Blog

Presentations and Publications

2018.4.9

Amsterdam

HITB

1. Ghost Tunnel: Covert Data Exfiltration Channel to Circumvent Air Gapping

2. HITB LAB: Wireless Hacking with HackCUBE

3. HITB Badge

2017.11.7

Tokyo

CODEBLUE

Man in the NFC

2017.10.9

Las Vegas

IEEE CNS

Ghost Telephonist Impersonates You: Vulnerability in 4G LTE CS Fallback

2017.7.27

Las Vegas

DEFCON25

1. Man in the NFC

2. 'Ghost Telephonist' Impersonates You Through LTE CSFB

3. Panel: DEF CON Groups

4. Vendor: 360 Security Innovation Alliance

2017.7.26

Las Vegas

BlackHat

1. 'Ghost Telephonist' Link Hijack Exploitations in 4G LTE CS Fallback

2. Arsenal: Attack Passive Keyless Entry System Using HackKey

2017.4

Amsterdam

HITB AMS

Chasing Cars: Keyless Entry System Attacks

2017.3

Singapore

BlackHat

Arsenal: Unicorn’s RFID Armoury

2017.3

Vancouver

CanSecwest

Automotive Intrusion Detection

2016.11

London

BlackHat Europe

Arsenal: Offense and Defense Toolkits in High/Low Frequency

2016.11

Seoul

POC

Forcing LTE Cellphone into Unsafe Network

2016.10.22

Melbourne

Ruxcon Melbourne

Forcing a Targeted LTE Cellphone into Unsafe Network

2016.8.4

Las Vegas

Defcon24

1. Forcing a Targeted LTE Cellphone into Unsafe Network

2. Deep Learning on CAN BUS Security Flaws in Automotive Immobilizer

3. Security Flaws in Automotive Immobilizer

2016.8.3

Las Vegas

BlackHat

The Risk from Power Lines:How to Sniff the G3 and Prime Data and Detect the Interfere Attack

2016.5.23

Amsterdam

HITB AMS

1. Forging a wireless time signal to ttack NTP servers

2. Forcing a targeted LTE cellphone into an eavesdropping network

3. Cansee: an automobile intrusion detection system

2016.3.18

Vancouver

CanSetWest

Attack and defense toolkits in High/Low frequency

2015.11

Seoul

POC

GPS Spoofing

2015.8.6

Las Vegas

Defcon23

1. Low-cost GPS simulator – GPS spoofing by SDR

2. Build a free cellular traffic capture tool with a vxworks based femoto

3. I'm A Newbie Yet I Can Hack ZigBee – Take Unauthorized Control Over ZigBee Devices

Technology Transfer:SkyScan

SkyScan has already been chosen to be deployed in DongGuan, the most advanced IT city in South China. There will be up to 10 thousand SkyScan equipments settled down in this big project named "Smart City". SkyScan will protect all public wireless hotspots in this city.

Unicorn Arsenal

Hack and Make,Just for Fun