Forums General Other Hobbies
  • Topic: DEFCON Railroad Talk

    Back To Topics
    (0 rates)
    • August 3, 2018 1:32 PM EDT
      • Kittery, ME
         
      • Posts
        491
      • Thanks
        34
      • Thanked
        169

      DEFCON Railroad Talk

      I'm making my annual trip to Las Vegas next week for DEFCON, and will be giving a 1-hour talk on railroad wireless protocols, focusing on my reverse engineering of the EOT and AEI systems.  It will be on YouTube eventually.  I've had a goal of speaking at DEFCON, and am very excited that they accepted my proposal!

       

      Here's the abstract:

       

      North American railroads use several wireless systems for remote control, monitoring, and tracking of locomotives, railcars, signals, and other equipment. This talk will provide an overview of the systems in use, an in-depth look of two of them:

       

      The end-of-train (EOT) device contributed to the demise of the caboose 35 years ago, taking over one of its primary functions: monitoring brake pipe pressure. The EOT transmits pressure, its unique ID, and other data, encoded into AFSK packets, to a corresponding head-of-train (HOT) device in the locomotive. A secondary function is venting the line in an emergency braking event, under command of the HOT. BCH error correction is employed for reliability, but there are inherent security flaws. A SDR/GNU Radio/Python workflow for decoding and verifying packets will be demonstrated.

       

      Attempts at automatically identifying passing railcars were largely unsuccessful until the introduction of the Automatic Equipment Identification (AEI) system in the early 90s. This 900 MHz RFID system consists of passive tags on each locomotive and car and wayside readers at rail yard entrances and other locations of interest. The author's day job in environmental noise consulting led to a study of the feasibility of using AEI for rail noise studies. It had to be reverse-engineered first, of course. Using a repurposed commercial reader, Raspberry Pi, and cellular modem, a remote monitoring system gathered tag date for 5 weeks. Details of the protocol and monitoring system will be presented, along with video demonstrations.

       

      https://www.wirelessvillage.ninja/speakersched.html

      This post was edited by Eric Reuter at August 6, 2018 9:28 PM EDT
    • August 3, 2018 3:43 PM EDT
      • Highland, Maryland
         
      • Posts
        1,215
      • Thanks
        435
      • Thanked
        244

      *gulp* WOW! That's massively impressive!

      Break a leg, Eric!! 

      Cliff

      PS: Don't blow your layout budget on the buffets!! But if work is paying for it, well, the more you eat the more you make!

    • August 3, 2018 5:11 PM EDT
      • Vail, Az
         
      • Posts
        3,907
      • Thanks
        393
      • Thanked
        406

      Have a  great time and Wow! 'em.

      ____________________________________

      John

       

      The older I get, the less I know, please don't make me prove it.

       

       

    • August 3, 2018 6:48 PM EDT
      • Pleasanton, CA
         
      • Posts
        340
      • Thanks
        177
      • Thanked
        120

      I bet this will be a great talk. Go get 'em, Eric

    • August 3, 2018 7:02 PM EDT
      • Post Count ,PA ,
         
      • Posts
        12,472
      • Thanks
        854
      • Thanked
        611

      Good luck!

       

       

      Rooster : has puked and passed out

    • August 5, 2018 11:48 AM EDT
      • Denver, Colorado
         
      • Posts
        1,733
      • Thanks
        153
      • Thanked
        246

          Whoooooaaaaa, Nellie! I'll bet this will be fascinating. Knock 'em dead!

       

         

       

       

      This post was edited by John Passaro at August 5, 2018 11:50 AM EDT
      ____________________________________

    • August 6, 2018 6:37 AM EDT
      • Easton , Massachusetts
         
      • Posts
        3,657
      • Thanks
        722
      • Thanked
        189

      Eric "YOU "might need sunblock 200 in Vegas ... Have fun and good luck !

      ____________________________________

       My u-tube

      The light in the tunnel might not be an engine , but a light in the caboose of my own train on my Roundy Round Rail Road !    My empire is complete...I think...

    • August 6, 2018 8:38 AM EDT
      • Berkshire, Ma.
         
      • Posts
        718
      • Thanks
        129
      • Thanked
        44

      don't forget to have fun 

      Richard

    • August 11, 2018 10:01 AM EDT
      • Kittery, ME
         
      • Posts
        491
      • Thanks
        34
      • Thanked
        169

      Code release for my talk today.  This is a GNU Radio/Python EOT decoder.

      https://github.com/ereuter/PyEOT

Forums General Other Hobbies

    Icon Legend

  • Topic has replies
    Hot topic
    Topic unread
    Topic doesn't have any replies
    Closed topic
    BBCode  is enabled
    HTML  is enabled

Add Reputation

Do you want to add reputation for this user by this post?

or cancel

Ads by Google