Download - Introduction & SoA
![Page 1: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/1.jpg)
Reverse engineering of biomedical elaborated signal
Laura Barilli [email protected]
Luisa Cucugliato [email protected]
Friday, April 29, 2016 B3Lab, Via Ponzio, Building 21
![Page 2: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/2.jpg)
Context
Detection of biomedical signal to monitor health conditions
2
![Page 3: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/3.jpg)
Fitness Trackers
• Continuous e practical monitoring• Limited prices• User comfort• Large diffusion on the market
Increase of 85% in one year
www.statista.com/statistics/413265/health-and-fitness-tracker-worldwide-unit-sales-region/
Western Europe
Asia Pacifi
c
North Americ
a
Central E
uropeChina
South Americ
a
Africa
& M
iddle East0
2
4
6
8
10
12
142015 2014
Units sales in millions
3
![Page 4: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/4.jpg)
Fitness Trackers
Closed
Open
Fitness
Medical
Open
Closed
Xiaomi
Angel sensor
Empatica
FitBit
Nike+Fuel Band
Jawbone
4
![Page 5: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/5.jpg)
Fitness Trackers
Closed
Open
Fitness
Medical
Open
Closed
Xiaomi
Angel sensor
Empatica
FitBit
Nike+Fuel Band
Jawbone
4
![Page 6: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/6.jpg)
Our Work
What we have:
Fitness data step counter
Sleep data light and deep sleep
What we want:
HR signal PPG sensor
www.mi.com
5
![Page 7: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/7.jpg)
Our Work
What we have:
Fitness data step counter
Sleep data light and deep sleep
What we want:
HR signal PPG sensor
?www.mi.com
5
![Page 8: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/8.jpg)
Idea
Reverse Engineering
Open source signalLimited processed data
6
![Page 9: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/9.jpg)
Access of data is facilitated by Bluetooth communication
State of Art
The authentication system, which is based on Bluetooth Low Energy (BLE) trasmission, is vulnerable. Everyone can connect to portable devices
7
![Page 10: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/10.jpg)
State of Art
“During the last two weeks I had fun playing with the BLE protocol of the Nike+ FuelBand SE”
Simone Margaritelli Khyati Jain
www.evilsocket.net/2015/01/29/nike-fuelband-se-ble-protocol-reversed/thehackernews.com/2015/10/hack-fitbit.html
“An attacker can reverse Fitbit protocols and send malware to the wearable fitness tracker nearby at a Bluetooth distance”
8
![Page 11: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/11.jpg)
State of Art
hackaday.io/project/6581/logs
Figure out the protocol for the purposes of:
• Reading the step count• Reading activity data writing the firmware Morgan Gangwere
9
![Page 12: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/12.jpg)
Our Reverse
Peripheral
Characteristic
Service
Characteristic
Service
10
![Page 13: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/13.jpg)
Our Reverse
Peripheral
Characteristic
Service
Characteristic
Service
PROBLEM: Digital signal format
10
![Page 14: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/14.jpg)
Fitness Trackers
Closed
Open
Fitness
Medical
Open
Closed
Xiaomi
Angel sensor
Empatica
FitBit
Nike+Fuel Band
Jawbone
11
![Page 15: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/15.jpg)
Angel Sensor
“Offers a full ownership of data for both developers and consumers”
Detected by PPG sensor
angelsensor.com
12
![Page 16: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/16.jpg)
Fitness Medical
Use data detected from a cheap fitness tracker in order to study medical conditions
Goals
Create an app which allow to detect Heart Rate Variability (HRV) to extract resipiratory rythm
13
![Page 17: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/17.jpg)
Reverse Engineering of Biomedical Elaborated Signal
[email protected]@mail.polimi.it
https://www.facebook.com/reebes.project2016/
Contacts14
![Page 18: Introduction & SoA](https://reader036.vdocuments.mx/reader036/viewer/2022062503/5871784b1a28ab230b8b5725/html5/thumbnails/18.jpg)
Questions?
15