Radio Security Agent

Analyze RF and Sub-GHz radio communications for security vulnerabilities in IoT and wireless devices.

Overview

Agent Name: RadioSecurityAgent Scan Type: radio-security Credit Cost: 2 credits Target Types: RF signals, IoT devices, wireless protocols

Capabilities

• Sub-GHz protocol analysis (315MHz, 433MHz, 868MHz, 915MHz)
• Signal capture and replay
• Protocol decoding
• Encryption analysis
• Rolling code testing
• Jamming detection
• Signal fingerprinting
• Device identification

Usage

# Analyze RF signals
alprina scan <frequency> --type radio-security
 
# Comprehensive RF analysis
alprina scan <frequency> --type radio-security --profile comprehensive

Supported Protocols

• ISM Bands

  • 315 MHz (garage doors, car keys)
  • 433 MHz (remote controls, sensors)
  • 868 MHz (EU IoT devices)
  • 915 MHz (US IoT devices)

• Protocols

  • OOK (On-Off Keying)
  • FSK (Frequency Shift Keying)
  • ASK (Amplitude Shift Keying)
  • LoRa
  • Zigbee
  • Z-Wave

What It Tests

• Signal encryption
• Rolling code implementation
• Replay attack vulnerability
• Jamming susceptibility
• Authentication mechanisms
• Protocol weaknesses

Example Output

{
  "scan_id": "scan_rf707",
  "findings": [
    {
      "severity": "high",
      "title": "Unencrypted RF Transmission",
      "description": "Garage door opener uses fixed code without encryption",
      "frequency": "315MHz",
      "protocol": "OOK",
      "vulnerability": "Signal can be captured and replayed to open garage",
      "recommendation": "Upgrade to rolling code system or add encryption"
    }
  ],
  "signals_detected": [
    {
      "frequency": "315.0 MHz",
      "protocol": "OOK",
      "encrypted": false,
      "rolling_code": false
    }
  ]
}

Common Vulnerabilities

1. Fixed Code Systems

Problem:

• Same signal every time
• Can be captured and replayed

Fix:

• Implement rolling codes
• Use encryption

2. Weak Encryption

Problem:

• Simple XOR encryption
• Predictable keys

Fix:

• Use AES or ChaCha20
• Proper key management

3. No Authentication

Problem:

• Accept any valid signal
• No device verification

Fix:

• Challenge-response
• Device pairing

Use Cases

• Smart Home Security

  • Door locks
  • Garage openers
  • Security systems

• Automotive Security

  • Key fobs
  • Tire pressure sensors
  • Remote start

• IoT Devices

  • Sensors
  • Weather stations
  • Remote controls

Best Practices

1. Use encrypted protocols
2. Implement rolling codes
3. Add authentication
4. Monitor for jamming
5. Regular security audits

Related

• WiFi Security Agent
• Network Analyzer Agent