Intentional electromagnetic interference (IEMI) is the malicious generation and directed use of electromagnetic energy (EM) to disrupt, degrade, or damage electronic equipment, information systems, or electrically controlled processes. IEMI is a subset of electromagnetic interference (EMI) that is deliberate rather than accidental, and is often discussed within the broader field of high‑power electromagnetics (HPEM). Although IEMI is frequently analyzed alongside Cyber-kinetic attacks because it can produce real‑world physical effects on cyber‑physical systems, it does not require software or network access. By definition, a cyber attack is executed via cyberspace against information systems, whereas IEMI involves analog EM coupling into equipment and cables.
Definition and scope URSI characterized IEMI as the "intentional malicious generation of electromagnetic energy introducing noise or signals into electric and electronic systems, thus disrupting, confusing or damaging these systems for terrorist or criminal purposes." International standards subsequently placed IEMI within the HPEM domain: IEC 61000‑2‑13 defines representative radiated and conducted HPEM environments for civil facilities (including narrowband high‑power microwave and ultrawideband transients) and provides canonical waveforms for analysis and testing. IEMI is distinct from naturally occurring disturbances such as Geomagnetic storms and from non‑malicious electromagnetic compatibility (EMC) issues; it is also distinct from nuclear HEMP environments by its localized nature and diverse sources and waveforms.
Threat actors, sources, and coupling mechanisms Known or hypothesized malicious actors include criminals, terrorists, and state or state‑aligned groups. Practical IEMI sources range from portable UWB or mesoband pulse devices and narrowband high‑power microwave (HPM) systems to lower‑power but disruptive radio‑frequency jammers targeting communications (e.g., GNSS). Coupling paths include (i) radiated coupling through apertures and seams, (ii) conducted coupling via attached cables and power or signal lines, and (iii) near‑field coupling from devices in close proximity. Depending on waveform, exposure level, and target susceptibility, effects range from temporary upset and data corruption to latch‑up, component failure, or permanent damage.
Documented incidents Open‑source literature shows criminal misuse of EM tools, including interference with security systems, financial equipment, and communications; many incidents are covert and difficult to attribute forensically. Intentional jamming of GPS/GNSS signals has affected civil aviation and maritime operations. For example, the International Civil Aviation Organization (ICAO) reported repeated GNSS interference originating from North Korea that affected international civil aviation and prompted actions by the ICAO Assembly in 2024–2025. European authorities likewise note antagonistic EM threats to critical services, including the availability of low‑cost jammers and the feasibility of vehicle‑portable HPM sources.
Relevance to critical infrastructure Electric power systems, telecommunications facilities, transportation, finance, healthcare, and other sectors rely on sensitive electronics and networked control. Analyses for the U.S. Federal Energy Regulatory Commission concluded that HPEM/IEMI environments could upset or damage protection relays, substation controls, and SCADA communications if appropriate hardening is not in place. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued guidance to help owners and operators plan graded protections for mission‑essential equipment, addressing IEMI alongside HEMP and GMD.
Standards and testing International standards address characterization of threat environments, immunity testing, and facility‑level protection:
IEC 61000‑2‑13 – defines radiated and conducted HPEM environments and representative waveforms for civil applications (including applicability to IEMI). IEC 61000‑4‑36:2020 – IEMI immunity test methods for equipment and systems, with guidance on deriving test levels from source parameters (Ed. 2.0). IEC 61000‑4‑23 (radiated) and IEC 61000‑4‑24 (conducted) – test methods for protective elements and devices used against HEMP/IEMI disturbances. IEC TS 61000‑5‑10:2017 – installation and mitigation guidance for protecting facilities against HEMP and IEMI (basic EMC publication). IEC 61000‑4‑39:2017 – close‑proximity immunity tests for equipment exposed to radiated fields (9 kHz–6 GHz).
Coupling topologies and protection mapping The topology of EM coupling informs both testing and hardening. The table summarizes common IEMI coupling paths and links each to representative standards and controls.
Mitigation and protection Protection strategies combine architectural, electromagnetic, and operational measures tailored to risk and consequence. Typical controls include:
site design and standoff (to reduce field strengths at targets); building‑level shielding and bonding; shielded rooms/racks and electromagnetic zoning; surge protection and HEMP/IEMI filters on penetrations; cable routing, ferrites, and feedthroughs; configuration management to minimize apertures; and monitoring and incident‑response playbooks for suspected EM attacks.
Legal and regulatory context International radio regulation prohibits "harmful interference" to safety services and legitimate radiocommunications. Many jurisdictions explicitly ban the sale and use of RF jamming devices; for example, U.S. federal law prohibits operating, marketing, or importing signal jammers, with civil and criminal penalties enforced by the Federal Communications Commission (FCC).
Comparison with software‑based cyber tactics While IEMI is not a cyber attack, it can create effects analogous to those produced by software‑centric tactics. The table below provides a non‑exhaustive crosswalk for readers of both security and engineering backgrounds.
Note: This crosswalk illustrates parallels in effects. IEMI remains a physical‑EM vector and, unlike software‑borne Cyber-kinetic attacks, does not require access to or exploitation of networked systems.
Relation to other topics IEMI is a deliberate subset of EMI and part of the broader discipline of HPEM. In cyber‑physical contexts, IEMI is often analyzed alongside Cyber-kinetic attacks because of similar real‑world consequences, but it is not a cyber‑sourced attack.
… excerpt ends here. Continue reading the full article.
