Bluetooth wireless technology is a communication framework implemented using an open standard. The standard introduces the cross-transport key derivation (CTKD) function in Bluetooth 4.2 to improve redundancy and the security mechanism of the protocol. CTKD allows the creation of pairing keys for both Bluetooth Classic (BT) and Low Energy (BLE) given pairing over one of the protocols. However, unintended sessions and impersonation attacks, e.g., BLUR, can be triggered on an established Bluetooth connection for devices that implement CTKD due to a lack of proper safeguard measures enforced in the Bluetooth standard. To mitigate the threat, we propose modifications to the open-source Android Bluetooth stack to prevent key overwrites across transports from CTKD. Moreover, we propose a framework design that aims to assign more controllability to end users over simultaneous BT and BLE connections. A real-world testbed is also designed and can be further used to evaluate the performance of our proposed countermeasures regarding the mitigation of BLUR attacks through our modified Android Bluetooth stack.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Mitigating Cross-Transport Key Derivation Attacks in Bluetooth Communication


    Contributors:
    Ali, Mohammad (author) / Zhang, Jielun (author) / Ye, Feng (author)


    Publication date :

    2023-08-28


    Size :

    2038075 byte





    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Mitigating computer attacks

    BOUCADAIR MOHAMED / JACQUENET CHRISTIAN | European Patent Office | 2025

    Free access

    MITIGATING COMPUTER ATTACKS

    BOUCADAIR MOHAMED / JACQUENET CHRISTIAN | European Patent Office | 2025

    Free access

    CVGuard: Mitigating Application Attacks on Connected Vehicles

    Abdo, Ahmed / Wu, Guoyuan / Zhu, Qi et al. | IEEE | 2022


    Mitigating Position Falsification Attacks in Vehicular Platooning

    Boeira, Felipe / Asplund, Mikael / Barcellos, Marinho P. | IEEE | 2018


    Mitigating Link-flooding Attacks in Intelligent Transportation System

    Xia, Yu / Liu, Ying / Yin, Jianhui et al. | IEEE | 2024