Let's See What's Out There - Mapping the Wireless IOT
summary
Claims that the wireless IoT is a massive blind spot with 26 billion devices predicted and homes getting up to 500 devices, shows concrete failures: finding an insecure rejoin in ZigBee-like networks that returns active network keys encrypted with a public link key. Uses SDR with GNU Radio and visual tools (Inspectrum, Baudline), builds a Scapy-based scanner (passive now) and a secp test tool, successfully impersonates a gateway and unlocks a smart door in the lab.
AI-written summary · about
chapters (32)
- 0:00Introduction
- 1:40What is the Internet of Things
- 3:20Problems with IoT
- 4:35Life time
- 5:38Security
- 7:53Keyless Entry Systems
- 9:22Knowledge Gap
- 10:13Whats out there
- 12:15How to discover signals
- 13:33Additional information
- 14:43Product documentation
- 15:45Visual signal identification
- 17:01Medical frequency band
- 23:53Manchester encoding
- 26:35Get your basics right
- 27:37Choose a proper RF gain
- 29:18Check what signal you are analyzing
- 30:55Security issues
- 31:32Encrypted communication
- 32:22Key exchange
- 33:17Jamming
- 34:27Pairing
- 35:52Message authentication spoofing
- 36:56Insecure return procedures
- 37:36Security testing tool
- 38:49Scanning a hotel
- 39:37How it looks like
- 40:25Device on channel 20
- 41:38SECP4 testing
- 42:53SigPT sector
- 46:13Usability
- 47:50Conclusion
related talks
30mDemystifying IoT/OT Hacks With SDR
55mWhere is this IoT bus taking us?
33mThe IoT for Real - Beyond Simplistic Thinking and Models
13mThe dark side of IoT
33mThe Internet of (Better) Things
27mThe IoT storm... Will we survive the coming deluge?
01h 10mAttacking IoT Telemetry
23mSmart Devices Gone Rogue: IOT Vulnerabilities and Designing For Security