research
∙
05/12/2022
Evil Never Sleeps: When Wireless Malware Stays On After Turning Off iPhones
When an iPhone is turned off, most wireless chips stay on. For instance,...
share
research
∙
02/11/2022
Very Pwnable Network: Cisco AnyConnect Security Analysis
Corporate Virtual Private Networks (VPNs) enable users to work from home...
research
∙
12/10/2021
Attacks on Wireless Coexistence: Exploiting Cross-Technology Performance Features for Inter-Chip Privilege Escalation
Modern mobile devices feature multiple wireless technologies, such as Bl...
research
∙
11/09/2021
Ghost Peak: Practical Distance Reduction Attacks Against HRP UWB Ranging
We present the first over-the-air attack on IEEE 802.15.4z High-Rate Pul...
research
∙
08/16/2021
Happy MitM: Fun and Toys in Every Bluetooth Device
Bluetooth pairing establishes trust on first use between two devices by ...
research
∙
06/30/2020
Firmware Insider: Bluetooth Randomness is Mostly Random
Bluetooth chips must include a Random Number Generator (RNG). This RNG i...
research
∙
06/17/2020
Frankenstein: Advanced Wireless Fuzzing to Exploit New Bluetooth Escalation Targets
Wireless communication standards and implementations have a troubled his...
research
∙
05/29/2020
DEMO: Attaching InternalBlue to the Proprietary macOS IOBluetooth Framework
In this demo, we provide an overview of the macOS Bluetooth stack intern...
research
∙
05/29/2020
DEMO: Extracting Physical-Layer BLE Advertisement Information from Broadcom and Cypress Chips
Multiple initiatives propose utilizing Bluetooth Low Energy (BLE) advert...
research
∙
05/18/2020
Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication
Secure Device Pairing (SDP) relies on an out-of-band channel to authenti...
research
∙
05/17/2020
Lost and Found: Stopping Bluetooth Finders from Leaking Private Information
A Bluetooth finder is a small battery-powered device that can be attache...
research
∙
05/14/2020
MagicPairing: Apple's Take on Securing Bluetooth Peripherals
Device pairing in large Internet of Things (IoT) deployments is a challe...
research
∙
05/02/2019
Inside Job: Diagnosing Bluetooth Lower Layers Using Off-the-Shelf Devices
Bluetooth is among the dominant standards for wireless short-range commu...
research
∙
05/02/2019