RF / SDR Security Research

ACTION REQUIRED (Execute immediately after reading)

1. NOW

   : Spectrum and transmission are strictly regulated by law; only authorized frequency bands/shielded rooms/test targets

2. NOW

   : Clearly specify equipment, frequency bands, and whether transmission is allowed in the scope (receive-only by default)

3. ACT

   : Receive-only identification → Demodulation analysis → Laboratory reproduction evaluation

Applicable Scenarios

• Authorized non-Wi-Fi RF such as wireless remote controls/sensors
• Protocol research such as ADS-B/remote control (legal reception)
• Division of labor with wifi-wireless: This skill focuses on general SDR RF; Wi-Fi attack and defense follow R29

Workflow

□ Confirm regulations and licenses
□ Receive-only: Identify center frequency and modulation
□ GNU Radio / URH analysis
□ Replay only allowed in shielded rooms with written permission
□ Conclusion focus: Unauthorized control feasibility / Hardening suggestions

Toolchain

References

• references/sdr-lab-rules.md

• ../wifi-wireless/

  ../ot-ics/

  ../hardware-security/

Routing Context

Task Completion Self-Check

• Is receive-only set by default and regulatory boundaries documented?
• Checklist completed?