On practical selective jamming of Bluetooth Low Energy advertising

Bräuer, Sebastian; Zubow, Anatolij; Zehl, Sven; Roshandel, Mehran; Mashhadi-Sohi, Soroush

doi:10.1109/cscn.2016.7785169

Cited by 24 publications

(13 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This type of attack occurs in the physical layer. The perpetrator sends an unnecessary signal through the communication channel and creates radio noise between the connected devices [121] as illustrated in Fig. 10.…”

Section: ) Dos Using Jammingmentioning

confidence: 99%

Security and Privacy Threats for Bluetooth Low Energy in IoT and Wearable Devices: A Comprehensive Survey

Barua

Alamin

Hossain

et al. 2022

IEEE Open J. Commun. Soc.

View full text Add to dashboard Cite

Bluetooth Low Energy (BLE) has become the de facto communication protocol for the Internet of Things (IoT) and smart wearable devices for its ultra-low energy consumption, ease of development, good enough network coverage, and data transfer speed. Due to the simplified design of this protocol, there have been lots of security and privacy vulnerabilities. As billions of health care, personal fitness wearable, smart lock, industrial automation devices adopt this technology for communication, its vulnerabilities should be dealt with high priority. Some segregated works on BLE were performed focusing on various vulnerabilities, such as the insecure implementation of encryption, device authentication, user privacy, etc. However, there has been no comprehensive survey on the security vulnerabilities of this protocol. In this survey paper, we present a comprehensive taxonomy for the security and privacy issues of BLE. We present possible attack scenarios for different types of vulnerabilities, classify them according to their severity, and list possible mitigation techniques. We also provide case studies regarding how different vulnerabilities can be exploited in real BLE devices.

show abstract

Section: ) Dos Using Jammingmentioning

confidence: 99%

Security and Privacy Threats for Bluetooth Low Energy in IoT and Wearable Devices: A Comprehensive Survey

Barua

Alamin

Hossain

et al. 2022

IEEE Open J. Commun. Soc.

View full text Add to dashboard Cite

show abstract

“…Usually an attacker sending a PHY attack sends bits not following the communication protocol, preventing the data to be readable from an external IDS and making the attack extremely dif icult to detect. For example, authors in [36] propose an attack on the BLE physical layer which selectively jams the signal on speci ic channels whenever a device tries to connect. Instead of focusing on single protocols, other proposals have focused on creating IDSs capable of working on uniied IoT environment.…”

Section: Ids For Iotmentioning

confidence: 99%

Intrusion detection systems for IoT: Opportunities and challenges offered by edge computing

Spadaccino¹,

Cuomo²

2022

ITU J-FET

View full text Add to dashboard Cite

Key components of current cybersecurity methods are the Intrusion Detection Systems (IDSs), where different techniques and architectures are applied to detect intrusions. IDSs can be based either on cross-checking monitored events with a database of known intrusion experiences, known as signature-based, or on learning the normal behavior of the system and reporting whether anomalous events occur, named anomaly-based. This work is dedicated to the application of IDS to the Internet of Things (IoT) networks, where also edge computing is used to support IDS implementation. Specific attention is given to IDSs which leverage device classification at the edge. New challenges that arise when deploying an IDS in an edge scenario are identified and remedies are proposed.

show abstract

“…Multiple active attacks have also been presented in recent years. First, jamming-based attacks have been explored by Brauer et al in [6], they demonstrated an attack allowing to selectively jam advertisements. D. Cauquil also presented a new offensive tool named BTLEJack [9] allowing to disrupt an existing connection by jamming packets transmitted by one of the devices involved in a connection, called Slave.…”

Section: Related Workmentioning

confidence: 99%

InjectaBLE: Injecting malicious traffic into established Bluetooth Low Energy connections

Cayre

Galtier

Auriol

et al. 2021

2021 51st Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)

View full text Add to dashboard Cite

Bluetooth Low Energy (BLE) is nowadays one of the most popular wireless communication protocols for Internet of Things (IoT) devices. As a result, several attacks have targeted this protocol or its implementations in recent years, illustrating the growing interest for this technology. However, some major challenges remain from an offensive perspective, such as injecting arbitrary frames, hijacking the Slave role or performing a Manin-The-Middle in an already established connection. In this paper, we describe a novel attack called InjectaBLE, allowing to inject malicious traffic into an existing connection. This attack is highly critical as the vulnerability exploited is inherent to the BLE specification itself, which means that any BLE connection can be possibly vulnerable, regardless of the BLE devices involved in the connection. We describe the theoretical foundations of the attack, how to implement it in practice, and we explore four critical attack scenarios allowing to maliciously trigger a specific feature of the target device, hijack the Slave and Master role or to perform a Man-in-the-Middle attack. Finally, we discuss the impact of this attack and outline some mitigation measures.

show abstract

On practical selective jamming of Bluetooth Low Energy advertising

Cited by 24 publications

References 11 publications

Security and Privacy Threats for Bluetooth Low Energy in IoT and Wearable Devices: A Comprehensive Survey

Security and Privacy Threats for Bluetooth Low Energy in IoT and Wearable Devices: A Comprehensive Survey

Intrusion detection systems for IoT: Opportunities and challenges offered by edge computing

InjectaBLE: Injecting malicious traffic into established Bluetooth Low Energy connections

Contact Info

Product

Resources

About