<?xml version="1.0" encoding="ISO-8859-1"?><article xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<front>
<journal-meta>
<journal-id>2422-4200</journal-id>
<journal-title><![CDATA[Revista Logos Ciencia & Tecnología]]></journal-title>
<abbrev-journal-title><![CDATA[Rev. logos cienc. tecnol.]]></abbrev-journal-title>
<issn>2422-4200</issn>
<publisher>
<publisher-name><![CDATA[Policía Nacional de Colombia]]></publisher-name>
</publisher>
</journal-meta>
<article-meta>
<article-id>S2422-42002022000300102</article-id>
<article-id pub-id-type="doi">10.22335/rlct.v14i3.1618</article-id>
<title-group>
<article-title xml:lang="es"><![CDATA[Fuga de información por ultrasonido: un delito sobre datos personales]]></article-title>
<article-title xml:lang="en"><![CDATA[Information leakage by ultrasound: a crime against personal data]]></article-title>
<article-title xml:lang="pt"><![CDATA[Vazamento de informações de ultrassom: crime contra dados pessoais]]></article-title>
</title-group>
<contrib-group>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Vargas Montoya]]></surname>
<given-names><![CDATA[Héctor Fernando]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Vallejo Pinilla]]></surname>
<given-names><![CDATA[Clay Schneider]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Ruiz Patiño]]></surname>
<given-names><![CDATA[Carlos Augusto]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
</contrib-group>
<aff id="Af1">
<institution><![CDATA[,Instituto Tecnológico Metropolitano  ]]></institution>
<addr-line><![CDATA[Medellín ]]></addr-line>
<country>Colombia</country>
</aff>
<aff id="Af2">
<institution><![CDATA[,Instituto Tecnológico Metropolitano  ]]></institution>
<addr-line><![CDATA[Medellín ]]></addr-line>
<country>Colombia</country>
</aff>
<aff id="Af3">
<institution><![CDATA[,Instituto Tecnológico Metropolitano  ]]></institution>
<addr-line><![CDATA[Medellín ]]></addr-line>
<country>Colombia</country>
</aff>
<pub-date pub-type="pub">
<day>00</day>
<month>12</month>
<year>2022</year>
</pub-date>
<pub-date pub-type="epub">
<day>00</day>
<month>12</month>
<year>2022</year>
</pub-date>
<volume>14</volume>
<numero>3</numero>
<fpage>102</fpage>
<lpage>116</lpage>
<copyright-statement/>
<copyright-year/>
<self-uri xlink:href="http://www.scielo.org.co/scielo.php?script=sci_arttext&amp;pid=S2422-42002022000300102&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://www.scielo.org.co/scielo.php?script=sci_abstract&amp;pid=S2422-42002022000300102&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://www.scielo.org.co/scielo.php?script=sci_pdf&amp;pid=S2422-42002022000300102&amp;lng=en&amp;nrm=iso"></self-uri><abstract abstract-type="short" xml:lang="es"><p><![CDATA[RESUMEN La utilización de mecanismos como la transmisión de datos por ondas ultrasónicas, puede permitir que malintencionados logren obtener datos personales de un sistema de cómputo, lo que podría constituir un delito informático. El objetivo de este artículo es demostrar cómo es posible filtrar información a través del ultrasonido, haciendo uso de los sistemas periféricos de estaciones de trabajo, con lo cual se podrían obtener datos personales generando un problema de confidencialidad y un posible delito. Para ello, el método utilizado fue realizar una caracterización de componentes informáticos, construir un software de apoyo para el envío y recepción de datos por ultrasonido (en una frecuencia por encima de los 18000 Hz), haciendo uso de los altavoces de un equipo computacional y la recepción datos fue desde otro equipo portátil, las pruebas fueron realizadas en un ambiente controlado con bajo ruido. Como resultado, se pudo transferir información a través de elementos computacionales básicos, aunque con alguna pérdida de paquetes, pero funcional para el cumplimiento del objetivo propuesto. Con lo cual, se concluye que es posible, a través de ultrasonido, filtrar datos y que alguna de esta información puede generar un delito informático a la luz de la Ley 1273 de 2009 en Colombia.]]></p></abstract>
