EE587 Lab 5: Snoopy Drone: A Distributed Tracking and Profiling Framework Xiaowei Zhang

Introduction Developed by Sensepost Research Labs Track WIFI, radio frequency identification (RFID), Bluetooth and 802.15 specifications Target phones, tablets, computers, pacemakers, fitness bracelets, smartcards, etc. Geographically awareness (GPS): maintain radio contact Rogue Access Points: Smartphones remember networks by pinging each network to see if it’s available Snoopy pretends to be that network Collect: login credentials, bank account details device’s unique ID #, GPS coordinates Personal info collected to build profiles

Hardware Components BeagleBone Black Alfa AWUS036H (Wi-Fi) low-power, open-source computer Sitara™ ARM® Cortex-A8 processor AM3359AZCZ100, 1GHz from TI 512MB DDR3L 400MHz 2GB onboard FLASH Alfa AWUS036H (Wi-Fi) Ubertooth (Bluetooth) RFidler (RFID) Bluenext-BN903S (GPS) XBee radio (802.15)

Airframe DJI Naza F450 quadcopter Fly about 20 minutes Takeoff weight 600~1200g Diagonal wheelbase 450mm Propeller 8×4.5in/10×4.5in Brushless motor 2212 22×12mm (stator size), 920kv ESC 30A OPTO Battery LiPo 3S/4S (1500~3500mAh) Fly about 20 minutes GoPro Hero 3/2/1 HD Camera DX6i RC

Real-time Snooping Distributed data collection by scattered drones OpenVPN connection to a central server

Real-time Snooping Cont.

Reference http://research.sensepost.com/conferences/2012/distribut ed_tracking_and_profiling_framework http://www.sensepost.com/blog/7557.html http://www.digitaltrends.com/mobile/snoopy-drone- smarphone-cybersecurity/#!B0y9S http://arstechnica.com/security/2014/03/meet-snoopy-the- diy-drone-that-tracks-your-devices-just-about-anywhere/