Bluetooth wireless technology is a communication framework implemented using an open standard. The standard introduces the cross-transport key derivation (CTKD) function in Bluetooth 4.2 to improve redundancy and the security mechanism of the protocol. CTKD allows the creation of pairing keys for both Bluetooth Classic (BT) and Low Energy (BLE) given pairing over one of the protocols. However, unintended sessions and impersonation attacks, e.g., BLUR, can be triggered on an established Bluetooth connection for devices that implement CTKD due to a lack of proper safeguard measures enforced in the Bluetooth standard. To mitigate the threat, we propose modifications to the open-source Android Bluetooth stack to prevent key overwrites across transports from CTKD. Moreover, we propose a framework design that aims to assign more controllability to end users over simultaneous BT and BLE connections. A real-world testbed is also designed and can be further used to evaluate the performance of our proposed countermeasures regarding the mitigation of BLUR attacks through our modified Android Bluetooth stack.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Mitigating Cross-Transport Key Derivation Attacks in Bluetooth Communication


    Beteiligte:
    Ali, Mohammad (Autor:in) / Zhang, Jielun (Autor:in) / Ye, Feng (Autor:in)


    Erscheinungsdatum :

    28.08.2023


    Format / Umfang :

    2038075 byte





    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Mitigating computer attacks

    BOUCADAIR MOHAMED / JACQUENET CHRISTIAN | Europäisches Patentamt | 2025

    Freier Zugriff

    MITIGATING COMPUTER ATTACKS

    BOUCADAIR MOHAMED / JACQUENET CHRISTIAN | Europäisches Patentamt | 2025

    Freier Zugriff

    CVGuard: Mitigating Application Attacks on Connected Vehicles

    Abdo, Ahmed / Wu, Guoyuan / Zhu, Qi et al. | IEEE | 2022


    Mitigating Position Falsification Attacks in Vehicular Platooning

    Boeira, Felipe / Asplund, Mikael / Barcellos, Marinho P. | IEEE | 2018


    Mitigating Link-flooding Attacks in Intelligent Transportation System

    Xia, Yu / Liu, Ying / Yin, Jianhui et al. | IEEE | 2024