NosyNeighbor: the experimental cyberattack designed to strengthen the security of critical systems

The attack is not the end goal — it is a tool for uncovering weaknesses and developing countermeasures. This is exactly the same approach used when researchers create an exploit to demonstrate a Windows vulnerability: they do it not to harm users, but so that Microsoft can fix the issue before someone else exploits it.

What vulnerability did they want to demonstrate, and how did they find it?

Many critical systems — in avionics, automotive and medical devices, for example — are divided into isolated partitions to prevent a failure in one area from affecting the whole system.

The researchers' question was straightforward: is it possible to find out what is happening inside one of those partitions without directly accessing it? The answer is yes.

What makes it novel is that the attack learns as it goes. At each phase it adapts its behaviour to improve the accuracy of its inferences. The result:

Why does it matter?

Knowing the exact moment a critical task executes does not compromise a system on its own, but it can enable subsequent attacks that are far more precise and effective.

"Apparently harmless timing information can become a valuable source of intelligence for an attacker."

Thinking like an attacker to build better defences

The goal of NosyNeighbor is not to create a new threat, but to uncover weaknesses before cybercriminals do.

The researchers developed an experimental attack model to show that some protection mechanisms still have limitations against adaptive attackers. Understanding those limitations makes it possible to design better defences and strengthen critical systems before those vulnerabilities can be exploited.