Download - The Revenge of Angry Birds
![Page 1: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/1.jpg)
Hacking a Bird in the SkyThe Revenge of Angry Birds
Jim Geovedi, Raditya Iryandi, Raoul Chiesa
![Page 2: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/2.jpg)
Satellite CommunicationWhen terrestrial communication FAIL, we PREVAIL!
Arthur C. Clarke1917-2008
![Page 3: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/3.jpg)
Local ISPs
Video Contribution
Teleport PSTN
End Users
End Users
InternetTeleport
Corporate Data Networks(Interactive & Multicast)
Direct Broadcast TVLast-mile Broadband
Broadcast Video toCable Headends
![Page 4: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/4.jpg)
EARTH
Geostationary OrbitAltitude: 35,786 km
Low Earth OrbitAltitude: 500-2,000 km
Medium Earth OrbitAltitude: 8,000-20,000 km
average distance to moon:384,400 km
Highly Elliptical OrbitAltitude: >35,786 km
![Page 5: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/5.jpg)
Propulsion System
Solar Arrays Solar ArraysTelemetry, Attitude Control, Commanding, Fuel, Batteries, Power/Thermal Systems
High Power,Amplifier,Filter
Down-converter,Pre-amplifier,Filter
TransponderTransmitterSection
TransponderReceiverSection
Uplink Downlink
Earth Stations / Antennas
RX AntennaJakarta
TX AntennaJayapura
![Page 6: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/6.jpg)
Telkom-1 Footprint / 108.0º East (C Band)
C Band
38 40 42
![Page 7: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/7.jpg)
Frequency Band Designations
![Page 8: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/8.jpg)
Example of Frequency and Polarisation Distribution
37201
37603
38005
38407
38809
392011
396013
400015
404017
408019
412021
416023
406018
410020
414022
394012
398014
402016
38206
38608
390010
3701T/M
37402
37804
418024
4199T/M
3700 4200
Frequency MHz
Transmit
Ho
rizo
ntal
P
ola
risa
tion
Vert
ical
P
ola
risa
tion
59451
59853
60255
60657
61059
614511
618513
622515
626517
630519
634521
638523
628518
632520
636522
616512
620514
624516
60456
60858
612510
59652
60054
640524
6424CMD
5925 6245
Frequency MHz
Receive
Vert
ical
P
ola
risa
tion
Ho
rizo
ntal
P
ola
risa
tion
Channel spacing = 40 MHz — Usable bandwidth = 36 MHz
![Page 9: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/9.jpg)
VSAT / Very Small Aperture Terminal
‣ Two-way satellite communication
‣ Use small dish antennas (diameter: 75cm-2,4m)
‣ Managed by the HUB(master earth station)
![Page 10: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/10.jpg)
VSAT / Services
‣ One-way multicast
‣ One-way with terrestrial return
‣ Two-way satellite access
![Page 11: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/11.jpg)
Hub EquipmentHub EquipmentHub EquipmentHub Equipment
TV Station / HQ Network Affiliated TV Stations
VSAT Network Topologies / Simplex Transmission
![Page 12: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/12.jpg)
VSAT Network Topologies / Point-to-Point Duplex Transmission
Customer Site
Private Network
Public Network
Customer Site
Private Network
Public Network
CPE CPE
![Page 13: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/13.jpg)
VSAT Network Topologies / Point-to-Multipoint Transmission
CPE CPE CPE
Network or Sites Network or Sites Network or Sites
![Page 14: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/14.jpg)
VSAT Network Topologies / Mobile Antenna Service
Hub Equipment
Customer Site
Private Network
Public Network
![Page 15: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/15.jpg)
VSAT Network Topologies / Star Network
Hub EquipmentHub EquipmentHub EquipmentHub Equipment
Public/Private Networks Networks or Sites
![Page 16: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/16.jpg)
VSAT Network Topologies / Mesh Network
Hub Equipment
Networks or Sites
Hub Equipment
Networks or Sites
Hub Equipment
Networks or Sites
![Page 17: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/17.jpg)
f1 f2 f3
Transponder
f1 f2 f3
Access Methods / FDMA (Frequency Division Multiple Access)
![Page 18: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/18.jpg)
Access Methods / TDMA (Time Division Multiple Access)
f1
Transponder
f1
f1f1 f1
![Page 19: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/19.jpg)
Access Methods / CDMA (Code Division Multiple Access)
Transponder
f1 f1 f1 f1
------------------------------------------
oooooooooooooooooooooooooooooooooooooooooo
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
++++++++++++++++++++++++++++++++++++++++++
![Page 20: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/20.jpg)
Satellite VulnerabilitiesCurrent systems are vulnerable to a variety of attacks, and future systems promise little improvement.
![Page 21: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/21.jpg)
Unless you have millions of dollars and a team of engineers, you have no hope of taking over commercial or governmental satellites.
If someone did put together the power to try such a stunt, they would be more likely to damage a satellite than take it over.
