Recent & Upcoming Talks

In this talk we will explore recent research on real world wireless security protocols. We will cover standard protocols such as Bluetooth pairing and session establishment and proprietary ones such as IoT application layer protocols used to secure traffic between companion mobile applications and electric scooters and fitness trackers.

Keynote given at ACSW'24 (EuroS&P Workshop) covering Automotive Bluetooth Security and E-Spoofer.

Keynote given at RESSI'24 covering, among others, BLUFFS, E-Spoofer, and BreakMi.

Talk covering, among others, BLUFFS, E-Spoofer, and BreakMi.

YouTube (WiSec'23)

YouTube (37c3)

This lecture overviews recent and impactful research on Bluetooth security and privacy. We will cover protocol-level vulnerabilities in the Bluetooth specification affecting billions of devices, such as KNOB, BIAS, BLUR, and BLUFFS.

Abstract Ciao! We present the BLUFFS attacks (CVE-2023-24023), six novel attacks breaking Bluetooth’s forward and future secrecy. Our attacks enable device impersonation and machine-in-the-middle across sessions by compromising and re-using one session key.

In this lecture we cover an Introduction about Bluetooth security, its main transports (BC, BLE), procedures (discovery, connect) and logical entities (Host, Controller, HCI). Then we look at Bluetooth security architecture and the specific BC/BLE algorithms and protocols.

Xiaomi is the leading company in the fitness tracking industry. Successful attacks on its fitness tracking ecosystem would result in severe consequences, including the loss of sensitive health and personal data.

This talk covers our recent research on the (in)securities of proprietary and standard wireless security protocols used daily by millions of devices and users. In particular, I will cover the BLUR attacks on Bluetooth, a novel class of threats capable of exploiting Bluetooth Classic from Bluetooth Low Energy and vice versa.

In this webinar we talk about, Protocol-Level Bluetooth Threats (PLBT), a novel and relevant class of threats for automotive security. Specifically, we explain what they are, why they are relevant, and how they can be evaluated on modern cars.

More information about the speech on quattroruote.it and linkedin pulse. More information about the event here.

Bluetooth is a ubiquitous technology for low-power wireless communications. It is employed by billions of devices, including smartphones, laptops, wearables, and cars. As a technology, Bluetooth is specified in an open and quite complex standard.

Bluetooth is a ubiquitous technology for low-power wireless communications employed by billions of devices, including mobiles, wearables, and cars. Bluetooth is specified in a complex yet open standard that defines two transports: Bluetooth Classic (BC) for high throughput services and Bluetooth Low Energy (BLE) for very low power services.

Mobile devices such as phones, tablets, and wearables enable proximity services on a large scale. These services use wireless technologies (such as Wi-Fi and Bluetooth) to connect users within a specific range and exchange information.

Bluetooth is a ubiquitous technology for low power wireless communications. Bluetooth runs on billions of devices including mobile, wearables, home automation, smart speakers, headsets, industrial and medical appliances, and vehicles. As a result, Bluetooth’s attack surface is huge and includes significant threats such as identity thefts, privacy violations, and malicious device control.

Bluetooth is a ubiquitous technology for low power wireless communications. Bluetooth runs on billions of devices, including mobile, wearables, home automation, smart speakers, headsets, industrial and medical appliances, and vehicles. As a result, Bluetooth’s attack surface is huge and includes significant threats such as identity thefts, privacy violations, and malicious device control.

In this interview we present the KNOB attack as part of the CyberWire’s Research Saturday session. Alternative link.