1

Research Electronics Intl • 455 Security Drive • Algood, TN 38506 USA • +1 931 537-6032 • 800-824-3190 (US only) • Fax +1 931 537-6089www.reiusa.net

INSIDE THIS ISSUE

Questions, comments, suggestions, or to add someone to the REI Newsletter

mailing list, please e-mail: newsletter@reiusa.net

When comparing spectrum analyzers, it has become common to reference a 100% Probability of Intercept (POI) specification. POI refers to the minimum transmitter pulse duration that can be detected with a 100% Probability of Intercept. When looking at these types of specifications, it is very important to understand the assumptions behind the claims and how they are calculated; with POI, it is essential to understand the span at which the POI spec is calculated.

Let’s take, for example, another manufacturer's spectrum analyzer that we will call Product X, which claims the following specification in their printed literature: “10,000 spectrums per second with 100% probability of capturing transients with minimum duration of 125 microseconds.” This is certainly an impressive spec. However, it only applies when the span is set to a single instantaneous bandwidth block of 20MHz wide and it ignores the remainder of the spectrum.

The 100% POI, defined in this manner, is only

meaningful if you already know what the frequency is of the suspicious signal. This specification could be very useful for in-depth analysis of a specific known intermittent signal, for example product development testing. However, if you are looking for unknown signals that could be anywhere in the spectrum, or at least beyond a 20MHz span, this definition of POI is NOT useful.

The graphic above highlights a 20MHz span. This span is not large enough to display even the entirety of a WiFi signal. Also missed is the surrounding spectrum where another possibly suspicious signal is lurking.

All modern spectrum analyzers have a front-end analog sweeping block which breaks the spectrum in ‘blocks’ equal in size to their instantaneous bandwidth. Following that, an analog to digital converter samples this instantaneous block bandwidth for digital processing. When looking at Product X, the digital side is really fantastic and great for looking at 20MHz blocks one at a time. Yet, the analog front-end is very slow.

Probability of Intercept Feature

Storing OSCOR Demodulated Signals (pg. 2)

Using Broadband Receivers to Find Transmitters (pg. 3)

Saved Spectrogram File Structure (pg. 4)

New Product Demonstration in Washington D.C. area (pg. 4)

In-house Manufacturing (pg. 5)

TSCM In the News (pg. 6)

Tradeshows & Seminars (pg. 6)

Training Calendar (pg. 6)

Continued on next page

PROBABILITY OF INTERCEPT

http://www.research-electronics.com/cgi-bin/main.cgi?action=view&ct=training&id=1080619205430299mailto:newsletter@reiusa.net

When looking for signals where the frequency is unknown (meaning the user needs to use a wide span) and considering a 100% POI type of specification, it is vital to consider a whole range of values depending on the frequency span.

OSCOR Green POI:

Frequency Span 1 pulse 100% POI duration25MHz 1.1 msec100MHz 4.2 msec1GHz 42 msec24GHz 1 sec

The OSCOR Green sweeps a full 24GHz in one second at a 12.2kHz resolution. When the span is narrowed, the sweep rate increases. Therefore, the 100% POI gets smaller and smaller. This is a much more practical manner to compare this spec for unknown signals.

When searching for unknown signals, the OSCOR Green provides an outstanding sweep speed performance and corresponding 100% POI. The analog sweep speed and corresponding digital processing are well-balanced to provide the best of both worlds when searching for unknown signals.

REI

PROBABILITY OF INTERCEPT (Continued)(Continued)

2

STORING OSCOR DEMODULATED SIGNALSTo assist with report writing and analysis after a sweep is complete, the OSCOR provides the ability to

capture various types of information from the display, demodulated video, and audio signals. All information captured is stored to either a compact flash card or a USB storage device, not the OSCOR itself. In order to recognize an external USB hard drive, the device must be formatted with a FAT file system such as FAT32. If needed, the OSCOR can format the hard drive using the Storage Manager feature (see page 22 of the OSCOR Green manual).

