Packets-in-Packets

No ratings

Presented at Positive Hack Days 2012 by

Noise is everywhere in radio, and in digital radio it is more than a nuisance. With the Packet-in-Packet (PIP) technique, noise can turn a benign packet into a malicious one, allowing for remote Layer 1 frame injection without having a radio.  This talk will show how PIP exploits are written, including working examples for IEEE 802.15.4 and the Nordic RF low-power radios.  The exploit consists of a string which, when transmitted at Layer 7, is reliably changed by noise to become a Layer 1 frame. The attacker controls all fields of the injected packet and can trigger the exploit in a remote network without having his own radio. The vulnerability being exploited is in hardware, and no software bugs are needed.