Analysis of Bluetooth threats and v4.0 security features

Abstract

The advent of Bluetooth technology has made wireless communication easier. Any new invention or improvement is viewed very closely by people who are looking to gain information in an unauthorized manner. Security in any area is given more importance as it leads to better product and satisfied customers. The initial days of any technological invention is more challenging as they deal with new issues every day. The product/ invention needs to keep evolving to address the growing list of new features requirement and handling of security issues. Bluetooth security has evolved a lot with different versions of blue tooth. Keeping in mind the growing list of Bluetooth products in the market, there has been lot of improvements done in the version 4.0 of Bluetooth. The LE (Low Energy) operational mode which is new in version 4.0 has slightly different security association models. In this paper, a review of the recent studies in the analysis of Bluetooth security issues and new security features of v4.0 is done. Specifically the paper covers secure simple pairing in Bluetooth normal mode and low energy mode. For each threat, the particular issues are addressed and a review of major approaches to improve security of Bluetooth communication using secure simple pairing is discussed.

Deployment optimization of IoT devices through attack graph analysis

“…In [34], techniques were presented for eavesdropping on devices using Bluetooth. An extended review of Bluetooth threats and possible attacks was performed by Minar et al , Sandya et al and Dunnin [10,22,35], and recently, Cope et al [9] investigated the currently available tools to exploit vulnerabilities in Bluetooth. In conclusion, many Bluetooth versions that are in use today, have a wide variety of security vulnerabilities.…”

A Robust Algorithm for Sniffing BLE Long-Lived Connections in Real-Time

“…Bluetooth specification defines several security mechanisms for authentication and link layer security, but it is often seen that developers ignore these security measures to trade for design simplicity and to obtain fast market access. There is some well-documented case of attacks on BLE devices that comprise of intervening BLE connections, stealing private information [7]- [9] and jamming [10]. These active attacks, although detrimental, can be easily detected by intrusion detection systems [11], [12].…”

Classification of Security Risks in the IoT Environment

“…There are four modes of protection (Security mode 1, Security mode 2, Security mode 3 and Security mode 4). Mode 1 does not require authentication and encryption, mode 2 applies authentication and encryption exclusively for individual services such as data transfer, mode 3 forces authentication, and encryption before the connection with the device is established, and mode 4 uses a simple method of pairing with the aim of establishing security on the service level [22].…”