Sunday, October 12, 2014

My Home Alarm System is Set, Yup, I'm Good.

Not so fast folks. I was reviewing speeches from the latest Black Hat security conference in Las Vegas and found an interesting talk on defeating home security systems. I also found this very topic on a deep web site (http://en.wikipedia.org/wiki/Deep_Web)  along with instructions on how to go about defeating alarm systems using off the shelf 90s technology

This is why I repeatedly keep reminding my readers that you must have layers of security and to stay informed on the latest security measures. This blog will be one of your resources. Remember, we live in different world that 10 years ago. I know security is not a popular, convenient, or "comfort" topic, but it is a necessary topic for our time, and because, it is the go-to topic for the bad guys.

Anyway, what is now common knowledge is that many of today's modern gadgets and home appliances are hooked into the internet and can easily be hacked and taken over by hackers and other unsavory type folk. That's nothing too alarming since the most they can do is reprogram your toaster oven, fridge, or turn your heater on to 100 degrees during a heatwave in South Texas. 

While it's frustrating and scary to know that a stranger with unknown intentions can control things in your home without your knowledge, but it's down right scary to realize that a stranger may have the ability to disarm you home security system at will without your knowledge. All this is possible because you are dependent on old technology that the bad guys have had plenty of time to study and learn how to defeat and the industry has continued to use while telling you that it is still top of the line technology.

So what is this defeatable technology?, your wireless home security system. Here's how they are defeated. All the wireless alarm systems examined rely on radio frequency signals sent between door and window sensors to a control system that triggers an alarm when any of these entryways are breached. The signals deploy any time a twired window or door is opened, whether or not the alarm is enabled. But, when enabled, the system will trip the alarm and also send a silent alert to the monitoring company, which contacts the occupants and/or the police. But, researchers found that most wireless systems do not encrypt or authenticate the radio signals being sent from sensors to control panels, making it easy for someone to intercept the data, decipher the commands, and play them back to control panels at will using easily obtained technology.

 Oh yeah, 1234, I'm safe!

These radio signals can also be jammed to prevent them from tripping the alarm by sending radio interference to prevent the signal from getting through from sensors to the control panel. My questioning of alarm company personnel either claimed the signals were encrypted or they gave me the deer in the headlight look. My observation of their reactions when asked that question was that they had no clue but responded with the better sounding answer of "encrypted", but couldn't answer how it was encrypted.

So, without getting into the technical details of encryption and defeating methods, I'll just tell you that with the right equipment, top-selling home alarm setups use wireless technology can be easily subverted to either suppress the alarms or create multiple false alarms that would render them unreliable. False alarms could be set off using a simple tool from up to 250 yards away, though disabling the alarm would require closer proximity of about 10 feet from the home.

Some of the technology used to perpetrate this crime may cost in upwards of $1,700.00, but it may may very well be worth it for a thief who can break into multiple homes without the risk of the home security system going off to make a good profit . Think about it.

"An attacker can walk up to a front door and suppress the alarm as they open the door, do whatever they want within the home and then exfiltrate, and it’s like they were never there,” says Logan Lamb, a security researcher at the Oak Ridge National Lab, who conducted his work independent of the government. So who could possibly get within 10 feet of your home while the home security system is armed and still get in? 

Yeah, this discovery gave me the creeps but at least I know I have multiple layers of security in my home. Do you?

See related posts:
Be Alarmed, Be Very Alarmed, 12/20/13
I Bought Your Front Door Key Online, 9/26/14

Be One Step Ahead of The Dirt Bags.  

Dave 

1 comment:

  1. So what is a good alarm system? You haven't promoted a single one yet in any of y our posts! If you don't know, jsut say so. You're not the end all be all of security. I suppose youd say mine is worthless according to what ive read in your posts. I have all the sensors and all the doors and windows motion and galss break detecters installed. Plus I have the reomote with a panic button. I even have all the monitoring signs posted on the outside of my fense. I supose you think you can beat the system and break in to my house? Prove it!

    ReplyDelete