Always-On System Unmasks Covert Signals Across the Radio Spectrum

A labeled hardware prototype setup on a wooden tabletop showing RF components, cables, and a USRP N210 device.

Modern security systems have a dangerous blind spot: a rogue wireless signal can leak sensitive data or disrupt critical infrastructure in less than a millisecond, yet conventional monitors consume too much power to remain constantly vigilant.

University of Maryland study published earlier this year shows how connected networks can be vulnerable to covert radio transmissions that disappear before standard security systems register them. Traditional wideband monitors require immense power to scan broad ranges of radio frequencies, allowing these fleeting transmissions to escape detection.

To close that gap, the research team developed SpecSentry, a micropower spectrum surveillance system that continuously monitors the airwaves on a tiny energy budget and captures ephemeral wireless threats as they occur. The findings challenge a long-standing trade-off between broad frequency coverage and battery life.

The study was led by Aritrik Ghosh, a fifth-year doctoral student in computer science, with his adviser and study co-author Nirupam Roy, an assistant professor of computer science with an appointment in the University of Maryland Institute for Advanced Computer Studies (UMIACS).

The researchers presented their paper, “SpecSentry: Micro-power Wideband Spectrum Surveillance for Ephemeral Transmissions,” in June at the ACM International Conference on Mobile Systems, Applications, and Services (MobiSys) in Cambridge, U.K.

At the heart of SpecSentry is a four-stage “mark-fold-capture-detect” pipeline that enables simultaneous observation across wide frequency bands, demonstrated here over a 400 MHz swath. Unlike conventional systems that scan smaller portions of the spectrum sequentially, SpecSentry captures the entire wideband spectrum at once by deliberately exploiting a normally undesirable characteristic of the filter.

Specifically, a receiver’s passive filter imprints a distinct, frequency-dependent signature on incoming signals. Because the filter draws no power, it adds this marker without increasing the system’s energy demands.

“Filter and antenna engineers have battled for decades with phase distortion in these filters—it’s a defect you normally try to equalize away,” Ghosh said. “We realized this ‘flaw’ could be exactly the signature maker we needed: the filter’s phase response naturally imprints a distinctive, frequency-dependent stamp on any signal passing through it.”

Ghosh compares the process to identifying hidden ingredients in a blended dish. Although blending erases the visual evidence, distinctive spices added to each ingredient remain recognizable to a trained palate. Similarly, SpecSentry uses the filter’s signatures to identify signals hidden within the compressed spectrum.

A simple diode-based circuit then “folds” the broad stretch of spectrum into a compact format, allowing low-power chips to process the data at less than one-twentieth the standard sampling rate. A lightweight AI model untangles the overlapping signatures and determines each signal’s timing, frequency and bandwidth.

When Ghosh and Roy tested SpecSentry across a 400 MHz band, the system achieved near-perfect accuracy—even for transient signals lasting less than a millisecond. Its median error in estimating bandwidth was just 0.3 MHz, a razor-thin margin when monitoring hundreds of megahertz.

Ghosh said covert transmissions might appear for only a few milliseconds before going silent for hours. By continuously monitoring a broad frequency range, SpecSentry can catch them the moment they occur.

Overcoming the conventional trade-off between frequency coverage and energy consumption required rethinking a common assumption in wireless security, Roy said.

“Many people assume that to monitor a wide swath of the wireless spectrum, you need an immense power budget,” Roy said. “Our research shows that by shifting the heavy lifting to smart mathematical folding and lightweight machine learning, we can achieve total vigilance on a microscopic power budget.”

Roy, who is also a core member of the Maryland Cybersecurity Center, said the project has drawn interest from industry and academia as the radio spectrum becomes an increasingly important security domain.

The proliferation of internet of things devices, embedded sensors, autonomous platforms and connected infrastructure has placed billions of wireless devices in homes, cities, factories and military environments. Along with their benefits, these technologies create new opportunities for unauthorized communication, covert wireless activity and spectrum misuse.

Monitoring that activity has become a major security bottleneck in civilian and defense settings, Roy said. By sharply reducing the power and hardware required by traditional systems, SpecSentry could make continuous, widespread monitoring practical.

“This could enable a new generation of spectrum-security sensors that help detect suspicious wireless activity, improve situational awareness, and strengthen the security of increasingly connected environments,” he said.

The technology could have applications in critical infrastructure, smart factories and defense systems that depend on secure, uninterrupted wireless communication.

“Our long-term vision is to make continuous spectrum monitoring practical in places that cannot be covered by a small number of expensive spectrum analyzers,” Ghosh said. “We envision a distributed, always-on wireless security layer that is inexpensive and energy-efficient enough to deploy at scale.”

—Story by Melissa Brachfeld, UMIACS communications group

Published September 9, 2026