This article appears to incorporate text from a large language model, which is prohibited in Wikipedia articles. (July 2026) |
Intentional electromagnetic interference (IEMI) is the malicious generation and directed use of electromagnetic energy (EM) to disrupt, degrade, or damage electronic equipment, information systems, or electrically controlled processes. IEMI is a subset of electromagnetic interference (EMI) that is deliberate rather than accidental, and is often discussed within the broader field of high‑power electromagnetics (HPEM).
Although IEMI is frequently analyzed alongside Cyber-kinetic attacks because it can produce real‑world physical effects on cyber‑physical systems, it does not require software or network access. By definition, a cyber attack is executed via cyberspace against information systems, whereas IEMI involves analog EM coupling into equipment and cables.
URSI characterized IEMI as the "intentional malicious generation of electromagnetic energy introducing noise or signals into electric and electronic systems, thus disrupting, confusing or damaging these systems for terrorist or criminal purposes." International standards subsequently placed IEMI within the HPEM domain: IEC 61000‑2‑13 defines representative radiated and conducted HPEM environments for civil facilities (including narrowband high‑power microwave and ultrawideband transients) and provides canonical waveforms for analysis and testing.
IEMI is distinct from naturally occurring disturbances such as Geomagnetic storms and from non‑malicious electromagnetic compatibility (EMC) issues; it is also distinct from nuclear HEMP environments by its localized nature and diverse sources and waveforms.
Known or hypothesized malicious actors include criminals, terrorists, and state or state‑aligned groups. Practical IEMI sources range from portable UWB or mesoband pulse devices and narrowband high‑power microwave (HPM) systems to lower‑power but disruptive radio‑frequency jammers targeting communications (e.g., GNSS).
Coupling paths include (i) radiated coupling through apertures and seams, (ii) conducted coupling via attached cables and power or signal lines, and (iii) near‑field coupling from devices in close proximity. Depending on waveform, exposure level, and target susceptibility, effects range from temporary upset and data corruption to latch‑up, component failure, or permanent damage.
Open‑source literature shows criminal misuse of EM tools, including interference with security systems, financial equipment, and communications; many incidents are covert and difficult to attribute forensically. Intentional jamming of GPS/GNSS signals has affected civil aviation and maritime operations. For example, the International Civil Aviation Organization (ICAO) reported repeated GNSS interference originating from North Korea that affected international civil aviation and prompted actions by the ICAO Assembly in 2024–2025.
European authorities likewise note antagonistic EM threats to critical services, including the availability of low‑cost jammers and the feasibility of vehicle‑portable HPM sources.
Electric power systems, telecommunications facilities, transportation, finance, healthcare, and other sectors rely on sensitive electronics and networked control. Analyses for the U.S. Federal Energy Regulatory Commission concluded that HPEM/IEMI environments could upset or damage protection relays, substation controls, and SCADA communications if appropriate hardening is not in place. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued guidance to help owners and operators plan graded protections for mission‑essential equipment, addressing IEMI alongside HEMP and GMD.
International standards address characterization of threat environments, immunity testing, and facility‑level protection:
The topology of EM coupling informs both testing and hardening. The table summarizes common IEMI coupling paths and links each to representative standards and controls.
| Coupling topology | Primary paths | Representative IEMI sources | Representative test references | Example mitigation controls |
|---|---|---|---|---|
| Radiated (far‑field) | External apertures, seams, ventilation; unshielded windows; poorly bonded panels | Narrowband HPM; wide/ultra‑wideband pulse devices; high‑power communications jammers | IEC 61000‑2‑13 (environments); IEC 61000‑4‑36 (IEMI immunity); IEC 61000‑4‑23 (shielding verification) | Building‑level shielding and bonding; electromagnetic zoning; verified enclosure/room shielding effectiveness; filtered penetrations; standoff and siting |
| Conducted | Power feeders; signal/control cables; telecomm and GNSS feeders; long cable runs acting as antennas | Conducted injection of HPEM pulses; coupling from nearby HPM/UWB sources into cables | IEC 61000‑2‑13 (conducted environments); IEC 61000‑4‑36 (IEMI immunity); IEC 61000‑4‑24 (protective devices/filters) | Surge protective devices and HEMP/IEMI combination filters; properly bonded entry plates; cable shielding, segmentation and routing; ferrites and feedthroughs |
| Near‑field / close‑proximity | Hand‑held EM probes/loops near seams, sensors, or PCB areas; small apertures; poorly shielded devices | Localized RF/magnetic injection; EM fault injection (EMFI) against microcontrollers/SoCs | IEC 61000‑4‑39 (close‑proximity immunity); IEC 61000‑4‑36 (IEMI immunity); CWE‑1319 (EMFI weakness classification) | Device‑level shielding; sensor and cable hardening; physical access control; microarchitectural countermeasures (timing jitter, redundancy); localized detection/logging |
Protection strategies combine architectural, electromagnetic, and operational measures tailored to risk and consequence. Typical controls include:
International radio regulation prohibits "harmful interference" to safety services and legitimate radiocommunications. Many jurisdictions explicitly ban the sale and use of RF jamming devices; for example, U.S. federal law prohibits operating, marketing, or importing signal jammers, with civil and criminal penalties enforced by the Federal Communications Commission (FCC).
While IEMI is not a cyber attack, it can create effects analogous to those produced by software‑centric tactics. The table below provides a non‑exhaustive crosswalk for readers of both security and engineering backgrounds.
| Goal (system effect) | Software‑centric method | Electromagnetic tactic (IEMI) | Typical physical consequences in cyber‑physical systems |
|---|---|---|---|
| Loss of availability | Distributed denial of service (DDoS) | RF jamming of wireless links (e.g., Wi‑Fi, cellular, GNSS); deliberate interference causing physical‑layer DoS | Loss of remote control/telemetry, navigation outages and go‑arounds in aviation; degraded timing and situational awareness in ICS and transport. |
| Integrity violation (false data / unauthorized actuation) | False‑data injection; command injection | Conducted or radiated EM injection coupling into cables/equipment causing sensor/logic upset or protective relay mis‑operation; HPM/UWB transients per IEC 61000‑2‑13; documented susceptibility of substation controls and relays | Erroneous set‑points or trips; spurious alarms; process disruption (e.g., unintended breaker open/close). |
| Timed/triggered disruption | Logic bomb or time‑triggered malware | Timed or opportunistic application of HPM/UWB pulses to induce resets, latch‑up, or damage in targeted electronics | Unplanned shutdowns of controllers; potential component damage depending on exposure. |
| Bypass controls / escalate privileges | Memory corruption (e.g., bit flips), fault attacks | Electromagnetic fault injection (EMFI) to induce instruction skips, register/memory bit flips, or timing faults in microcontrollers/SoCs | Authentication bypass, corrupted control logic, extraction of secrets from embedded devices, safety interlocks defeated. |
{{cite journal}}: CS1 maint: DOI inactive as of October 2025 (link)