Abstract：
Information technology equipment (ITE) processing sensitive information can have its security compromised by unintentional electromagnetic radiation. Appropriately assessing likelihood of a potential compromise relies on radio frequency (RF) engineering expertise-specifically, requiring knowledge of the associated causal factors and their interrelationships. Several factors that can cause unintentional electromagnetic emanations that can lead to the compromise of ITE have been found in the literature. This paper confirms the list of causal factors reported in previous work, categorizes the factors as belonging to threat, vulnerability, or impact, and develops an interpretive structural model of the vulnerability factors. A participatory modelling approach was used consisting of focus groups of RF engineers. The resulting hierarchical structural model shows the relationships between factors and illustrates their relative significance. The paper concludes that the resulting model can motivate a deeper understanding of the structural relationship of the factors that can be incorporated in the RF engineers\' assessment process. Areas of future work are suggested.
摘要：
处理敏感信息的信息技术设备（ITE）可能会因无意的电磁辐射而损害其安全性。适当评估潜在妥协的可能性依赖于射频(RF)工程专业知识-特别是，需要了解相关的因果因素及其相互关系。在文献中已经发现了可能引起可能导致ITE损害的无意电磁发射的几个因素。本文证实了以前工作中报告的因果因素列表，将这些因素归类为属于威胁，脆弱性,或影响，并建立了脆弱性因素的解释性结构模型。使用了由RF工程师焦点小组组成的参与式建模方法。由此产生的层次结构模型显示了因素之间的关系，并说明了它们的相对意义。本文得出的结论是，所得到的模型可以激发对可以纳入RF工程师评估过程的因素的结构关系的更深入的理解。建议今后的工作领域。