<abstract abstract-type="short" xml:lang="en"><p><![CDATA[ABSTRACT The use of mechanisms such as the transmission of data by ultrasonic waves can allow malicious personnel to obtain personal data from a computer system, which could constitute a computer crime. The objective of this article is to demonstrate how it is possible to filter information through ultrasound, using workstation peripheral systems, with which personal data could be obtained, which generates a confidentiality problem. For this, the method used was to perform a characterization of the computer components, a support software was built for sending and receiving ultrasound data (at a frequency greater than 18000 Hz), using the speakers of a computer equipment and the reception of data was from another laptop, the tests were performed in a controlled environment with low noise level. As a result, it was possible to transfer information through basic computational elements, although with some packet loss, but functional for the fulfillment of the proposed objective, with which it is concluded that it is possible that part of this leaked information could generate a computer crime through the light of Law 1273 in Colombia.]]></p></abstract>
<abstract abstract-type="short" xml:lang="pt"><p><![CDATA[RESUMO A utilização de mecanismos como a transmissão de dados por ondas ultrassônicas pode permitir que indivíduos mal-intencionados obtenham dados pessoais de um sistema informático, o que pode constituir um crime informático. O objetivo deste artigo é demonstrar como é possível filtrar informações por meio de ultrassom, utilizando sistemas periféricos de estações de trabalho, com os quais podem ser obtidos dados pessoais, o que cria um problema de confidencialidade. Para isso, foi realizada uma caracterização dos componentes do computador, foi construído um software de suporte para enviar e receber dados de ultrassom (na frequência superior a 18000 Hz), utilizando os alto-falantes de um equipamento computacional e foi realizada a recepção. Dados de outro laptop, os testes foram realizados em um ambiente controlado de baixo ruído. Consequentemente, a informação pode ser transferida através de elementos computacionais básicos, embora com alguma perda de pacotes, mas funcional para o cumprimento do objetivo proposto, com o qual é possível que parte desta informação filtrada possa gerar um crime informático de acordo com a Lei 1273 na Colômbia.]]></p></abstract>
<kwd-group>
<kwd lng="es"><![CDATA[crimen informático]]></kwd>
<kwd lng="es"><![CDATA[derecho a la privacidad]]></kwd>
<kwd lng="es"><![CDATA[medida de seguridad]]></kwd>
<kwd lng="es"><![CDATA[protección de datos]]></kwd>
<kwd lng="es"><![CDATA[sistema informático]]></kwd>
<kwd lng="es"><![CDATA[ultrasonido]]></kwd>
<kwd lng="en"><![CDATA[computer crime]]></kwd>
<kwd lng="en"><![CDATA[computer system]]></kwd>
<kwd lng="en"><![CDATA[data protection]]></kwd>
<kwd lng="en"><![CDATA[right to privacy]]></kwd>
<kwd lng="en"><![CDATA[security measure]]></kwd>
<kwd lng="en"><![CDATA[ultrasound]]></kwd>
<kwd lng="pt"><![CDATA[crime informático]]></kwd>
<kwd lng="pt"><![CDATA[direito à privacidade]]></kwd>
<kwd lng="pt"><![CDATA[medida de segurança]]></kwd>
<kwd lng="pt"><![CDATA[proteção de dados]]></kwd>
<kwd lng="pt"><![CDATA[sistema informático]]></kwd>
<kwd lng="pt"><![CDATA[ultrassom]]></kwd>
</kwd-group>
</article-meta>
</front><back>
<ref-list>
<ref id="B1">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[AlKilani]]></surname>
<given-names><![CDATA[H.]]></given-names>
</name>
<name>
<surname><![CDATA[Nasereddin]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Hadi]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Tedmori]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<source><![CDATA[Data Exfiltration Techniques and Data Loss Prevention System]]></source>
<year>2019</year>
<conf-name><![CDATA[ International Arab Conference on Information Technology]]></conf-name>
<conf-date>2019</conf-date>
<conf-loc> </conf-loc>
<page-range>124-7</page-range></nlm-citation>
</ref>
<ref id="B2">
<nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Álvarez Castelló]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
</person-group>
<source><![CDATA[Bases físicas de la luz, procedimientos Endoscópicos en Gastroenterología]]></source>
<year>2018</year>
</nlm-citation>
</ref>
<ref id="B3">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Carpentier]]></surname>
<given-names><![CDATA[E.]]></given-names>
</name>
<name>
<surname><![CDATA[Thomasset]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
<name>
<surname><![CDATA[Briffaut]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<source><![CDATA[Bridging The Gap: Data Exfiltration in Highly Secured Environments Using Bluetooth IoTs]]></source>
<year>2019</year>
<conf-name><![CDATA[ 37International Conference on Computer Design (ICCD)]]></conf-name>
<conf-loc> </conf-loc>
</nlm-citation>
</ref>
<ref id="B4">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Chen]]></surname>
