Z-Wave is a proprietary wireless protocol that is gaining market share in home automation and security systems. However, very little work has been done to investigate the security implications of these sub-GHz devices. In this talk we review recent work on hacking Z-Wave networks, and introduce a new attack that creates a persistent back door. This attack maintains a stealthy, parallel, and persistent control channel with all Z-Wave devices in the home. We will demonstrate the attack against a commercial Z-Wave security system.

Jonathan Fuller is a network engineer with interests in vulnerability analysis and exploitation. Ben Ramsey has spent over a decade making and breaking wireless networks. His favorite targets are VoIP phones and home automation systems.

Back to Derbycon 2015 video list