.png){kind=icon}
返回
BLEWhisperer: Exploiting BLE Advertisements for Data Exfiltration
.png){kind=icon}
OA
AI
DOI：10.1007/978-3-031-17140-6_34.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Bluetooth technology has enabled short-range wireless communication for billions of devices. Bluetooth Low-Energy (BLE) variant aims at improving power consumption on battery-constrained devices. BLE-enabled devices broadcast information (e.g., as beacons) to nearby devices via advertisements. Unfortunately, such functionality can become a double-edged sword at the hands of attackers. In this paper, we primarily show how an attacker can exploit BLE advertisements to exfiltrate information from BLE-enable devices. In particular, our attack establishes a communication medium between two devices without requiring any prior authentication or pairing. We develop a proof-of-concept attack framework on the Android ecosystem and assess its performance via a thorough set of experiments. Our results indicate that such an exfiltration attack is indeed possible though with a limited data rate. Nevertheless, we also demonstrate potential use cases and enhancements to our attack that can further its severeness. Finally, we discuss possible countermeasures to prevent such an attack.
Keyword:
Advertisements
BLE
Bluetooth
Exfiltration
期刊
C
IF:
0
论文数:
5
被引数:
0
机构
引用论文
.png){kind=icon}
分享收藏 没有更多内容
没有更多内容