<given-names><![CDATA[Q.]]></given-names>
</name>
<name>
<surname><![CDATA[Liu]]></surname>
<given-names><![CDATA[F. W.]]></given-names>
</name>
<name>
<surname><![CDATA[Xiao]]></surname>
<given-names><![CDATA[Z.]]></given-names>
</name>
<name>
<surname><![CDATA[Sharma]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
<name>
<surname><![CDATA[Cho]]></surname>
<given-names><![CDATA[S. K.]]></given-names>
</name>
<name>
<surname><![CDATA[Kim]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Ultrasound Tracking of the Acoustically Actuated Microswimmer]]></article-title>
<source><![CDATA[IEEE Transactions on Biomedical Engineering]]></source>
<year>2019</year>
<volume>66</volume>
<numero>11</numero>
<issue>11</issue>
<page-range>3231-7</page-range></nlm-citation>
</ref>
<ref id="B5">
<nlm-citation citation-type="book">
<collab>Congreso de la República</collab>
<source><![CDATA[Ley 1273 de 2009. Por medio de la cual se modifica el Código Penal, se crea un nuevo bien jurídico tutelado - denominado "de la protección de la información y de los datos"- y se preservan integralmente los sistemas que utilicen las tecnologías de la información y las comunicaciones, entre otras disposiciones]]></source>
<year>2009</year>
<publisher-name><![CDATA[Diario Oficial No. 47223]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B6">
<nlm-citation citation-type="">
<collab>GNU Radio project</collab>
<source><![CDATA[About GNU Radio]]></source>
<year>2022</year>
</nlm-citation>
</ref>
<ref id="B7">
<nlm-citation citation-type="">
<collab>IZotope Corp</collab>
<source><![CDATA[The Complete Audio Repair Toolkit]]></source>
<year>2021</year>
</nlm-citation>
</ref>
<ref id="B8">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Leyden]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<source><![CDATA[Hear that? It's the sound of BadBIOS wannabe chatting over air gaps]]></source>
<year>2013</year>
<publisher-name><![CDATA[LANs-free prototype mimics notorious rootkit]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B9">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Liu]]></surname>
<given-names><![CDATA[X.]]></given-names>
</name>
<name>
<surname><![CDATA[Zhang]]></surname>
<given-names><![CDATA[P.]]></given-names>
</name>
<name>
<surname><![CDATA[Wang]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
<name>
<surname><![CDATA[Wu]]></surname>
<given-names><![CDATA[X.]]></given-names>
</name>
</person-group>
<source><![CDATA[Design and Implementation of the Information Transmission System Based on Ultrasound]]></source>
<year>2019</year>
<conf-name><![CDATA[ 8thJoint International Information Technology and Artificial Intelligence Conference (ITAIC)]]></conf-name>
<conf-loc> </conf-loc>
<page-range>1862-5</page-range></nlm-citation>
</ref>
<ref id="B10">
<nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Murphy]]></surname>
<given-names><![CDATA[K.]]></given-names>
</name>
</person-group>
<source><![CDATA[Quietnet]]></source>
<year>2017</year>
</nlm-citation>
</ref>
<ref id="B11">
<nlm-citation citation-type="">
<collab>NumPy Project</collab>
<source><![CDATA[NumPy software]]></source>
<year>2020</year>
</nlm-citation>
</ref>
<ref id="B12">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Ortega]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Seguel]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Historia del ultrasonido: el caso chileno]]></article-title>
<source><![CDATA[Revista Chilena de Radiologia]]></source>
<year>2004</year>
<volume>10</volume>
<numero>2</numero>
<issue>2</issue>
<page-range>89-92</page-range></nlm-citation>
</ref>
<ref id="B13">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Osorio-Sierra]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Mateus-Hernández]]></surname>
<given-names><![CDATA[M. J.]]></given-names>
</name>
<name>
<surname><![CDATA[Vargas-Montoya]]></surname>
<given-names><![CDATA[H. F.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Proceso para la identificación, clasificación y control del comportamiento de familias Ransomware]]></article-title>
<source><![CDATA[Revista UIS Ingenierías]]></source>
<year>2020</year>
<volume>19</volume>
<numero>3</numero>
<issue>3</issue>
<page-range>131-42</page-range></nlm-citation>
</ref>
<ref id="B14">
<nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Pérez]]></surname>
<given-names><![CDATA[E.]]></given-names>
</name>
</person-group>
<source><![CDATA[El zip de la muerte: un "inocente" archivo comprimido capaz de explotar hasta colapsar tu PC con billones de datos]]></source>
