PENTEST IOT- Pengantar software defined radio (SDR) Depok, 18 Oktober 2019 dalam workshop First TC 2019

1. PENTEST IOT
PENGANTAR SOFTWARE DEFINED RADIO
Aries Syamsuddin, S.Kom, M.T
Depok– 18 Oktober 2019

2. Profil Singkat
Nama : Aries Syamsuddin, S.Kom, M.T
- Sarjana Ilmu Komputer,Universitas Brawijaya,2008; Magister
Informatika,ITB, 2014
- Co Founder / Wakil Ketua Riset NCSD
- Wakil Ketua Bidang Manajemen TI - Komunitas TIK TNI AD (TIK-AD)
- CTO CIKUR (@CikurID) & DroneHackers (@DroneHackers)
- ASN di Pemkab Blitar, Jatim
- Member Indonesia IoT Forum,AI Indonesia Forum, IHP, AFDI dan ICSF

3. KEAMANAN INFORMASI
Keamanan
Informasi
•Kerahasiaan
•Ketersediaan
•Integritas
Tujuan
Organisasi
Organisasi

5. Pendekatan Holistik
Risiko & Ancaman menuntut pendekatan holistik untuk Keamanan siber:
• Pendekatan Holistik: Keamanan siber "online“ dan "offline“, Keamanan harus
terintegrasi secara baik di tingkat organisasi
• Budaya Keamanan: Kesadaran keamanan & pendidikan harus fokus pada
pendekatan holistik, dan melibatkan serta memberdayakan individu, komunitas
dan masyarakat
• Pendekatan Cerdas: Analisis Kecerdasan dan Risiko harus melihat keamanan siber
dari luar ke dalam, serta dari dalam ke luar.

6. MANAJEMEN KEAMANAN INFORMASI
a. Mengidentifikasi ancaman yang dapat menyerang sumber
daya informasi organisasi
b. Mendefenisikan risiko yang dapat disebabkan oleh
ancaman-ancaman bagi organisasi
c. Menentukan kebijakan keamanan informasi
d. Mengimplementasikan pengendalian untuk mengatasi
risiko-risiko organisasi

7. Presidential
Policy
Directive 21
(PPD-21)

8. CYBER THREAT FRAMEWORK
www.dni.gov

9. REVOLUSI INDUSTRI

10. Society 5.0 Transformasi Kehidupan

11. AI dan IoT

12. 5 Prioritas

13. CYBER SECURITY STRATEGY
https://desc.dubai.ae

14. CYBER SECURITY STRATEGY
https://desc.dubai.ae

15. Strategy Principles
https://desc.dubai.ae

16. Architecture Cyber Security Policy
https://desc.dubai.ae

17. CYBER SMART SOCIETY

18. TECH BACKBONE SOCIETY 5.0

20. Sekilas IoT Pentest

22. https://blog.attify.com

25. Search Engines for IoT Devices
1.Shodan (https://www.shodan.io)
2.FOFA (https://fofa.so/?locale=en)
3.Censys (https://censys.io)
4.Zoomeye (https://www.zoomeye.org)
5.ONYPHE (https://www.onyphe.io)

26. Unlock the Potential of IoT in Defense to Build Modern Armies
augmented reality is
reshaping military operations

28. Architecture Internet of Military/Battlefield

29. Security Threats IOT Defense

32. RTLSDR

39. AI Is The Future Of Cybersecurity
• 69% of enterprises believe AI will be necessary to respond
to cyberattacks
• 73% of enterprises are testing use cases for AI for
cybersecurity across their organizations today with
network security leading all categories
• 51% of executives are making extensive AI for cyber threat
detection, outpacing prediction, and response by a wide
margin
• 64% say that AI lowers the cost to detect and respond to
breaches and reduces the overall time taken to detect
threats and breaches up to 12%
• Fraud detection, malware detection, intrusion detection,
scoring risk in a network, and user/machine behavioral
analysis are the five highest AI use cases for improving
cybersecurity
• 56% of senior execs say their cybersecurity analysts are
overwhelmed and close to a quarter (23%) are not able to
successfully investigate all identified incidents.
Capgemini’s Reinventing
Cybersecurity with Artificial
Intelligence Report

40. Cyber Defense and AI
Automating Penetration Testing
Reconnaissance. Threat Intelligence.Perimeter Monitoring.
SpiderFoot automates OSINT to find out everything possible about your target
Deep Exploit
fully automated penetration test tool
with Metasploit.

