| _version_ | 1866902010621591552 |
|---|---|
| author | Rachit Parmar Raj Hakani |
| author_facet | Rachit Parmar Raj Hakani |
| contents | <p>Bluetooth Low Energy (BLE) is a ubiquitous IoT connectivity technology, but its rapid adoption has outpaced security measures. We analyze BLE device security by implementing Denial-of-Service (DoS) and Man-in-the-Middle (MITM) attacks using off-the-shelf tools on Attify OS. We study BLE protocol weaknesses, develop attacks with gatttool and Bettercap, and build a real-time Python monitor (using bluepy) to scan for unauthorized BLE devices. Experimental results (on an ESP32 peripheral and BLE dongle) demonstrate that simple scripts can induce device crashes and spoof service data, with observable CPU spikes and connection disruption. Our BLE monitor (with configurable whitelist) detects scanning and unauthorized connections with high accuracy and low latency. We report comparative metrics (attack duration, resource usage) and discuss how layered defenses (secure pairing, IDS integration) can mitigate these threats. The findings underline the need for continuous BLE monitoring and improved BLE 5.x protocols for IoT security. Bluetooth Low Energy (BLE) is a ubiquitous IoT connectivity technology, but its rapid adoption has outpaced security measures. We analyze BLE device security by implementing Denial-of-Service (DoS) and Man-in-the-Middle (MITM) attacks using off-the-shelf tools on Attify OS. We study BLE protocol weaknesses, develop attacks with gatttool and Bettercap, and build a real-time Python monitor (using bluepy) to scan for unauthorized BLE devices. Experimental results (on an ESP32 peripheral and BLE dongle) demonstrate that simple scripts can induce device crashes and spoof service data, with observable CPU spikes and connection disruption. Our BLE monitor (with configurable whitelist) detects scanning and unauthorized connections with high accuracy and low latency. We report comparative metrics (attack duration, resource usage) and discuss how layered defenses (secure pairing, IDS integration) can mitigate these threats. The findings underline the need for continuous BLE monitoring and improved BLE 5.x protocols for IoT security.</p> |
| format | Recurso digital |
| id | zenodo_https___doi_org_10_5281_zenodo_15690012 |
| institution | Zenodo |
| language | |
| publishDate | 2024 |
| publisher | Zenodo |
| record_format | zenodo |
| spellingShingle | A BLE Characteristic Analysis And Enhancement Using Attify OS For IoT Devices Rachit Parmar Raj Hakani <p>Bluetooth Low Energy (BLE) is a ubiquitous IoT connectivity technology, but its rapid adoption has outpaced security measures. We analyze BLE device security by implementing Denial-of-Service (DoS) and Man-in-the-Middle (MITM) attacks using off-the-shelf tools on Attify OS. We study BLE protocol weaknesses, develop attacks with gatttool and Bettercap, and build a real-time Python monitor (using bluepy) to scan for unauthorized BLE devices. Experimental results (on an ESP32 peripheral and BLE dongle) demonstrate that simple scripts can induce device crashes and spoof service data, with observable CPU spikes and connection disruption. Our BLE monitor (with configurable whitelist) detects scanning and unauthorized connections with high accuracy and low latency. We report comparative metrics (attack duration, resource usage) and discuss how layered defenses (secure pairing, IDS integration) can mitigate these threats. The findings underline the need for continuous BLE monitoring and improved BLE 5.x protocols for IoT security. Bluetooth Low Energy (BLE) is a ubiquitous IoT connectivity technology, but its rapid adoption has outpaced security measures. We analyze BLE device security by implementing Denial-of-Service (DoS) and Man-in-the-Middle (MITM) attacks using off-the-shelf tools on Attify OS. We study BLE protocol weaknesses, develop attacks with gatttool and Bettercap, and build a real-time Python monitor (using bluepy) to scan for unauthorized BLE devices. Experimental results (on an ESP32 peripheral and BLE dongle) demonstrate that simple scripts can induce device crashes and spoof service data, with observable CPU spikes and connection disruption. Our BLE monitor (with configurable whitelist) detects scanning and unauthorized connections with high accuracy and low latency. We report comparative metrics (attack duration, resource usage) and discuss how layered defenses (secure pairing, IDS integration) can mitigate these threats. The findings underline the need for continuous BLE monitoring and improved BLE 5.x protocols for IoT security.</p> |
| title | A BLE Characteristic Analysis And Enhancement Using Attify OS For IoT Devices |
| url | https://doi.org/10.5281/zenodo.15690012 |