journal article·2026-01-06Open access

Acoustic Side-Channel Vulnerabilities in Keyboard Input Explored Through Convolutional Neural Network Modeling: A Pilot Study

Michał Rzemieniuk, Artur Niewiarowski, Wojciech Książek

Applied Sciences· Volume 16· Issue 2

Abstract

This paper presents the findings of a pilot study investigating the feasibility of recognizing keyboard keystroke sounds using Convolutional Neural Networks (CNNs) as a means of simulating an acoustic side-channel attack aimed at recovering typed text. A dedicated dataset of keyboard audio recordings was collected and preprocessed using signal-processing techniques, including Fourier-transform-based feature extraction and mel-spectrogram analysis. Data augmentation methods were applied to improve model robustness, and a CNN-based prediction architecture was developed and trained. A series of experiments was performed under multiple conditions, including controlled laboratory settings, scenarios with background noise interference, tests involving a different keyboard model, and evaluations following model quantization. The results indicate that CNN-based models can achieve high keystroke-prediction accuracy, demonstrating that this class of acoustic side-channel attacks is technically viable. Additionally, the study outlines potential mitigation strategies designed to reduce exposure to such threats. Overall, the findings highlight the need for increased awareness of acoustic side-channel vulnerabilities and underscore the importance of further research to more comprehensively understand, evaluate, and prevent attacks of this nature.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: User Authentication and Security Systems · Music Technology and Sound Studies · Interactive and Immersive Displays

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Computer Science, Faculty of Computer Science and Mathematics, Cracow University of Technology, 31-155 Cracow, Poland

References (24)

Show source-provided references
1. DataReportal/Kepios (2025, October 15). Digital Around the World. Available online: https://datareportal.com/global-digital-overview.
2. A comprehensive review of security threats and solutions for the online social networks industry10.7717/peerj-cs.1143 ↗
3. Side-Channel Attacks Detection Methods: A Survey
4. Vuagnoux, M., and Pasini, S. (2009, January 10–14). Compromising electromagnetic emanations of wired and wireless keyboards. Proceedings of the 18th Conference on USENIX Security Symposium, Montreal, QC, Canada.
5. Mitigating side channel attacks on FPGA through deep learning and dynamic partial reconfiguration10.1038/s41598-025-98473-3 ↗
6. Mehrnezhad, M., Toreini, E., Shahandashti, S.F., and Hao, F. (March, January 14). TouchSignatures: Identification of User Touch Actions based on Mobile Sensors via JavaScript. Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security, Singapore. ASIA CCS ’15.
7. TouchSignatures: Identification of user touch actions and PINs based on mobile sensor data via JavaScript
8. Yuan, J., Zhang, J., Qiu, P., Wei, X., and Liu, D. (2024). A Survey of of Side-Channel Attacks and Mitigation for Processor Interconnects. Appl. Sci., 14.10.3390/app14156699 ↗
9. Harrison, J., Toreini, E., and Mehrnezhad, M. (2023, January 3–7). A Practical Deep Learning-Based Acoustic Side Channel Attack on Keyboards. Proceedings of the 2023 IEEE European Symposium on Security and Privacy Workshops (EuroSamp;PW), Delft, The Netherlands.10.1109/EuroSPW59978.2023.00034 ↗
10. Ayati, S.A., Park, J.H., Cai, Y., and Botacin, M. (2025, January 11–12). Making acoustic side-channel attacks on noisy keyboards viable with LLM-assisted spectrograms’ “Typo” correction. Proceedings of the 19th USENIX Conference on Offensive Technologies, Seattle, WA, USA. WOOT ’25.
11. Rathod, A., and Patel, K.S. (2024). Review of Side Channel Attacks and Comparison of Masking and Re-keying Countermeasures. J. Electr. Syst. (JES), 20.
12. Spycatcher (The candid autobiography of a Senior Intelligence Officer). By Peter Wright. New York: Viking Penguin. 1987. Pp 39210.1192/pb.13.4.217-a ↗
13. Taheritajar, A., Harris, Z.M., and Rahaeimehr, R. (2024). A Survey on Acoustic Side Channel Attacks on Keyboards. International Conference on Information and Communications Security, Springer Nature.10.1007/978-981-97-8798-2_6 ↗
14. Anand, S.A., Shrestha, P., and Saxena, N. (2015). Bad Sounds Good Sounds: Attacking and Defending Tap-Based Rhythmic Passwords Using Acoustic Signals. Cryptology and Network Security, Springer International Publishing.10.1007/978-3-319-26823-1_7 ↗
15. Deshmukh, A., and Ravulakollu, K. (2024). An Efficient CNN-Based Intrusion Detection System for IoT: Use Case Towards Cybersecurity. Technologies, 12.10.3390/technologies12100203 ↗
16. Alabsi, B., Anbar, M., and Rihan, S. (2023). CNN-CNN: Dual Convolutional Neural Network Approach for Feature Selection and Attack Detection on Internet of Things Networks. Sensors, 23.10.3390/s23146507 ↗
17. Artificial intelligence analysis of ECG signals to predict arrhythmia recurrence after ablation of atrial fibrillation10.33963/v.phj.104319 ↗
18. A lightweight deep convolutional neural network model for skin cancer image classification10.1016/j.asoc.2024.111794 ↗
19. Chu, H.C., Zhang, Y.L., and Chiang, H.C. (2023). A CNN Sound Classification Mechanism Using Data Augmentation. Sensors, 23.10.3390/s23156972 ↗
20. Audio analysis with convolutional neural networks and boosting algorithms tuned by metaheuristics for respiratory condition classification10.1016/j.jksuci.2024.102261 ↗
21. Bai, J.X., Liu, B., and Song, L. (2021, January 20–24). I Know Your Keyboard Input: A Robust Keystroke Eavesdropper Based-on Acoustic Signals. Proceedings of the 29th ACM International Conference on Multimedia, Virtual Event.10.1145/3474085.3475539 ↗
22. Compagno, A., Conti, M., Lain, D., and Tsudik, G. (2017, January 2–6). Don’t Skype & Type!: Acoustic Eavesdropping in Voice-Over-IP. Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, Abu Dhabi, United Arab Emirates. ASIA CCS ’17.10.1145/3052973.3053005 ↗
23. Data augmentation: A comprehensive survey of modern approaches10.1016/j.array.2022.100258 ↗
24. A review of convolutional neural networks in computer vision10.1007/s10462-024-10721-6 ↗