ScreenshotsScreenshots are a quick way of capturing everything on the OSCOR display and can be taken at any point. To take a screenshot, press and release the SHIFT key followed by the HELP key. A dialog box will appear allowing users to select the location, file type, and file name before saving. Screenshots can be saved as .png or .bmp files.

AudioThere are two options available to record audio captured using the OSCOR. The Quick Record feature allows a user to easily record up to 30 seconds of audio that starts immediately when selected without having to adjust the recording properties first. After 30 seconds or when the

user manually stops the recording, a dialog box appears allowing the user to specify the location and file type before saving.

To record longer durations of audio, it is necessary to use the Record Audio feature, which requires users to setup the file location and type before the recording will begin. The OSCOR will continue recording audio to a file until it is either manually halted by the user, or when the storage device becomes full.

Demodulated VideoThe OSCOR can capture screen shots of demodulated analog video for post analysis. In the Analyze Mode video demodulation screen, press the Frame Capture icon to capture a still image and save it to a .png or .bmp file. The OSCOR manual also provides instructions on how to activate the Baseband Out Port while demodulating an analog signal in order to record to an external device.

Taking the time to store information captured by the OSCOR can greatly assist with the documentation process after users are no longer on site. To find out more about the OSCOR Spectrum Analyzer or the types of the training courses offered at REI, contact sales@reiusa.net.

REI

mailto:sales@reiusa.net

3

Broadband detectors like the REI CPM700 can be used to physically sweep a room to locate the source of an RF transmission. One of the benefits of a broadband detector is the displayed response to a nearby transmitter is almost instantaneous. When the antenna comes within range of a transmitter, an immediate response is displayed if it is the strongest signal present.

Broadband refers to the wide frequency range or spectrum within which the broadband detector is able to detect signals. The broadband detector will see any RF energy, regardless of the signal type (broadband vs. narrowband, modulated, etc.).

Broadband detectors commonly display the highest RF level in the area as a bar graph or spectral graph. As the receiver antenna gets closer to a transmitter the signal increases, and decreases as it moves away. To find the location of a hidden surveillance transmitter, find the area of the room that produces the highest level on the bar graph. A “walk around sweep” will locate the area of a room that is “HOT” with RF energy.

The detection range depends on several factors; the

transmit power, antenna efficiency, and signal pattern. The volume of surrounding RF energy is also a key factor, such as commercial radio/TV/cell phone and two-way radio transmissions. In large cities and areas of high concentrations of RF activity, the receiver can become over saturated. If the receiver has adjustable gain settings, it may be necessary to adjust gain or attenuation.

Some of the functions a typical broadband receiver can perform include:

• RF - band specific probes provide different frequency sensitivities such as Cell phone or WiFi bands

• VLF or Carrier Current – detects low frequency transmissions on cables and wiring

• IR – tests for Infrared transmitters • Audio Amplifier – amplifies low-power audio signals

for basic audio testing• Attenuation Control – to lessen signal intensity• Audio Demodulation – for recognizing room audio

Audio and video devices can transmit information using RF energy to a listening post. They may also send information along ordinary power lines, phone lines, or building wiring. Information may be analog (modulated onto the signal) or digital (encoded into a series of 1’s and 0’s that will be de-coded at the listening post). Utilizing various probes in addition to a broadband receiver can assist in detecting these types of transmitters.

A broadband detector is a physical search tool and foundational to countermeasures work. Any sweep must include a complete physical search of the target area and will usually require many tools and methods to perform thorough investigations. The REI Training Center Countermeasures Core Level 1 course teaches the use of the CPM 700 and other products for investigating illicit information theft. Click here for more information on the

Countermeasures Core Level 1 Course.

REI

USING BROADBAND RECEIVERS TO FIND TRANSMITTERS

Figure A - Shows a CPM 700 and BMP probe being used to

sweep for transmitters.

http://www.reiusa.net/cgi-bin/main.cgi?action=view&ct=training&id=1110512162429980

SAVED SPECTROGRAM FILE STRUCTURE

NEW PRODUCT DEMONSTRATION IN WASHINGTON D.C. AREA

REI is continuously developing new products and we want to give you a sneak peek of our recent additions. Following the success of our May product demonstrations in the Washington D.C. area, REI is offering another chance to view our newest products and the latest developments on existing products.

