discernible regularity... the relative energy ratio M... remains discriminative. By applying a threshold to a 10 ms sliding window, our decoder achieves an accuracy exceeding 99%. Figure 15(c) demonstrates the successful recovery of a 50-bit test sequence, where every transmitted bit is correctly identified with zero bit errors." This distinguishes Watt2Bit's exfiltration path from the paper's grid-destabilization claim (already recorded in claim-bit2watt-gpu-scheduling-destabilizes-power-grid) and from its own DoS sub-claim: both DoS and exfiltration are framed as consequences of the same underlying power-modulation attack, but exfiltration is the one given a dedicated hardware decode experiment here. The demonstration's scope is narrow: the receiver is a near-field-coupled antenna (i.e., physically close to the power delivery hardware, not a far-field/over-the-air setup), and only one 50-bit test sequence is reported — no distance, range, or multi-trial statistics are given.

Claim: Bit2Watt's own text hedges the exfiltration finding as merely "plausible" and only a "potential" covert channel, and its Conclusion section — when restating what Watt2Bit is — mentions only the denial-of-service consequence, dropping exfiltration entirely

Claim type: historical/textual claim about the source document's own framing (uncontested — the quotes are the evidence) Sourcing floor: Tier 3–4 acceptable for this kind of claim, but achieved Tier 1 (direct primary read) verifies: question-watt2bit-emi-exfiltration-mechanism

The paper's abstract frames the whole Watt2Bit risk cautiously: "we analyze a plausible Watt2Bit feedback path, including denial-of-service risks and covert information exfiltration via EMI side channels." Its own §5.3.5 conclusion sentence, written immediately after reporting the 99%-accuracy, zero-error decode result, still hedges rather than asserts operational feasibility: "It suggests that the power modulation could potentially serve as a feasible covert channel for clandestine information exfiltration." Most tellingly, the paper's final Conclusion (§6), which restates the paper's contributions in summary form, describes Watt2Bit only in DoS terms — "The attack requires no compromise of grid or computing components, operating entirely as a legitimate tenant, and can propagate disturbances back to data centers, causing forced workload interruptions, termed Watt2Bit" — and does not mention exfiltration, EMI, or covert channels anywhere in that closing paragraph, despite the dedicated exfiltration experiment three pages earlier. The paper's own Contributions section (§1.1) is the one place that uses stronger language — "further demonstrate that the same mechanism may also enable covert information exfiltration via EMI side channels" — so the paper's certainty language is inconsistent across its own sections: "demonstrate" in the contributions list, "plausible"/"could potentially" in the abstract and discussion, and silent in the conclusion.

Further leads

• Bit2Watt's Watt2Bit DoS sub-mechanism (thermal stress from harmonics, IEC 60255 protection-relay trip curves) is analytically calculated from standard trip-time curves, not an independent hardware experiment like the exfiltration test — worth checking whether "DoS" is demonstrated at the same evidentiary standard as exfiltration is, in a future capture (source: Bit2Watt PDF §5.3.5, Fig. 15(b), arXiv:2607.05993).
• §5.3.4 ("Detectability and Stealth Analysis") separately evaluates "EMI side channel sensing from the power line and VRM" as a defender's detection method against the Bit2Watt grid-attack itself (not the exfiltration channel), reporting it as the strongest of four monitoring settings at 69.33% true-positive rate at 1% false-positive rate — a different EMI use (detection, not exfiltration) worth distinguishing in any future note that cites "EMI" from this paper (source: Bit2Watt PDF §5.3.4, Fig. 14(b), arXiv:2607.05993).
• A full-text search of Bit2Watt's own 28 pages and 39-entry bibliography turns up no mention of "Guri," "TEMPEST," or "air-gap" — the established academic subfield of EM/acoustic/thermal air-gap covert-channel exfiltration (associated with Mordechai Guri's AirHopper/GSMem/MAGNETO/ODINI line of work) appears to go entirely uncited, despite being the closest prior art to Watt2Bit's own EMI-exfiltration claim. This parallels the vault's existing finding that Bit2Watt's related-work section omits Kocher 1999 and Zhao & Suh 2018 (see claim-bit2watt-citations-omit-kocher-1999-zhao-suh-2018); this would be a second, independent instance of the same citation-omission pattern and is worth a dedicated verification capture rather than asserting it here as a settled claim (source: Bit2Watt PDF full text and references pp. 1-28, arXiv:2607.05993).

Entity candidates

• Mordechai Guri — person — flagged FIRST per the blind-spot instruction: leads the academic subfield (AirHopper, GSMem, MAGNETO, ODINI, and related papers) most directly comparable to Watt2Bit's EMI-exfiltration claim; Bit2Watt's bibliography appears to cite none of this line of work (see Further leads above) — the foundational figure this claim should be measured against, not yet flagged in this branch of the vault.
• Zhouhao Ji — person — Bit2Watt first author, Zhejiang University.
• Kaikai Pan — person — Bit2Watt corresponding author, Zhejiang University.
• Wenyuan Xu — person — Bit2Watt co-author, Zhejiang University.
• Watt2Bit — concept — Bit2Watt's own named "reverse" risk (grid disturbance propagating back into the computing domain); this capture's subject, distinct enough from Bit2Watt to warrant its own concept note if promoted.
• FSK (frequency-shift keying) — concept — the standard digital-modulation technique Watt2Bit's exfiltration channel reuses to encode bits onto the power/EMI signal; general/settled enough that a definitional note could cite outside sources rather than Bit2Watt itself.
• USRP B210 — term — the software-defined radio hardware used as the EMI receiver in the exfiltration experiment; a commodity SDR, not bespoke equipment, which is itself relevant to how easy the demonstrated attack would be to replicate.