Daniele Antonioli

Our new paper Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy will appear in the ACM Transactions on Privacy and Security.

Our paper Bluetooth Impersonation AttackS (BIAS) will be presented at the IEEE Symposium on Security and Privacy (IEEE S&P) 2020.

I’m glad to give a talk titled From the Bluetooth Standard to Standard Compliant 0-days together with Mathias Payer at the virtual edition of Hardwear.io 2020.

The InspiredResearch (Winter 2019 Issue 15) twice-yearly newsletter from the Computer Science Department of the University of Oxford features a nice article about the KNOB attack by Prof.

Recently, I’ve stumbled upon the webpage about Security Engineering – Third Edition (SEv3) by Prof.

Next January I will join as a postdoc Mathias Payer’s HexHive group at EPFL.

I’ve collected a list of references and advisories about the KNOB attack from several hardware and software providers and organizations.

Title of the paper: The KNOB is Broken: Exploiting Low Entropy in the Encryption Key Negotiation Of Bluetooth BR/EDR: More info at knobattack.com

Today CyberWire aired my interview about the KNOB attack with Dave Bittner.

In this interview we present the KNOB attack as part of the CyberWire’s Research Saturday session.

I’m glad to announce that I’ve completed my PhD in Computer Science at SUTD about Design, Implementation, and Evaluation of Secure Cyber-Physical and Wireless Systems.

I’ve pushed the code to perform the KNOB attack also when the Nexus 5 is the Bluetooth slave responding to the first LMP packet.

In 2019 we disclosed two families of high impact attacks affecting the entropy negotiation protocols of Bluetooth Classic (BC) and Bluetooth Low Energy (BLE).

In this post I’m trying to address some discussion points and misconceptions about the KNOB attack.

The code that we developed to validate and brute force E0 encryption keys is online.

Our KNOB repository is online, and it includes our PoC.

The embargo is over!

Soon I’m going to defend my PhD thesis at SUTD.

My NDSS 2019 presentation of Nearby Threats: Reversing‚ Analyzing‚ and Attacking Google’s “Nearby Connections” on Android

This week I’ve been in San Diego CA for the The Network and Distributed System Security Symposium (NDSS) 2019 conference.

Recently, I’ve accepted the invitation to join the IEEE CPS-SEC workshop TPC.

In 2019 in a paper titled Nearby Threats: Reversing, Analyzing, and Attacking Google’s ‘Nearby Connections’ on Android we uncovered issues on Nearby Connections, an proprietary Google API included in all Android devices.

The camera-ready version of Nearby Threats: Reversing‚ Analyzing‚ and Attacking Google’s “Nearby Connections” on Android is available here We also released a proof of concept code to perform the Soft AP manipulation attack.

Recently gcushen updated Academic (the theme that I’m using to build this website with hugo) with two useful features that I recommend to use: day_night and search. day_night allows the reader to toggle light and dark color themes for the website.

I’m very happy to announce that our paper titled Nearby Threats: Reversing‚ Analyzing‚ and Attacking Google’s “Nearby Connections” on Android has been accepted for the The Network and Distributed System Security Symposium (NDSS).

As part of my PhD I’ve recently joined as a visiting researcher the CISPA – Helmholtz-Zentrum, Saarbruecken 🇩🇪.

After the post about connecting to SUTD’s VPN is now time to connect eduroam!

I’ve recently came across the problem of connecting to the SUTD VPN server from overseas.

As part of my PhD I’ve recently joined as a visiting researcher the Department of Computer Science, University of Oxford 🇬🇧.

I’m happy to announce that our paper titled State-Aware Anomaly Detection for Industrial Control Systems has been accepted for the Symposium On Applied Computing (SAC) 2018 conference.

For some reasons my name_surname@sutd.edu.sg email address was deactivated without notice sometime at the end of October 2017.

I recently open-sourced the code that I developed for the MiniCPS challenges for the SWaT Security Showdown (S3) event in 2017.

MiniCPS is a framework that we developed to simulate/emulate Cyber-Physical Systems, including Industrial Control System.

I’m happy to announce that my poster titled Towards high-interaction virtual ICS honeypots-in-a-box won the ST Engineering Poster Award at the FIRST industry workshop, held at SUTD.

Recently I was selected as a mentor for the cybersecurity track of the Future of Science, Technology and Policy Workshop, organized by SMART.

This paper won the Research excellence award by ST Engineering during the FIRST workshop in 2017.