# New LoRaWAN security software - In need of traffic to test

**URL:** <https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081>\
**Category:** Uncategorized\
**Created:** [September 19, 2019, 6:03pm UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081 "2019-09-19T18:03:36Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![matiassequeira](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/matiassequeira/32/25844_2.png) [@matiassequeira](https://www.thethingsnetwork.org/forum/u/matiassequeira)\
**Post date:** [September 19, 2019, 6:03pm UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081/1 "2019-09-19T18:03:36Z")

</div>

Hi all,

We’re just finishing a security software intended to analyze LoRaWAN traffic, in order to monitor traffic patterns and detect security anomalies, weak/default/easy AppKeys, etc.

Now we want to open it to the community ( **at no cost** ) and we are looking for volunteers with considerable amount of traffic that would like to share their gateways’ traffic. To set up the connection, it’s only required 5 minutes of set up in TTN console. We’d provide you with an URL and user/password to access our system and access our dashboard.

For those concerned about their privacy: Since our source of information is at network servr level, your application payload is encrypted. Nevertheless, we don’t analyze information at the application level.

Anyone interested, please contact me so I can send you more details and explain a little bit more about this new solution.

---

<div class="post-metadata">

**Author:** ![BoRRoZ](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/borroz/32/44234_2.png) [@BoRRoZ](https://www.thethingsnetwork.org/forum/u/BoRRoZ)\
**Post date:** [September 19, 2019, 6:36pm UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081/2 "2019-09-19T18:36:48Z")

</div>

> [@matiassequeira](#):
>
> weak/default/easy AppKeys

🙄🤔

why not explain a bit more here on this forum ?

---

<div class="post-metadata">

**Author:** ![cslorabox](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/cslorabox/32/35697_2.png) [@cslorabox](https://www.thethingsnetwork.org/forum/u/cslorabox)\
**Post date:** [September 19, 2019, 6:45pm UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081/3 "2019-09-19T18:45:23Z")

</div>

> [@matiassequeira](#):
>
> We’re just finishing a security software intended to analyze LoRaWAN traffic, in order to monitor traffic patterns and detect security anomalies, weak/default/easy AppKeys, etc.

Why don’t you put the analyzer up on github so that people can install and run it on their own traffic?

Or were you hoping people would donate their traffic to help you develop a proprietary algorithm?

---

<div class="post-metadata">

**Author:** ![LoRaTracker](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/loratracker/32/48502_2.png) [@LoRaTracker](https://www.thethingsnetwork.org/forum/u/LoRaTracker)\
**Post date:** [September 19, 2019, 7:41pm UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081/4 "2019-09-19T19:41:15Z")

</div>

So your after more traffic to test your App Key cracker ?

---

<div class="post-metadata">

**Author:** ![matiassequeira](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/matiassequeira/32/25844_2.png) [@matiassequeira](https://www.thethingsnetwork.org/forum/u/matiassequeira)\
**Post date:** [September 19, 2019, 9:40pm UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081/5 "2019-09-19T21:40:57Z")

</div>

> [@cslorabox](#):
>
> Why don’t you put the analyzer up on github so that people can install and run it on their own traffic?
> 
> Or were you hoping people would donate their traffic to help you develop a proprietary algorithm?

Hi!

Actually, there is an open source version of the analyzer 🙂 to be used on premise. You can get it here [GitHub - IOActive/laf: This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the security of a LoraWAN infrastructure.](https://github.com/IOActive/laf/)! Let me know if you have any doubt installing it.

Besides, we’re developing a commercial version with a frontend and many other functions (many of them based on IA). Now, we need to test it with more traffic, different to the one we can generate.

---

<div class="post-metadata">

**Author:** ![matiassequeira](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/matiassequeira/32/25844_2.png) [@matiassequeira](https://www.thethingsnetwork.org/forum/u/matiassequeira)\
**Post date:** [September 19, 2019, 9:42pm UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081/6 "2019-09-19T21:42:47Z")

</div>

> [@LoRaTracker](#):
>
> So your after more traffic to test your App Key cracker ?

Not only the cracker! There are many other functions, which check for traffic behaviour.

---

<div class="post-metadata">

**Author:** ![matiassequeira](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/matiassequeira/32/25844_2.png) [@matiassequeira](https://www.thethingsnetwork.org/forum/u/matiassequeira)\
**Post date:** [September 19, 2019, 9:46pm UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081/7 "2019-09-19T21:46:56Z")

</div>

> [@BoRRoZ](#):
>
> 🙄🤔
> 
> why not explain a bit more here on this forum ?

Many devices are deployed with vendors keys as they come, or people use easy-to-guess AppKeys such as the combination of the AppEUI+DevEUI and vice-versa.

Since the AppKey is a fundamental part in lorawan security, we check for these kind of keys that could be easily cracked by an attacker.

---

<div class="post-metadata">

**Author:** ![BoRRoZ](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/borroz/32/44234_2.png) [@BoRRoZ](https://www.thethingsnetwork.org/forum/u/BoRRoZ)\
**Post date:** [September 20, 2019, 9:00am UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081/8 "2019-09-20T09:00:03Z")

</div>

> [@matiassequeira](#):
>
> we check for these kind of keys

OK tnx, I had a quick peek at your **github** and now I understand it a bit more.

---

<div class="post-metadata">

**Author:** ![Vaelid](https://www.thethingsnetwork.org/forum/user_avatar/www.thethingsnetwork.org/vaelid/32/36194_2.png) [@Vaelid](https://www.thethingsnetwork.org/forum/u/Vaelid)\
**Post date:** [September 21, 2019, 9:10am UTC](https://www.thethingsnetwork.org/forum/t/new-lorawan-security-software-in-need-of-traffic-to-test/30081/9 "2019-09-21T09:10:35Z")

</div>

Hi this is Simon I run the northern Wiltshire community And run 4 gateways 2 active.I was a security consultant for Telecommunication networks world wide so ha experience in design, test and consultancy.Now retired so have more time.If interested then contact me.