How to Break into Satellites: Not!Carolyn Meinel’s GUIDE TO (mostly) HARMLESS HACKING
Gobbles!
![Page 22: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/22.jpg)
hackers will eventually find a way to hack
![Page 23: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/23.jpg)
network of trust
vendors
government
customers
management
employees
spieS
![Page 24: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/24.jpg)
It is worth noting that the most likely cause of damage to or loss of service from a satellite is the actual operator.
Dan Veeneman
![Page 25: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/25.jpg)
Dan VeenemanLow Earth Orbit Satellites
Dan VeenemanFuture & Existing Satellite Systems
WarezzmanDVB Satellite Hacking
Jim Geovedi, Raditya Iryandi,Hacking a Bird in the Sky: Hijacking VSAT Connection
Jim Geovedi, Raditya Iryandi, Anthony ZboralskiHacking a Bird in the Sky: Exploiting Satellite Trust Relationship
Adam Laurie$atellite Hacking for Fun & Pr0fit!
Leonardo Nve Egea, Christian MartorellaPlaying in a Satellite Environment 1.2
Jim Geovedi, Raditya IryandiHacking Satellite: A New Universe to Discover
1996 1998 2004 2006 2008 2009 2011
Jim Geovedi, Raditya Iryandi, Raoul ChiesaHacking a Bird in the Sky: The Revenge of Angry Birds
![Page 26: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/26.jpg)
Veeneman’s Satellite Hypothetical Attacks
Jam Uplink
Overpower Uplink
Jam Downlink
Denial of Service
?
Takeover Spare Satellite
Raging Transponder Spoofing
Direct Commanding
Command Replay
Insertion
Orbital Positioning
![Page 27: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/27.jpg)
Satellite Operation Centre
![Page 28: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/28.jpg)
![Page 29: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/29.jpg)
![Page 30: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/30.jpg)
![Page 31: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/31.jpg)
![Page 32: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/32.jpg)
FrequencyConversion
GeolocationSpectrumMonitoring
Digital/Analog Record and Replay
Network Gateway
Network Gateway COMSEC Front-end Processor
IP
GroundAntenna
Command and Control
Receivers/Modems
Satellite TT&C Ground Networks
![Page 33: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/33.jpg)
Land Earth Station Attacks
![Page 34: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/34.jpg)
Satellite-based Attacks Against ATMs and Bank NetworksIt's not a big truck. It's a series of tubes.
![Page 35: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/35.jpg)
CORE
TRADE FINANCE TREASURY
DATA WAREHOUSING
ANTI MONEY LAUNDERINGREMITTANCE
CRM
COLLECTION SYSTEMATM SWITCH
INTERNET BANKING
ISLAMIC (SHARIA) BANKING
MOBILE BANKING
CARD MANAGEMENT
![Page 36: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/36.jpg)
VSAT / Automated Teller Machine Networks
Hub EquipmentHub EquipmentHub EquipmentHub Equipment
Core Banking Networks Automated Teller Machines
Standard Network Equipment
ATM ATM ATM ATM
![Page 37: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/37.jpg)
VSAT / Automated Teller Machine Networks
![Page 38: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/38.jpg)
![Page 39: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/39.jpg)
Automated Teller Machine
![Page 40: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/40.jpg)
Automated Teller Machine
![Page 41: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/41.jpg)
OMFGWTFKTHXBYE
![Page 42: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/42.jpg)
![Page 43: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/43.jpg)
The Usual Culprits
People ProblemsWeak Passwords
Lack of AwarenessLack of Skills
System ProblemsOutdated Systems
Insecure ConfigurationsInsecure Protocols
![Page 44: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/44.jpg)
MANAGEMENT PROBLEMS
![Page 45: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/45.jpg)
Distributed Satellite Scanning FrameworkIdentify potential problems at an early stage.
![Page 46: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/46.jpg)
Framework Goals
‣ Dead or Alive status / checking if the bird is still alive
‣ Protocols / understand which protocols the target is running
‣ Service type / knowing which service we can (ab)use
‣ Distributed IP C&C / widening the coverage
![Page 47: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/47.jpg)
Distributed IP C&C
![Page 48: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/48.jpg)
Satellite Carrier Monitoring System
‣ Spectrum Analyser and Digital Spectrum Processor analysis
‣ Reference trace and measurement
‣ Automatic alerts for abnormal and missing carriers
![Page 49: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/49.jpg)
Shared Data
![Page 50: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/50.jpg)
What’s Next?No, the journey doesn't end here.
![Page 51: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/51.jpg)
![Page 52: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/52.jpg)
![Page 53: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/53.jpg)
![Page 54: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/54.jpg)
![Page 55: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/55.jpg)
http://www.dunnspace.com/leo_on_the_cheap.htm
![Page 56: The Revenge of Angry Birds](https://reader034.vdocuments.us/reader034/viewer/2022042605/587c7e501a28ab0a2a8c0014/html5/thumbnails/56.jpg)
Fin.Jim Geovedi <[email protected]>, @geovediRaoul Chiesa <[email protected]>