It was an honor to present the latest updates to FISSURE at the DEF CON Radio Frequency Village in Las Vegas this past Saturday, August 10.

One of the key updates I showcased was the introduction of deployable remote sensor nodes. These nodes are run on general-purpose computers (single-board computers, mini-PCs, laptops, desktops, etc.) and control many types of radio peripherals. They can also receive input from just about any type of sensory device that can be controlled by a computer.

To seize the opportunity presented by this new deployment scheme, we added a variety of example triggers (acoustic, environmental, filesystem, networking, RF, time and visual) that can be used to kick off many types of electromagnetic effects/actions supported by FISSURE. Additionally, we added a new type of playlist that can run scripts simultaneously across multiple radio peripherals to increase productivity on a sensor node. This new playlist type can be controlled over a network through the FISSURE Dashboard GUI or operate independently upon startup of the sensor node to execute any number of automated tasks.

Another topic that was covered were changes to the Target Signal Identification tab – the beginning component of FISSURE that will detect, isolate and classify signals using machine learning. The new signal conditioner, feature extractor and signal classifier elements provide a testbed for maturing algorithms across a range of topics and comparing machine learning models for classifying RF protocols and emitters.

We’ve also made it easier to conduct remote and cost-effective testing. Now, cybersecurity professionals can access specialized RF environments globally, whether they’re working from home or a remote location, without the need for physical presence at a specific site.

If you missed my presentation at DEF CON, don’t worry! A pre-recorded version will be available soon through the RF Village and linked to in the GitHub page.

Embarking on an open-source project can feel like exploring uncharted territories. Just like any programming endeavor, whether you’re designing a video game or creating on GitHub, the journey of bringing your ideas to life is a time-consuming but rewarding experience. The simpler the idea, the quicker it will be to develop. The narrower the focus, the easier it will be to maintain. But what happens when your winning idea for a project is very ambitious? How do you get it off the ground and make it relevant in the public eye before it is too late? In this blog post, let’s delve into the world of open-source through the lens of AIS’s project “FISSURE,” exploring its inception, current status and the pathways for success.

FISSURE is an open-source project developed by AIS and was released to GitHub in August of 2022. At its core, it’s a radio frequency (RF) framework for reverse engineering signals and keeps commonly used software tools together in one place. It contains reference and lesson material relating to RF topics along with a growing library of RF protocol and signal data. It’s a one-stop shop for installing software, experimenting with tools, learning about new topics, speeding up analysis and providing a testbed for future development of advanced topics.  

Despite the initial acclaim, primarily from the Hackaday bump common among many open-source projects, FISSURE faced the challenge of sustaining growth. While sufficient levels of GitHub stars and visibility in search results were achieved, the project lacked regular contributors. If you find yourself in a similar position with your project, don’t let that get you down. This scenario is not uncommon for developers juggling open-source commitments alongside their day jobs. In the case of FISSURE, there are other indicators of measurable progress besides contributions, and all the recent work performed since its release presents a solid foundation to take things to the next level.

Navigating the Path to Success

The measurement of success for an open-source framework like FISSURE is the size of its community and the quality of the product. These elements are interdependent, with growth in one area often influencing the other. The key lies in addressing both aspects concurrently. The most pressing action items for FISSURE are to flush out the base capabilities as quickly as possible and to acquire regular contributions to help speed up development. This requires a multi-faceted approach which targets the external side open to the public and the internal side that we, AIS, are responsible for upholding as the caretakers of the project.

External Strategies

Internal Strategies

What Lies Ahead for FISSURE

FISSURE’s evolution involves transitioning to a sensor node deployment scheme capable of connecting multiple computers with their own radios and peripherals that can be controlled remotely or run autonomously. This will facilitate many geospatial scenarios such as direction finding, tracking, perimeter defense, remote access for employees who need to do RF testing and providing a global gateway for advanced laboratory environments. The automated scripts combined with lightweight, compact computing options will unlock several more possibilities for subjects like wardriving, warshipping, UAS payloads and logging/tracking at key locations of interest.

Finishing the envisioned base capabilities for FISSURE will produce an end-to-end demonstrable capability that rounds out the framework instead of including separated features that do not interconnect. These interconnections will open the door for automation and artificial intelligence in RF reverse engineering. Specific actions in mind for 2024 are completing the integration of the Signal Classifier component, updating the Protocol Discovery component to act on known and unknown signals and integrating the sensor node capabilities mentioned above.

The new algorithms in focus for this year will be centered around practical IoT capabilities stemming from research, demonstrations and testing systems of interest. This will include scripts and flow graphs for sniffing, spoofing, man-in-the middle, fuzzing, jamming, denial of service, probing, installation of malware, misuse of resources, packet crafting and replay.

As FISSURE’s journey unfolds, we welcome contributions and collaborations. For those seeking to embark on similar endeavors, understanding the challenges and strategies outlined here can serve as a valuable guide. Reach out to me (@FissureRF on Twitter/X) to explore opportunities for contribution or to share contacts. The road to open-source success is paved with challenges, but with dedication and a strategic approach, you can find your way.

John – Information Technology Department at AIS | 3 minute read

October is Cybersecurity Awareness Month, a time to emphasize the importance of individuals protecting themselves online as threats to technology and confidential data become more commonplace. The Cybersecurity and Infrastructure Security Agency (CISA) and the National Cybersecurity Alliance (NCA) lead a collaborative effort between government and industry to raise cybersecurity awareness nationally and internationally in the month of October. This year’s theme – “See Yourself in Cyber” focuses on the “people” part of cybersecurity, providing information and resources to help educate CISA partners and the public and ensure all individuals and organizations make smart decisions whether on the job, at home or at school.

In everything we do at AIS, we aim to create a secure future for our customers, employees and communities. See below for some tips and best practices for staying safe online:

Chris Poore, FISSURE Lead

FISSURE, an open-source radio frequency (RF) and reverse engineering framework designed for all skill levels, was officially off the ground in August this year. I’ve been working on RF projects my entire career, constantly jumping around to different technologies with each project. I created FISSURE to consolidate all things RF: software modules, radios, protocols, signal data, scripts, flowgraphs, reference material and third-party tools.

Since its launch, FISSURE has been gaining a lot of traction and I recently presented at DEF CON Demo Labs and GNU Radio Conference (GRCon). It has been great to see the positive feedback from the community and I’m excited to focus on improving the existing software (bugs, cleaning the code, testing more SDRs, etc.) and expanding base capabilities that will round out the framework and allow for task automation and the introduction of machine learning techniques.  

RF HACKING HACK CHAT – Wednesday, October 12

On Wednesday, October 12 at noon PST, I will be dropping in the RF Hacking Hack Chat. Join in to talk about RF reverse engineering in general and FISSURE in particular. Come with your RF hacking and reverse engineering questions and war stories!