In these slides we share the state of the art of our project , it is about how people have tried to hack the fitness tracker which are closed source.

1. 1
Laura Barilli laura.barilli@mail.polimi.it
Luisa Cucugliato luisa.cucugliato@mail.polimi.it
Thursday, March 31, 2016
Politecnico di Milano
Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB)
Analysis of State of art
NECST lab, Via Ponzio, Building 20
Reverse Engineering of Biomedical Elaborated Signal

2. Fitness Tracker
Fitness Medical
2

3. Fitness
• Nike+ Fuel Band
• Fitbit
• Xiaomi
• Jawbone
• Misfit
• Garmin
http://www.fool.com/investing/general/2016/01/09/how-apple-watch-can-gain-wearables-market-share-in.aspx
Support for athletes activity
2014 7.1 million units
2015 21.2 million units
3

4. Medical
• Empatica Embrace
• Angel Sensor
Doctor
Patients
Monitoring of medical disorders
https://www.empatica.com
4

5. Closed source
• Xiaomi
• Jawbone
• Nike+ Fuel Band
• Empatica Embrace
• Fitbit
Accessibilityofdata
Open source
• Angel sensor
Vs
5

6. Closed source
• Xiaomi
• Jawbone
• Nike+ Fuel Band
• Empatica Embrace
• Fitbit
Accessibilityofdata
Open source
• Angel sensor
6

7. Closed source
• Xiaomi
• Jawbone
• Nike+ Fuel Band
• Empatica Embrace
• Fitbit
Accessibilityofdata
Access of data is
facilitated by Bluetooth
communication
http://arxiv.org/pdf/1304.5672v1.pdf http://www.techinsider.io/7-fitness-trackers-fail-basic-security-test-2016-2
7

8. Reverse engineering
Nike+ Fuel Band
https://www.evilsocket.net/2015/01/29/nike-fuelband-se-ble-protocol-reversed/
Simone Margaritelli
8

9. Reverse engineering
Fitbit
“An attacker can reverse engineer the Fitbit protocols
and send malware to the wearable fitness tracker
nearby at a Bluetooth distance, which would then be
transferred to any PC the Fitbit came into contact with.”
http://thehackernews.com/2015/10/hack-fitbit.html
Khyati Jain
9

10. Reverse engineering
Xiaomi
https://hackaday.io/project/6581/logs
Figure out the protocol for the purposes of:
• Reading the step count
• Reading activity data Writing the firmware
• Buzzing the device
Morgan Gangwere
10

11. Why Xiaomi
• Economic
• Easy to reverse
• Comfortable
• Battery last 30 days
• Easy to buy
11

12. Why Xiaomi
• Economic
• Easy to reverse
• Comfortable
• Battery last 30 days
• Easy to buy
We want to use the data detected from a cheap fitness tracker
to study medical conditions
Fitness Medical
12

13. Contacts
Reverse Engineering of
Biomedical Elaborated Signal
Laura.barilli@mail.polimi.it
Luisa.cucugliato@mail.polimi.it
https://www.facebook.com/reebes.project2016/
13