论文标题
粉碎波浪 - 暴露的新Z波漏洞
Crushing the Wave -- new Z-Wave vulnerabilities exposed
论文作者
论文摘要
本文描述了两种否认针对Z-WAVE协议的服务攻击及其对智能家居门户的影响。两者都使用修改的未加密数据包,这些数据包在包含阶段和正常操作期间使用。这些是命令nonce get/s2 nonce获取并在范围内找到节点。本文展示了如何操纵和用于阻止Z-Wave网关的通信处理的两者,这反过
This paper describes two denial of service attacks against the Z-Wave protocol and their effects on smart home gateways. Both utilize modified unencrypted packets, which are used in the inclusion phase and during normal operation. These are the commands Nonce Get/S2 Nonce Get and Find Nodes In Range. This paper shows how both can be manipulated and used to block a Z-Wave gateway's communication processing which in turn disables the whole Z-Wave network connected to it