Over Christmas I started to throw around some crazy ideas for work, as I usually don’t have a lot of time to think outside the box. Ever since I was given a hardware keyboard logger by Frank Jones of Codex Data Systems at InfoSecurity Europe 2001, I have been quietly thinking about the possibilities of embedded systems and minature security devices. (a current link to the kind of keylogger I’m talking about is here by the way)
There is one specific security application I am currently investigating relating to small SBC systems, that of running a Linux system with nmap and various other network scanning tools, along with a mini-PCI 802.11 wireless card for remote access.
The various system boards I am looking at include:
There are loads and loads of smaller SBCs, basically intergrated circuit boards that contain the microcontroller, flash memory, ethernet controller, RAM, etc., but require you to hook up all the external connections. A short list of such microcontroller boards is as follows:
I’ll probably go with the CerfCube system at first, it’s not the smallest, but certainly offers the power and resources to run a pretty powerful Linux installation, plus its got a good shape (3 inches cubed, even with wireless).
One book I picked up today to help with the process is Building Embedded Linux Systems. There are a whole bunch of distributions with small footprints for use on embedded systems, including uClinux, RedHat eCos, and Embedded Linux, not sure which one I’ll go with yet, but the plan is to have 802.11 wireless and ethernet support, so the device can covertly run network scanning tools, and drop the results to an IBM microdrive on the device for collection and management later (via wireless).
That’s about all I’ve got to report right now, and I hope you find the links and resources useful. I strongly believe that these minature embedded Linux systems will prove as useful covert security testing systems into the future, we’ll see how I get along with my project in the coming months!
Please leave me any links, advice, or comments below, thanks..