41. GyoiThon Next generation penetration test tool
SAIVS Spider Artificial Intelligence Vulnerability Scanner
Pentoma, Wallarm, ImmuniWeb, Pcysys
Eyeballer
Membantu mencari website yang berpeluang memiliki kerentanan

42. DEVICE AI IOT

43. Software Defined Radio (SDR)
Tahun 1992 oleh Badan Pertahanan Amerika, Department of Defence (DoD) melalui program
penelitian yang disebut SPEAKeasy.
Tahun 1996, Forum MMTIS (Modular Multifunction Information Transfer System).
Tahun 1999, forum MMITS diganti namanya menjadi forum SDR.
Software Defined Radio (SDR) adalah suatu teknologi dimana software dijalankan pada
platform hardware, yaitu pada Digital Signal Processing (DSP) processor, dan Field
Programmable Gate Array (FPGA), untuk mengimplementasikan fungsi-fungsi radio seperti
proses modulasi pada transmitter dan proses demodulasi pada receiver.

44. Software Defined Radio (SDR)
Modulasi adalah proses perubahan (varying) suatu gelombang periodik sehingga menjadikan suatu
sinyal mampu membawa suatu informasi. Dengan proses modulasi, suatu informasi (biasanya
berfrekeunsi rendah) bisa dimasukkan ke dalam suatu gelombang pembawa, biasanya berupa
gelombang sinus berfrekuensi tinggi.
• modulasi analog
• modulasi digital
Amplitudo merupakan ukuran tinggi rendahnya tegangan dari sinyal analog.
Frekuensi adalah jumlah gelombang sinyal analog dalam satuan detik.
Phase adalah besar sudut dari sinyal analog pada saat tertentu.

45. Modulasi

58. Hardware
Device Function Range
HackRF RX/TX 1MHz – 6Ghz
RTLSDR RX 24MHz-1766MHz
DX Patrol RX 100KHz-2GHz
USRP N-series RX/TX 1MHz-6MHz
BladeRF RX/TX 300MHz-3.8GHz
FUNcube RX/TX 150KHz-240MHz & 420MHz-1.9GHz
SDRPlay RX/TX 10KHz-2GHz
LimeSDR RX/TX 100KHz-3.8GHz
ADALM-PLUTO SDR RX/TX 325 – 3800 MHz, tune to 70 MHz to 6000 MHz
AirSpy Mini RX 24-1800Mhz
WSA5000 RX 100 kHz to 8 GHz / 18 GHz / 27 GHz

60. RTLSDR

61. RTLSDR
Password VM: cikur
1. Update your distribution.
sudo apt-get update
2. Install the tools needed to retrieve (git), compile (cmake) and build (build- essential).
sudo apt-get install git
sudo apt-get install cmake
sudo apt-get install build-essential
3. Install libusb-1.0-0-dev which is a C library that provides generic access to USB devices.
sudo apt-get install libusb-1.0-0-dev
4. Retrieve, build and compile the RTL2832U Osmocom drivers from the source.
git clone git://git.osmocom.org/rtl-sdr.git
cd rtl-sdr/
mkdir build
cd build
cmake ../ -DINSTALL_UDEV_RULES=ON
make
sudo make install
sudo ldconfig
sudo cp ../rtl-sdr.rules /etc/udev/rules.d/

62. Jika tidak jalan bisa dilakukan blacklist untuk dongle usb rtlsdr:
A. Open your /etc/modprobe.d folder as (right-click) an administrator.
B. Create a new file 'blacklist-rtl.conf' and add this one line:
blacklist dvb_usb_rtl28xxu
C. Save the file, close the editor and restart the machine.

