Universal Radio Hacker: A Suite for Analyzing and Attacking Stateful Wireless Protocols
Universal Radio Hacker: A Suite for Analyzing and Attacking Stateful Wireless Protocols
复制标题
Universal Radio Hacker：用于分析和攻击有状态无线协议的套件
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
A. Noack
中科院分区：
文献类型：
--
作者：
Johannes Pohl;A. Noack
物联网设备使用的专有无线协议是在尺寸和能源限制下设计的，通常忽视安全性。因此，打开无线门锁或偷车等攻击是现实的威胁。软件定义无线电 (SDR) 提出了一种研究此类协议的通用方法，因为它们可以在几乎任意频率上发送和接收。然而，大多数 SDR 工具都专注于 HF 方面，几乎不支持分析实际协议逻辑，因此必须使用自定义工具或 Excel 电子表格。在本文中，我们介绍了 Universal Radio Hacker (URH)，这是一种开源工具，专为从头开始进行协议分析而设计，并实现了完整的工作流程，包括 SDR 接口、直观解调、可定制解码、模糊支持和模拟组件。 URH 将过程分为解释、分析、生成和模拟阶段，其中一个阶段的结果可以转移到另一阶段。该软件提供了协议调查所需的所有功能，而不会给用户带来复杂性。 URH 是为理论导向的研究人员开发的，他们希望专注于协议逻辑并尽量避免深入 HF 和数字信号处理的深度。
Proprietary wireless protocols used by IoT devices are designed under size and energy constraints, often neglecting the security. Therefore, attacks like opening wireless door locks or stealing cars are realistic threats. Software Defined Radios (SDR) propose a generic way to investigate such protocols as they can send and receive on nearly arbitrary frequencies. Most tools for SDR, however, focus on the HF side and offer little support for analyzing the actual protocol logic so custom tools or excel spreadsheets must be used. In this paper, we present the Universal Radio Hacker (URH), an open source tool which is designed for protocol analysis from the ground up and implements a full workflow including interfaces for SDRs, intuitive demodulation, customizable decodings, fuzzing support and a simulation component. URH splits the process down into the phases Interpretation, Analysis, Generation and Simulation, whereby results from one phase can be transferred to the other. The software offers all features needed for protocol investigation without overwhelming users with complexity. URH is developed with theoretic oriented researchers in mind who want to focus on protocol logic and try to avoid diving into the depths of HF and Digital Signal Processing.