RF Exploitation - IoT and OT Hacking with Software-Defined Radio

Explore RF exploitation techniques for IoT and OT hacking using Software-Defined Radio in this 45-minute RSA Conference talk. Delve into the evolving IoT/OT landscape, threat models, and the radio wave spectrum. Learn about SDR, GNU Radio, and hardware/software tools for initial device profiling. Examine various phases of RF attacks, including information gathering, signal hunting, and replay attacks. Investigate case studies like the Dallas Siren Hack and Car RKE vulnerabilities. Gain insights into RF protocols, types of RF attacks, and the Internet of Radio Vulnerability. Discuss privacy concerns, rules, and regulations surrounding wireless exploitation. Acquire practical knowledge to understand common security concerns in wireless communication systems, recognize the prevalence of sophisticated wireless exploits, and develop a holistic view of IoT device security and privacy.

RSAConference 2019 San Francisco March 4-8 Moscone Center
Agenda
Evolving loT/OT landscape
Internet of things threat model
Inside the radio wave spectrum?
Why Focus on RF Security?
IoT Components for Smart Building
PHY LAYER
So what is SDR?
GNU Radio GNU Radio is a framework that enables users to design simulate, and deploy highly capable real world radio systems.
Hardwares and Softwares
Initial Profiling of our device
Phases of RF Attacks
Information Gathering
Information Extracted from FCC
Frequency
Modulation
Transmission
Case study: Dallas Siren Hack
Replay Attack (Disadvantages)
How is it done?
Signal Hunting
Case study: Car RKE
RF Protocols
Types of RF Attacks
Internet of Radio Vulnerability
Privacy, Rules, and Regulations
Walk through of what we covered
APPLY
Thank You..!