63. OSMOCOM
apt install gnuradio atau
git clone git://git.osmocom.org/gr-osmosdr
cd gr-osmosdr/
mkdir build
cd build/
cmake ../
make
sudo make install
sudo ldconfig
osmocom_fft -a rtl=0 -v -f 100e6 -s 2.4e6 -g 15
osmocom_fft -a rtl=0 -v -f 100e6 -s 2.4e6 -g 15 -W

64. Gqrx SDR
sudo apt-get install gqrx-sdr
sudo apt-get install libvolk1-bin
volk_profile

65. CubicSDR
CubicSDR is the software portion of Software Defined Radio. By Using hardware that converts RF spectrum into a digita
apt install cubicsdr

67. SDR-sharp
1. Install SDR# prereqs
apt install mono-complete libportaudio2 librtlsdr0 librtlsdr-dev
librtlsdr0 provides file /lib/udev/rules.d/60-librtlsdr0.rules that allows the RTL-SDR stick to be recognized upon USB plugin.
2. Build SDR#.
git clone https://github.com/cgommel/sdrsharp
cd sdrsharp
xbuild /p:TargetFrameworkVersion="v4.5" /p:Configuration=Release
3. Softlinks help your Mono executable find the audio libraries.
cd Release
ln -s /usr/lib/x86_64-linux-gnu/libportaudio.so.2 libportaudio.so
ln -s /usr/lib/x86_64-linux-gnu/librtlsdr.so.0 librtlsdr.dll

68. mono SDRSharp.exe

69. PyBOMBS (Python Build Overlay Managed Bundle System) adalah sistem
manajemen baru yang digunakan untuk proses installasi GNURadio agar dapat
bejalan dengan baik. GNU radio dasarnya menggunakan bahasa pemograman
python.
Tujuan utama PyBombs untuk menggabungkan beberapa aplikasi yang digunakan
untuk menyelesaikan suatu proyek dengan menggunakan bahasa pemograman
python.
PyBombs merupakan sistem dasar yang harus ada sebelum menggunakan
GNURadio
GNU Radio adalah perangkat lunak untuk membangun dan menyebarkan perangkat
lunak sistem radio. Kerangka GNU Radio menyediakan pemrosesan sinyal yang
panjang dan pengolahan blok untuk berkomunikasi dengan perangkat keras

70. Install PyBOMBS:
$ [sudo] pip install PyBOMBS
Add PyBOMBS recipes:
$ pybombs recipes add gr-recipes
git+https://github.com/gnuradio/gr-recipes.git
$ pybombs recipes add gr-etcetera
git+https://github.com/gnuradio/gr-etcetera.git
Configure an installation prefix:
$ pybombs prefix init ~/prefix/default/
Install GNU Radio:
$ pybombs install gnuradio
Run GNU Radio Companion from
your new prefix:
$ source
~/prefix/default/setup_env.sh
$ gnuradio-companion
or execute it without changing
the current environment
$ pybombs run gnuradio-
companion

71. Designing FM Receiver

72. Rational resampler block

73. Low-pass filter block

74. WBFM receive block

75. Multiply constant block

76. Audio sink block

78. Sniffing data over GSM
apt update
apt dist-upgrade
apt-get install gr-gsm
reboot
$grgsm_scanner
linux; GNU C++ version 7.2.0; Boost_106200; UHD_003.010.002.000-0-unknown
ARFCN: 975, Freq: 925.2M, CID: 2852, LAC: 2200, MCC: 284, MNC: 1, Pwr: -70
ARFCN: 978, Freq: 925.8M, CID: 2804, LAC: 2200, MCC: 284, MNC: 1, Pwr: -64
ARFCN: 981, Freq: 926.4M, CID: 2884, LAC: 2200, MCC: 284, MNC: 1, Pwr: -69
ARFCN: 982, Freq: 926.6M, CID: 1174, LAC: 2400, MCC: 284, MNC: 1, Pwr: -80
$grgsm_livemon_headless -f 925.2M
and in another terminal
$sudo apt-get install wireshark
$sudo wireshark -k -f udp -Y gsmtap -i lo

