iot sdr and car security
play

IoT, SDR, and Car Security Aaron Luo Who am I Aaron Luo Come from - PowerPoint PPT Presentation

May 05, 2023 •256 likes •1.36k views

IoT, SDR, and Car Security Aaron Luo Who am I Aaron Luo Come from Taiwan Start security research since 15 th Community Experience CHROOT/HITCON (security group) - member III,CSIST (government organizations) - training course

  1. Firmware Analysis • extract some interesting things from file system (for example, ssh key data and configuration, /etc /shadow…etc.)

  2. Let’s play SDR (software defined radio)

  3. What is SDR • Software-Defined Radio – Generate any radio protocol if device support that frequency – Writing Modulation / Demodulation program by yourself – Simply inspect the radio spectrum

  4. SDR Tools • HackRF tools • Gqrx - Display the spectrum waterfall • GNURadio – GUI tool for modulation/demodulation • OpenBTS – open source tool for building GSM Station • Artemis – Identify protocol • Baudline – for analysis the I/Q data

  5. If you have the SDR

  6. Sniffing walkie-talkie conversation DEMO

  7. Jamming the radio signal (like DDOS) DEMO

  8. Sniffing airplane <-> ground station ads-b signal

  9. Sniffing GSM – SMS traffic

  10. Putting some image on spectrum spectrum_painter

  11. Let’s analysis the Drone radio • How to find the frequency? – FCC ID – Inspect by SDR

  12. Radio Signal Analysis P3A use two modulation/demodulation to transfer data with 2.4GHz ISM band

  13. RC to Drone radio spectrum (FHSS) • Control drone direction (up down left right) • Frequency 2.400~2.483GHz, each channel about 1MHz

  14. DSSS - Drone to RC radio spectrum • For drone to remote controller image transmission • Frequency 2.4015~2.4815 GHz • split into 6 channels, each channel is about 10MHz

  15. Finally we found… • Images have no checksum mechanism, so we can jamming the radio frequency to show wrong image to controller

  16. DEMO

  17. Next section: GPS Modules

  18. Which function is associate with GPS? • No-fly zone • Return to home • Follow me • Waypoint

  19. How to spoof the GPS location? • Use the SDR • There have a good open-source GPS simulator in GitHub, called gps-sdr-sim, but it have some limitation, before you want fake a location, should wait for few minutes to generate the I/Q data • So we improve the code, let it can in real-time generate GPS signal and can be controlled with the joystick.

  20. Live Demo (open your mobile maps)

  22. Control GPS by Joystick DEMO

  23. How to Increase the radio range? • Buy some active directional antenna

  24. Hijacking Drone by Joystick DEMO

  25. How to detect the fake GPS signal? • You need a GPS module to debug GPS signals. – U-blox M8N

  26. U-blox M8N built in anti-spoofing feature (Only for GNSS, not support the GPS)

  27. How to detect the fake GPS signal? • Validate the time between satellite time and real time

  28. How to detect the fake GPS signal? • Check the motion speed between point to point – For example it is impossible to change your location from Taiwan to Serbia in one second

  29. How to detect the fake GPS signal? • Validate the GPS sub-frame data

  30. Develop the fake GPS detector • Board: RaspberryPI • GPS modules: u-blox

  31. Detect Fake GPS Signal DEMO

  32. Catch The Bad Guys DEMO

  33. Car Security

  34. Car Architecture (Reference from: http://knoppix.ru/sentinel/130312.html)

  35. CAN-BUS Network (Reference from: http://www.aa1car.com/library/can_systems.htm)

  36. Remote attack vector • Remote keyless • IVI System • Wireless - OBDII dongle

  37. Remote keyless • SDR – Record/Replay – Analysis the protocol – Proxy Tunnel

  38. IVI System • Connected with can-bus • Wifi • Bluetooth • Radio • Web browser

  39. A real case

  40. IVI System

  41. Risk of IVI and ECU Widows lock Unlock door IVI CAN-BUS ECU App GPS Center automatic brake systems collision warning systems

  42. Power on the IVI without the Car • Use 12V Scrap computer’s power supply

  43. Overview Product: T***h*i Create 2nd Generation OS: Android 4.4.4 Memory : 1G GPS: GLONASS/Galilean satellites - supports H.265 video decode Radio: Analogue with RDS 6686 DVD: Yes Bluetooth: Yes

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

Network security Network security Foundations: what is security? cryptography Network Security Network Security authentication message integrity key distribution and certification Security in practice: Srinidhi Varadarajan

332 views • 6 slides
Security Security as term, Possible Security violations Authentication Criteria for

Security Security as term, Possible Security violations Authentication Criteria for

BS1 WS19/20 topic-based slides Security Security as term, Possible Security violations Authentication Criteria for Trust in Computer Systems Three hearts of Windows Security DACLs A Look at Security System is secure if

988 views • 20 slides
CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC 410 / 611 : Operating Systems CPSC410/611: Security Security Security Attacks Security Threats Crypto Authentication Examples SSL Security Threats Breach of confidentiality unauthorized access to

458 views • 18 slides
Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security WS 06/07 Seminar Prof. Dr.-Ing. Jana Dittmann &amp; Dr.-Ing. Claus Vielhauer with support from Tobias Scheidat

419 views • 16 slides
1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

Course Overview Course Requirements EECS 498-7/8 Cryptography and Network Security: www.citi.umich.edu/u/honey/security Principles and Practice (Third Edition) Computer Security Monday &amp; Friday, 9:00 10:30 William Stallings

670 views • 19 slides
A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security Introducing Spring Security View layer security Whats coming in Spring Security 3 E-mail: craig@habuma.com Blog: http://www.springloaded.info

452 views • 19 slides
Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security Foundations: what is security? cryptography authentication message integrity key distribution and certification Security in practice:

634 views • 36 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CSCE Intro to Computer Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies Security

472 views • 20 slides
SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY TESTING CONCEPTS 3. SECURITY TESTING TYPES 4. TOP 10 SECURITY RISKS Few Security Breaches Date: 2013-14 September 2016, while in negotiations to

404 views • 18 slides
Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in distributed systems arises from the desire to share resources Resources must be protected against unauthorized access, as enemies (attackers)

1.16k views • 67 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CPSC 410/611 Operating Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies

419 views • 19 slides
International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International Security What is security? Freedom from threats to core values? Contestation over referent object: Individual? State? System? How is security achieved?

