Security Vulnerabilities in Bluetooth Technology as Used in IoT

Journal of Sensor and Actuator Networks

BassamJ. Mohd¹  Peter Cope²  Joseph Campbell²  AngelaM. Lonzetta³  Thaier Hayajneh³ 

[1] Computer Engineering Department, Hashemite University, Zarqa 13133, Jordan;Computer Science Department, New York Institute of Technology, Old Westbury, NY 11568, USA;Fordham Center for Cybersecurity, Fordham University, New York, NY 10023, USA;

关键词: Bluetooth;    Bluetooth hacking;    Bluetooth attacks;    Bluetooth countermeasures;    Bluetooth security;    IoT;    BlueBugging;    BlueJacking;    BlueBorne;    Bluetooth vulnerabilities;   

DOI  :  10.3390/jsan7030028

来源: DOAJ

【 摘 要 】

Bluetooth technology is a key component of wireless communications. It provides a low-energy and low-cost solution for short-range radio transmissions. Bluetooth, more specifically Bluetooth Low Energy (BLE) has become the predominant technology for connecting IoT (Internet of Things). It can be found in cell phones, headsets, speakers, printers, keyboards, automobiles, children’s toys, and medical devices, as well as many other devices. The technology can also be found in automated smart homes, to provide monitors and controls for lights, thermostats, door locks, appliances, security systems, and cameras. Bluetooth offers convenience and ease of use, but it lacks a centralized security infrastructure. As a result, it has serious security vulnerabilities, and the need for awareness of the security risks are increasing as the technology becomes more widespread. This paper presents an overview of Bluetooth technology in IoT including its security, vulnerabilities, threats, and risk mitigation solutions, as well as real-life examples of exploits. Our study highlights the importance of understanding attack risks and mitigation techniques involved with using Bluetooth technology on our devices. Real-life examples of recent Bluetooth exploits are presented. Several recommended security measures are discussed to secure Bluetooth communication.

【 授权许可】

Unknown