79. kalibrate-rtl
sudo apt install build-essential libtool automake autoconf
librtlsdr-dev libfftw3-dev
git clone https://github.com/steve-m/kalibrate-rtl
cd kalibrate-rtl
./bootstrap && CXXFLAGS='-W -Wall -O3'
./configure
make
sudo make install
kal -s GSM900

80. Sniffing data over GSM
Setup
git clone https://github.com/Oros42/IMSI-catcher.git
# or wget https://github.com/Oros42/IMSI-catcher/archive/master.zip && unzip -q master.zip
sudo apt install python-numpy python-scipy python-scapy
RUN
Open 2 terminals.
In terminal 1
python simple_IMSI-catcher.py —-sniff
You can add -h to display options.
In terminal 2
python scan-and-livemon

81. Or first find the frequencies of the nearby base stations.
grgsm_scanner
Next, ask grgsm_livemon to use one of these frequencies:
grgsm_livemon -f <your_frequency>M
Example :
grgsm_livemon -f 938.2M
You can watch GSM packets with
sudo apt-get install wireshark
sudo wireshark -k -Y '!icmp && gsmtap' -i lo

82. pyrtlsdr
python setup.py install atau pip install pyrtlsdr.

83. AI (Artificial Intelligence) to identify Radio signals using RTL SDR
python -V
apt-get install git
git clone https://github.com/randaller/cnn-rtlsdr.git
cd cnn-rtlsdr
sudo apt-get update
sudo apt-get install python3-pip
sudo apt-get install rtl-sdr
sudo apt-get install build-essential libssl-dev libffi-dev
python-dev
sudo pip3 install --upgrade pip
sudo pip3 install tensorflow==1.5
sudo pip3 install pyrtlsdr
sudo pip3 install scipy
[remove dongle]
rmmod dvb_usb_rtl28xxu rtl2832
[insert dongle]
sudo python3 predict_scan.py
pip install keras==2.2
pip install sklearn
python3 prepare_data.py
python3 train_keras.py

84. kal -s GSM900
Found 1 device(s):
0: Generic RTL2832U OEM
Using device 0: Generic RTL2832U OEM
Found Rafael Micro R820T tuner
Exact sample rate is: 270833.002142 Hz
[R82XX] PLL not locked!
kal: Scanning for GSM-900 base stations.
GSM-900:
chan: 40 (943.0MHz - 736Hz) power: 25909.17
chan: 47 (944.4MHz - 817Hz) power: 28430.99
chan: 63 (947.6MHz - 128Hz) power: 29010.57
chan: 69 (948.8MHz - 597Hz) power: 32479.73

85. sudo python3 predict_scan.py
Found Rafael Micro R820T tuner
[R82XX] PLL not locked!
88.400 MHz - tv 99.98%
89.600 MHz - tv 99.91%
91.500 MHz - tv 99.99%
92.700 MHz - tv 99.93%
94.700 MHz - tv 99.13%
95.900 MHz - tv 98.04%
98.000 MHz - tv 100.00%
99.200 MHz - tv 99.95%
99.600 MHz - tv 81.13%
101.500 MHz - tv 99.91%
102.700 MHz - tv 100.00%
105.100 MHz - tv 100.00%
106.300 MHz - tv 99.56%
pip install keras==2.2
pip install sklearn
rm -r training_data
To use developer data:
• Download
https://drive.google.com/file/d/1PuhzXkk6AVwXPPKjtFUCpQVsqOOls
zu8/view
• Unpack "training_data" folder to cnn-rtlsdr/training_data (instead of
deleted training_data)
or, to use own data
• Edit prepare_data.py according to your frequencies and folders
structure and run:
mkdir training_data
python3 prepare_data.py
Now we are ready to run keras version:
python3 train_keras.py

86. Ditjen Kependudukan dan Pencatatatn Sipil
Kementerian Dalam Negeri
Terima Kasih