<year>2020</year>
</nlm-citation>
</ref>
<ref id="B15">
<nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Pérez]]></surname>
<given-names><![CDATA[M. A.]]></given-names>
</name>
</person-group>
<source><![CDATA[Cómo actúa BadBIOS, elmalware capaz de propagarse por el sonido]]></source>
<year>2013</year>
</nlm-citation>
</ref>
<ref id="B16">
<nlm-citation citation-type="">
<collab>Peritos Informáticos</collab>
<source><![CDATA[Qué es un delito informático y qué tipos existen]]></source>
<year>2021</year>
</nlm-citation>
</ref>
<ref id="B17">
<nlm-citation citation-type="">
<collab>PyAudio Project</collab>
<source><![CDATA[Python Bindings for Por-tAudio]]></source>
<year>2020</year>
</nlm-citation>
</ref>
<ref id="B18">
<nlm-citation citation-type="">
<collab>Qt Group</collab>
<source><![CDATA[One framework. One codebase. Any platform]]></source>
<year>2022</year>
</nlm-citation>
</ref>
<ref id="B19">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Quiroz Tascón]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
<name>
<surname><![CDATA[Zapata Jiménez]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Vargas Mon-toya]]></surname>
<given-names><![CDATA[H. F.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Predicting Cyber-Attacks in Industrial SCADA Systems Through the Kalman Filter Implementation]]></article-title>
<source><![CDATA[Revista TecnoLógicas]]></source>
<year>2020</year>
<volume>23</volume>
<numero>48</numero>
<issue>48</issue>
<page-range>249-67</page-range></nlm-citation>
</ref>
<ref id="B20">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Roldán Álvarez]]></surname>
<given-names><![CDATA[M. A.]]></given-names>
</name>
<name>
<surname><![CDATA[Vargas Montoya]]></surname>
<given-names><![CDATA[H. F.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Ciberseguridad en las redes móviles de telecomunicaciones y su gestión de riesgos]]></article-title>
<source><![CDATA[Revista Científica Ingeniería y Desarrollo]]></source>
<year>2020</year>
<volume>38</volume>
<numero>2</numero>
<issue>2</issue>
<page-range>279-97</page-range></nlm-citation>
</ref>
<ref id="B21">
<nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Shahrad]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Mosenia]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Song]]></surname>
<given-names><![CDATA[L.]]></given-names>
</name>
<name>
<surname><![CDATA[Chiang]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Wentzlaff]]></surname>
<given-names><![CDATA[D.]]></given-names>
</name>
<name>
<surname><![CDATA[Mittal]]></surname>
<given-names><![CDATA[P.]]></given-names>
</name>
</person-group>
<source><![CDATA[Acoustic Denial of Service Attacks on Hard Disk Drives. ASHES '18: Proceedings of the 2018 Workshop on Attacks and Solutions in Hardware Security]]></source>
<year>2018</year>
<page-range>34-9</page-range></nlm-citation>
</ref>
<ref id="B22">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Solairaj]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Prabanand]]></surname>
<given-names><![CDATA[S. C.]]></given-names>
</name>
<name>
<surname><![CDATA[Mathalairaj]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Prathap]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
<name>
<surname><![CDATA[Vignesh]]></surname>
<given-names><![CDATA[L. S.]]></given-names>
</name>
</person-group>
<source><![CDATA[Keyloggers software detection techniques]]></source>
<year>2016</year>
<conf-name><![CDATA[ 10International Conference on Intelligent Systems and Control]]></conf-name>
<conf-loc> </conf-loc>
<page-range>1-6</page-range></nlm-citation>
</ref>
<ref id="B23">
<nlm-citation citation-type="confpro">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Spiros]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
<name>
<surname><![CDATA[Braghin]]></surname>
<given-names><![CDATA[B.]]></given-names>
</name>
</person-group>
<source><![CDATA[4Kdump: Exfiltrating files via hexdump and video capture]]></source>
<year>2019</year>
<conf-name><![CDATA[ Proceedings, Proceedings of the Sixth Workshop on Cryptography and Security in Computing Systems]]></conf-name>
<conf-loc> </conf-loc>
<page-range>1-6</page-range></nlm-citation>
</ref>
<ref id="B24">
<nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Stepen]]></surname>
<given-names><![CDATA[L. J.]]></given-names>
</name>
</person-group>
<source><![CDATA[El archivo de la muerte 42.zip - Como crear una Zip Bomba]]></source>
<year>2020</year>
</nlm-citation>
</ref>
</ref-list>
</back>
</article>
