Sponsored by RF Signal Source Mapping using low cost spectrum analysis Dan Wells Supervised by: Barry Irwin and Ingrid Siebörger

Dan Wells // Barry Irwin // Ingrid Siebörger Outline of presentation Problem Statement Project outline and goals WiSpy SSM Tool (three parts) Screenshots in action Conclusions Future work Honours Presentation – November 07 2

Dan Wells // Barry Irwin // Ingrid Siebörger Problem Statement a > Not common (and 5 GHz) b/g > Popular n > New and improved b/g/n all use 2.4 GHz range Frequency is becoming cluttered Need to use optimal channel, minimise interference and discover rogue AP’s and remove Honours Presentation – November 07 3

Dan Wells // Barry Irwin // Ingrid Siebörger Project Outline and Goals Using three (minimum) synchronised spectrum analysers can we trilaterate a RF signal in the range ( MHz) ? Produce a tool in MS Visual C# to collect frequency VS amplitude data and process it Display signal data meaningfully Evaluate the tool for accuracy Honours Presentation – November 07 4

Dan Wells // Barry Irwin // Ingrid Siebörger WiSpy SSM Tool Design and Implementation Honours Presentation – November 07 5

Dan Wells // Barry Irwin // Ingrid Siebörger WiSpy SSM Collector Interfaces with the MetaGeek WiSpy through a USB Human Interface Device (HID) API Collects chunks of signal data Passed directly to webservice Or, stored locally and transmitted later Passes node name, associated time and location with the signal data Location -> Updated dynamically via GPS Honours Presentation – November 07 6

Dan Wells // Barry Irwin // Ingrid Siebörger Screenshots of WiSpy SSM Collector [1/2] Honours Presentation – November b g n

Dan Wells // Barry Irwin // Ingrid Siebörger Screenshots of WiSpy SSM Collector [2/2] Honours Presentation – November 07 8

Dan Wells // Barry Irwin // Ingrid Siebörger ASP.NET Webservice Interface to SQLite Database Request and Response SOAP/XML Stateless MD5 hash checking database initialisation protection Deployed to Microsoft IIS Honours Presentation – November 07 9

Dan Wells // Barry Irwin // Ingrid Siebörger WiSpy SSM Compiler Send requests to the webservice for specific time ranges of data for selected collecting nodes Signal data is sorted (sync’d to time), displayed, played and replayed to user All data can be saved to file via XML serialization and reloaded offline Honours Presentation – November 07 10

Dan Wells // Barry Irwin // Ingrid Siebörger Formula for distance signal is transmitted Honours Presentation – November 07 11

Dan Wells // Barry Irwin // Ingrid Siebörger WiSpy SSM Compiler Honours Presentation – November 07 12

Dan Wells // Barry Irwin // Ingrid Siebörger Evaluation Setup One access point D-Link DWL b One wireless desktop client Regular traffic Three collecting nodes (two fixed, one mobile) Honours Presentation – November 07 13

Dan Wells // Barry Irwin // Ingrid Siebörger Results [1/4] Honours Presentation – November 07 14

Dan Wells // Barry Irwin // Ingrid Siebörger Results [2/4] Honours Presentation – November 07 15

Dan Wells // Barry Irwin // Ingrid Siebörger Results [3/4] Honours Presentation – November 07 16

Dan Wells // Barry Irwin // Ingrid Siebörger Results [4/4] Honours Presentation – November 07 17

Dan Wells // Barry Irwin // Ingrid Siebörger Conclusion Goals achieved Graphically display signal strength at each node meaningfully Fairly accurate Tool produced WiSpy SSM Collector (2238 lines) WiSpy SSM Compiler (1590 lines) Webservice (354 lines) Honours Presentation – November 07 18

Dan Wells // Barry Irwin // Ingrid Siebörger Future Projects Integrate a spectrum analyser with higher resolution and more functionality (WiSpy 2.4x, Cognio Spectrum Expert?) Test with more WiSpy devices Honours Presentation – November 07 19

Dan Wells // Barry Irwin // Ingrid Siebörger Questions? Honours Presentation – November 07 20