WHEN: August 30 at 9:00 A.M. orAugust 31 at 9:00 A.M.

WHERE: AC Hotel156 Waterfront StreetNational Harbor, Maryland

Visit http://www.reiusa.net/quick/demo-2016 to learn more and RSVP. Pre-registration is required by Wednesday, August 24 in order to attend. Please e-mail michelle@reiusa.net if you have any questions.

REI

When the OSCOR saves a Spectrogram waterfall file, it may be confusing to see a perceptibly small

.wfl file size in comparison to what might be expected from a long term data capture.

OSCOR Spectrograms are actually made up of multiple data files. When opening a Spectrogram on the OSCOR to review, the dialog box will display only the .wfl header file that is used to load the supporting data files to recreate the waterfall. The size of this header file will typically be a few KB or less (most frequently 1 KB as pictured below).

Also contained in the saved folder are all the hidden data files used to recreate the waterfall for review. The size of these files will depend upon the setup and duration of the waterfall. These files are not visible to the user on the OSCOR but are required to open the Spectrogram. On a PC, the data files will be in a folder with the same file name as the .wfl header file. Therefore, when copying Spectrogram files between different media, copy the entire Spectrogram folder versus only the header .wfl file.

If you have further questions, please contact REI Technical Support at 931-537-6032.

REI

4

http://www.reiusa.net/quick/demo-2016mailto:michelle@reiusa.net

For over thirty years, REI has been manufacturing its entire product line in-house. “We have people behind our products,” says Production Manager Derek Lane. “A team of individuals work together, each an expert on the component for which they are responsible, to assemble every product before it makes one last stop.”

Tony Parsons (pictured below) is one of those last stops. “I’m the ORION specialist,” says Parsons. He has been overseeing final assembly and quality assurance of REI’s ORION product line for the last seven years.

According to the Associated Press, over fifty percent of U.S. manufacturing jobs are being outsourced. So why does REI continue to produce each item under their own roof? There are several benefits of operating in this manner; benefits that are then conveyed to customers:

QualityREI sees, touches, and tests each product before it is shipped out. With complete control over the manufacturing process, REI does not have to be concerned with whether a third-party company is dedicated to the quality of their products.

Unlike many companies, REI does not have a standalone repair department. If a product has been damaged and needs to be fixed, it returns to the individual who assembled it. “No one knows more about the product than I do, because I built it. I’m the most qualified person to repair it,” says Parsons.

AdaptabilityREI does not batch manufacture products only to have them sit on a shelf. Low volumes are maintained to allow for adaptability to change. “We can make manufacturing changes in as little as twenty-four hours,” says Lane. “If an adjustment is needed to improve production, we can make that happen almost immediately.”

SpecificityREI’s engineering and production departments work in tandem, making software and hardware that are specifically designed for each other. If either function was outsourced, REI could be forced to make compromises to ensure compatibility. From beginning to end, REI knows that each element is going to work together seamlessly. Each time a customer orders an ORION from REI they can be confident that it meets the highest standards (and Tony assures it).

REI

IN-HOUSE MANUFACTURING

5

Research Electronics International455 Security Drive • Algood, TN 38506 USATEL +1 931.537.6032 • FAX +1 931.537.6089www.reiusa.net

2016 REI TRAINING CALENDAR

SENATE PASSES TRADE-SECRETS BILLApril 4, 2016Source: The Wall Street JournalArticle: http://on.wsj.com/1qnxqKT

EX-CORRECTIONS OFFICER SENTENCED FOR RECORDING SUPERIORSJune 23, 2016Source: Allegan Co. NewsArticle: http://bit.ly/298qOKB

CHINA SENTENCES MAN TO DEATH FOR ESPIONAGE, SAYING HE SOLD SECRETSApril 19, 2016Source: New York TimesArticle: http://nyti.ms/295o5Db

