Security and Privacy Analysis of Embedded Wireless Systems

<p>Continued advancement in wireless embedded systems design and hardware integration has introduced us to a world where such devices are an integral part of the modern citizen's life. Due to this proliferation in usage, wireless embedded devices demand a thorough study into their security and privacy risks. This thesis studies embedded systems with a view to analyzing possible risks. Two systems have been considered in particular -- Tire Pressure Monitoring Systems (TPMS) and Automatic Meter Reading (AMR) systems. Both of these are widely used commodity wireless systems which contain information sensitive to user privacy. However, they did not get their due attention perhaps because we do not interact with them directly. Thus, this thesis studies the security and privacy of these systems.</p> <p>Both TPMS and AMR systems communicate using wireless protocols proprietary to respective manufacturers. In both cases, we perform reverse engineering to discover the proprietary communication protocol before we can analyze them. TPMS is a system mandated in automobiles manufactured after 2007. Pressure sensors, embedded in every tire, wirelessly send out periodic pressure readings to the car computer. We have studied and discovered that the system is vulnerable to eavesdropping and packet spoofing attacks. The second system, AMR, is a wireless data collection system for utility (gas, water, electric) meters. These systems wirelessly transmit periodic meter reading, allowing a mobile receiver without any proximity requirement to collect updates. We show through our experiments that the system is exposed to risks such as eavesdropping, packet spoofing, and user profiling.</p>

Name thesis:degree_name

M.S.

Level thesis:degree_level

Campus Access Thesis

Discipline thesis:degree_discipline

Computer Science and Engineering

Year

2012

Author dc:creator

• Rouf, Ishtiaq

Contributors dc:contributor

• Wenyuan Xu

• Computer Sciences
• Electrical and Computer Engineering
• Engineering
• Physical Sciences and Mathematics
• Embedded Systems
• Privacy
• Reverse Engineering
• Security
• Wireless Communication

Statement dc:rights

• © 2012, Ishtiaq Rouf

Repository record dc:identifier

https://scholarcommons.sc.edu/etd/797

OAI identifier oai:identifier

oai:scholarcommons.sc.edu:etd-1798