Projects:2018s1-168 Penetration Testing of the SpaceTalk Tracking Watch

Project Team

Brent Williams

Sasha de Vries

Supervisors

Dr Matthew Sorell

Prof Tobias Eggendorfer

Introduction

Wearable devices have become a popular commodity across the globe, with many different brands, shapes, models and sizes available. Wearable technologies have advanced to produce children’s wearable devices which allow parents to monitor and contact their child, examples of these include Moochies, Watchem, Movetime and Gator. In this project, the SpaceTalk safety watch from All My Tribe will be analysed. The SpaceTalk watch has minimal features reducing the complexity of the user interface and allowing a child to be able to call and message preselected contacts. The watch also can act as a GPS tracking device which allows safe locations to be set like a child’s home or school. Other features on the watch include a timer, pedometer, torch function and an SOS button. In this project, we aim to identify and investigate the security flaws of the SpaceTalk Tracking Watch. After identification, the focus will be on the malicious capabilities of the located flaws and how they may be used to extract and analyse data on the watch to learn schedules and locations of the individual wearing or to falsify data. Ultimately, the aim is to determine if the security protocols on the wearable are sufficient to provide parents with confidence that a child user is safe and that the information contained on the SpaceTalk is accurate and cannot be accessed by unauthorised third parties.

Abstract

Wearable devices are a popular commodity across the globe with the latest design being a children safety watches. The project focuses on the locating of security flaws in a specific safety watch. The SpaceTalk watch is being investigated to ensure parents can be confident in their child's safety while wearing the device. The malicious capabilities of locating security flaws of the watch and the connection to the application are being investigated.