TL;DR: An overview of Bluetooth technology in IoT including its security, vulnerabilities, threats, and risk mitigation solutions, as well as real-life examples of exploits are presented.
Abstract: Bluetooth technology is a key component of wireless communications It provides a low-energy and low-cost solution for short-range radio transmissions Bluetooth, more specifically Bluetooth Low Energy (BLE) has become the predominant technology for connecting IoT (Internet of Things) It can be found in cell phones, headsets, speakers, printers, keyboards, automobiles, children’s toys, and medical devices, as well as many other devices The technology can also be found in automated smart homes, to provide monitors and controls for lights, thermostats, door locks, appliances, security systems, and cameras Bluetooth offers convenience and ease of use, but it lacks a centralized security infrastructure As a result, it has serious security vulnerabilities, and the need for awareness of the security risks are increasing as the technology becomes more widespread This paper presents an overview of Bluetooth technology in IoT including its security, vulnerabilities, threats, and risk mitigation solutions, as well as real-life examples of exploits Our study highlights the importance of understanding attack risks and mitigation techniques involved with using Bluetooth technology on our devices Real-life examples of recent Bluetooth exploits are presented Several recommended security measures are discussed to secure Bluetooth communication
TL;DR: This work presents a taxonomy of attacks against mobile phones that shows known as well as potential attacks, and describes viruses, worms, and trojans specifically designed for the mobile environment.
Abstract: Understanding existing threats against mobile phones helps us better protect our information and prepare for future dangers. Mobile phones have evolved from their roots as analog walkie-talkies to full-scale Internet-enabled computers. Today, mobile phone handsets are arguably the dominant computer form factor consumers purchase. But having such powerful networked computers leads to a new class of malware: viruses, worms, and trojans specifically designed for the mobile environment. Merely enumerating known attacks doesn't help us understand all possible threats. Instead, we present a taxonomy of attacks against mobile phones that shows known as well as potential attacks.
TL;DR: This paper model the attacks of Bluesnarfing, Bluejacking and Bluebugging by using Colored Petri-Nets and verify their liveness, fairness, and boundness properties, and mine models to analyze attacks.
Abstract: The Bluetooth port of the Smart Phones is subject to threat of attacks of Bluesnarfing, Bluejacking and Bluebugging. In this paper, we aim to deal with mining these attacks. Having explained properties of the three attack types, we state three typical cases of them including SMS manipulation, phone book manipulation, and phone call initiation. According to characteristics of each attack type, we model the attacks by using Colored Petri-Nets and then mine the models. To show correctness of our models, we verify their liveness, fairness, and boundness properties. Finally, we mine models to analyze attacks.