715 views • 11 slides
Security 101 Definition of Information Security Information security is the protection of

Security 101 Definition of Information Security Information security is the protection of

Computing Services Information Security Office Security 101 Definition of Information Security Information security is the protection of information and systems from unauthorized access, disclosure, modification, destruction or disruption. The

469 views • 22 slides
Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety Sensitive Information Not for public or media release F.S. 119.071. Required by law, rule and regulation: Homeland Security Directive 5 and 8.

393 views • 11 slides
Com puter Security Part One Security as a subject Security is an old problem in the

Com puter Security Part One Security as a subject Security is an old problem in the

Com puter Security Part One Security as a subject Security is an old problem in the computing world, and are parallel to even older problems outside computing Required level of security is always related to what you protect

237 views • 23 slides
Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn

Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn

ITS335 Intro. to Security Concepts Threats, Attacks, Assets Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 2

965 views • 34 slides
NuFirewall Open-source authenticating firewall NuFirewall - RMLL 2010 NuFirewall - RMLL 2010

NuFirewall Open-source authenticating firewall NuFirewall - RMLL 2010 NuFirewall - RMLL 2010

NuFirewall Open-source authenticating firewall NuFirewall - RMLL 2010 NuFirewall - RMLL 2010 Who's that guy ? Eric Leblond CTO EdenWall Technologies NuFW project leader Netfilter developper Ulogd2 maintener Regit

1.06k views • 24 slides
Atlan?cWave-SDX: An Interna?onal SDX to Support Science Data Applica?ons Jeronimo A. Bezerra and

Atlan?cWave-SDX: An Interna?onal SDX to Support Science Data Applica?ons Jeronimo A. Bezerra and

Atlan?cWave-SDX: An Interna?onal SDX to Support Science Data Applica?ons Jeronimo A. Bezerra and Joaqun Chung &lt;jbezerra@fiu.edu&gt;, &lt;joaquin.chung@gatech.edu&gt; Outline Introducing LSST as an Use Case Presen?ng LSST

371 views • 18 slides
ARP Address Resolu,on Protocol Security Joo Paulo Barraca

ARP Address Resolu,on Protocol Security Joo Paulo Barraca

ARP Address Resolu,on Protocol Security Joo Paulo Barraca jpbarraca@ua.pt 1 Networking Basics Communica,on in packet networks rely on several

319 views • 20 slides
Virtualization &amp;&amp; (and) || (or) ^^ (exor) Security Usual OS diagram Traditional

Virtualization &amp;&amp; (and) || (or) ^^ (exor) Security Usual OS diagram Traditional

Virtualization &amp;&amp; (and) || (or) ^^ (exor) Security Usual OS diagram Traditional kernel: Control HW access CPU (timesharing) (virtual) memory Disk (File system) Devices (net, console, video, audio etc) Kernel

614 views • 18 slides
IPv6 Security awareness By Musa Stephen HONLUE Trainer@AFRINIC Stephen.honlue@afrinic.net 1

IPv6 Security awareness By Musa Stephen HONLUE Trainer@AFRINIC Stephen.honlue@afrinic.net 1

IPv6 Security awareness By Musa Stephen HONLUE Trainer@AFRINIC Stephen.honlue@afrinic.net 1 04/12/2015' Presentation Objectives ! Create awareness of IPv6 Security implications. ! Highlight technical concepts on IPv6 weaknesses ! Describe

822 views • 36 slides
Shadow MACs: Scalable Label-switching for Commodity Ethernet Kanak Agarwal, Colin Dixon*, Eric

Shadow MACs: Scalable Label-switching for Commodity Ethernet Kanak Agarwal, Colin Dixon*, Eric

Shadow MACs: Scalable Label-switching for Commodity Ethernet Kanak Agarwal, Colin Dixon*, Eric Rozner, John Carter IBM Research, Austin, TX * now at Brocade 1 SDN: The Future! Rose-colored glasses: Fine-grained, dynamic control

719 views • 19 slides
Packet Sniffing and Spoofing 1 Shared Networks Every network packet reaches every computer's

Packet Sniffing and Spoofing 1 Shared Networks Every network packet reaches every computer's

Packet Sniffing and Spoofing 1 Shared Networks Every network packet reaches every computer's network Interface card, which then filters packets based on the MAC address. A network packet has multiple concatenated components. 2 How Packets

625 views • 39 slides
CSE 127: Introduction to Security Lecture 11: Network Attacks Nadia Heninger and Deian Stefan

CSE 127: Introduction to Security Lecture 11: Network Attacks Nadia Heninger and Deian Stefan

CSE 127: Introduction to Security Lecture 11: Network Attacks Nadia Heninger and Deian Stefan UCSD Fall 2019 Some material from Stefan Savage, David Wagner, and Nick Weaver Threat Modeling for Network Attacks Basic security goals:

804 views • 31 slides

More recommend