It's in the Airwaves - Deconstructing 2017's Biggest RF Attacks

Explore the evolution of network security technology and the impact of Software Defined Radio on wireless attacks in this 48-minute RSA Conference talk. Delve into the vulnerabilities of wireless communication systems in the Internet of Things, from compromised insulin pumps to hacked public safety systems. Witness technical demonstrations of high-profile wireless attacks, including the Dallas Tornado Siren Attack and St. Jude/Abbott Pacemaker Attack. Gain insights into the ease and prevalence of wireless exploitation, RF fuzzing, and defensive security applications. Learn about the defining attributes of RF versus wired networks, and understand how promiscuity affects reconnaissance and attribution in wireless environments. Discover the challenges of wireless network sniffing and the implications of embedded system design compromises. Through live demos and in-depth analysis, grasp the changing landscape of offensive and defensive security in the era of commodified Software Defined Radio.

Intro
Acknowledgements
Software Defined Radio
Wireless in 2018
Embedded == Design by Compromise
IP Network Sniffing is Easy
Wireless Network Sniffing is Hard
Prototype Integrated Designs
Design Optimization
Offensive Security Research
RF Fuzzing
Defensive Security Applications
RF vs. Wired: Defining Attributes
Promiscuity Makes Recon Easy
Promiscuity and Attribution
Siren Jack
Dallas Tornado Siren Attack Demo
St. Jude / Abbott Pacemaker Attack
BlueBorne
Wireless lot Worms (1/2)
Physical Layer State Machine Attacks
Physical Layer State Machine Attack Demo
Chipset Fuzzing with TumbleRF
Conclusions
Intro