3D PRINTERS WIDE-OPEN TO HACKINGMarch 8, 2016Source: Network WorldArticle: http://bit.ly/21WzPg9

HERE'S HOW YOUR SMARTPHONE'S VIBRATION MOTOR MAY HELP OTHERS SPY ON YOUJune 7, 2016Source: Tech TimesArticle: http://bit.ly/1PppdLT

NAVY SAILOR PLEADS GUILTY TO ESPIONAGE FOR SUBMARINE PHOTOSMay 27, 2016Source: The HillArticle: http://bit.ly/1XWujWS

EAVESDROPPING 'ROBO-BEES' USE STATIC TO PERCH ON THE CEILINGMay 20, 2016Source: The TimesArticle: http://bit.ly/1r07oN8

Countermeasures Core Concepts Level 1August 1 - 5

RF OSCOR Course Level 2Frequency AnalysisAugust 8 - 12

TALAN Telephone Countermeasures Course Level 2August 8 - 12

RF OSCOR Certification CourseLevel 3August 15 - 19

Countermeasures Core Concepts Level 1September 12 - 16

RF OSCOR Course Level 2Frequency AnalysisSeptember 19 - 23

TALAN Telephone Countermeasures Course Level 2September 19 - 23

VoIP Voice Over Internet Protocol Course Level 3September 26 - 28

Countermeasures Core Concepts Level 1October 3 - 7

SPANISH COURSE PACKAGE

Spanish RF OSCOR/TALANLevel 2October 3 - 14

RF OSCOR Course Level 2Frequency AnalysisOctober 10 - 14

Advanced Equipment Use Level 3October 17 - 21

Countermeasures Core Concepts Level 1October 31 - November 4

RF OSCOR Course Level 2Frequency AnalysisNovember 7 - 11

TALAN Telephone Countermeasures Course Level 2November 7 - 11

RF OSCOR Course Level 2Frequency AnalysisNovember 14 - 18

TALAN Certification Course Level 2November 14 - 18

COURSE DATES & REGISTRATIONwww.reiusa.net/quick/coursereg

TRADESHOWS & SEMINARS

FBINAA NATIONAL CONFERENCEJuly 23 - 26, 2016America's Center, St. Louis, Missourihttp://www.fbinaa2016.com/

ASIS INTERNATIONALSeptember 12 - 15, 2016Orange County Convention Center, Orlando, Floridahttps://securityexpo.asisonline.org

WORLD INVESTIGATOR'S CONFERENCEAugust 16 - 19, 2016La Torretta Lake Resort, Montgomery, Texashttp://2016wic.com/

SECURITY ESSENSeptember 27 - 30, 2016Essen Fairground, Essen, Germanyhttp://www.security-essen.de

:// IN THE NEWS

6

http://www.reiusa.nethttp://http://tinyurl.com/p6lbxnjhttp://on.wsj.com/1qnxqKThttp://tinyurl.com/p6lbxnjhttp://bit.ly/298qOKBhttp://nyti.ms/295o5Dbhttp://tinyurl.com/p6lbxnjhttp://bit.ly/21WzPg9http://tinyurl.com/p6lbxnjhttp://bit.ly/1PppdLThttp://tinyurl.com/p6lbxnjhttp://bit.ly/1XWujWShttp://tinyurl.com/p6lbxnjhttp://bit.ly/1r07oN8www.reiusa.net/quick/coursereghttp://www.fbinaa2016.com/https://securityexpo.asisonline.orghttp://2016wic.com/http://www.security-essen.de

PROBABILITY OF INTERCEPTContinued on next pageSTORING OSCOR DEMODULATED SIGNALSUSING BROADBAND RECEIVERS TO FIND TRANSMITTERSSAVED SPECTROGRAM FILE STRUCTURENEW PRODUCT DEMONSTRATION IN WASHINGTON D.C. AREAIN-HOUSE MANUFACTURING://in the newsTRADESHOWS & SeminarsCountermeasures Core Concepts Level 1