4 papers
The hidden life of signals: Time-domain inferences and other privacy attacks on everyday devices
Larry Hernandez
In privacy research on radiofrequency-based protocols, the dominant focus has remained on Bluetooth, WiFi, and Zigbee, while a broader and arguably more consequential attack surfac…
Trouble at the top: can Python extend the chains of trust in infrastructure firmware?
Larry Hernandez, Sergey Bratus
Compiled Python bytecode (PYC) has become an essential part of network switches, routers, and other network infrastructure devices. Our analysis shows that its integrity is implici…
TLF: Rapid Characterization of RF Transceiver Parameters in Embedded Systems via Bus-Level Interception
Larry Hernandez, Sergey Bratus
We present TLF (Transceiver Lifter Framework), a tool for recovering RF transceiver configuration and runtime behavior from bus-level traces captured between a microcontroller and…
The Hidden Life of Public Safety Communications Signals: A Comparative Security Analysis of TETRA, TETRAPOL, and P25
Larry Hernandez, Sergey Bratus
Public-safety agencies and critical infrastructure operators rely on trunked land-mobile radio (LMR) systems, based on P25, TETRA, and TETRAPOL. These systems are expected to prote…