Radio transmissions have become an important part of the modern way of communicating. Originally a clever way to transport simple signals and the human voice, they became a mean to transport digital data and control all kinds of devices. The most famous protocols are Wi-Fi and Bluetooth, but there are many custom protocols used to control devices in home automation and industrial environments: gates, car lockers, drones, alarms, robots, cranes... An unintended behavior in these devices could cause problems also in terms of safety and privacy, and this brought researchers into studying possible vulnerabilities and attacks inside radio protocols. With this objective, a flexible tool called RFQuack has been developed. It makes it possible for a researcher to collect, analyze, modify, and transmit radio packets, as well as to implement routines and exploits through the Python programming language. This thesis presents an extension of RFQuack, called NetQuack, which transforms this tool into a distributed system where different users can contribute to it by uploading radio packets and searching for them according to their content or other parameters. This allows researchers to conduct surveys on a large collection of signal captures. The main challenge in the implementation of such a system resides in reliability and scalability and these goals have been reached using the cloud infrastructure of Amazon Web Services. NetQuack has been tested with different workloads and results show that it can handle a continuous stream of thousands of packets per hour.
Le trasmissioni radio sono diventate parte importante del modo attuale di comunicare. In origine un metodo intelligente per trasportare semplici segnali e la voce umana, sono diventati un mezzo per trasportare dati digitali e controllare ogni tipo di dispositivo. I protocolli più famosi sono Wi-Fi e Bluetooth, ma ci sono molti protocolli personalizzati per controllare dispositivi nell'ambito della domotica e dell'industria: cancelli, automobili, droni, allarmi, robot, gru... Un comportamento inatteso in questi dispositivi potrebbe causare problemi anche in termini di sicurezza e privacy, e questo ha portato i ricercatori a studiare possibili vulnerabilità e attacchi nei protocolli radio. Con questo obiettivo, è stato sviluppato uno strumento flessibile chiamato RFQuack. Esso rende possibile per i ricercatori ricevere, analizzare, modificare e trasmettere pacchetti radio, così come implementare routine ed exploit attraverso il linguaggio di programmazione Python. Questa tesi presenta un'estensione di RFQuack, chiamata NetQuack, che trasforma questo strumento in un sistema distribuito dove diversi utenti possono contribuirvi caricando pacchetti radio ed eseguendo ricerche su di essi in base al loro contenuto o altri parametri. In questo modo abbiamo creato uno strumento utile per svolgere ricerche partendo da una grande raccolta di segnali. La principale sfida nell'implementazione di questo sistema risiede nell'affidabilità e nella scalabilità e questi obiettivi sono stati raggiunti usando l'infrastruttura cloud di Amazon Web Services. NetQuack è stato testato con diversi carichi di lavoro e i risultati mostrano che può gestire un flusso continuo di migliaia di pacchetti per ora.
NetQuack : a distributed system for collecting and searching radio signals
Fiorillo, Alessandro
2019/2020
Abstract
Radio transmissions have become an important part of the modern way of communicating. Originally a clever way to transport simple signals and the human voice, they became a mean to transport digital data and control all kinds of devices. The most famous protocols are Wi-Fi and Bluetooth, but there are many custom protocols used to control devices in home automation and industrial environments: gates, car lockers, drones, alarms, robots, cranes... An unintended behavior in these devices could cause problems also in terms of safety and privacy, and this brought researchers into studying possible vulnerabilities and attacks inside radio protocols. With this objective, a flexible tool called RFQuack has been developed. It makes it possible for a researcher to collect, analyze, modify, and transmit radio packets, as well as to implement routines and exploits through the Python programming language. This thesis presents an extension of RFQuack, called NetQuack, which transforms this tool into a distributed system where different users can contribute to it by uploading radio packets and searching for them according to their content or other parameters. This allows researchers to conduct surveys on a large collection of signal captures. The main challenge in the implementation of such a system resides in reliability and scalability and these goals have been reached using the cloud infrastructure of Amazon Web Services. NetQuack has been tested with different workloads and results show that it can handle a continuous stream of thousands of packets per hour.| File | Dimensione | Formato | |
|---|---|---|---|
|
Tesi Alessandro Fiorillo.pdf
accessibile in internet per tutti
Dimensione
4.27 MB
Formato
Adobe PDF
|
4.27 MB | Adobe PDF | Visualizza/Apri |
I documenti in POLITesi sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
https://hdl.handle.net/10589/169237