Radio frequency based reverse engineering of microcontroller program execution

This paper investigates a methodology for reverse engineering the sequence of operations executed by a microcontroller unit (MCU). Unintentional radio-frequency (RF) emissions are collected from a device and compared with a library of reference signals using a matched filter to identify operations. The reconstructed program sequence can be used to detect rogue device operation.