Bluetooth Presented by Venkateshwar R Gotur CMPT 320

Bluetooth Presented by Venkateshwar R Gotur CMPT - 320

AGENDA Bluetooth Overview u Types of Bluetooth enabled devices and technology u Benefits of Bluetooth u Bluetooth Security, Vulnerabilities and Threads u Security Recommendations, Needs and Requirements. u

Bluetooth Overview u u u Bluetooth was founded in 1998 by: Ericsson, Intel, IBM, Toshiba and Nokia Created in order to promote, shape an define the specification and position Bluetooth in the market place It name comes form the 10 th century Danish King Harald, who managed to unite Denmark and Norway

Continued… u u u Bluetooth is a radio technology used for exchanging data over short distances Bluetooth is a standard and communication protocol primarily designed for low power consumption, with a short range based on low cost transceiver microchips in each device. Used within the devices like cell phones, laptops and other wireless devices to communicate.

Bluetooth Technology Short range (theoretically 10 – 100 m) u Point to point or point to multipoint u Wireless (ISM frequency band - 2. 4 GHz) u Voice and data transfer ( up to 1 Mb/s) u

Bluetooth Enabled Devices Laptops u Headset u Printers u Keyboards u GPS u Cellular Phones and many more…. u

Benefits of Bluetooth Cable replacement u Ease of File sharing u Wireless Synchronization u Internet Connectivity u Share capabilities u

Bluetooth Vulnerability, Security and Threats u u u u u Bluesnarfing Bluejacking Bluebugging Car Whisperer Denial of Service Fizzing Attacks Pin Cracking Bloover Blue smack Long distance snarf, etc

Bluesnarfing u u u Unauthorized access of information from a wireless device. Loss of personal information. Can rout calls to his/her cell phones. Works within the mechanism for exchanging business cards. OBEX (object exchange). Aims for discoverable and undiscoverable devices to be hacked based on brute force.

Continued…

Blue jacking Attacked by sending unsolicited messages to a user of Bluetooth enabled devices. u Blue jack can create a phone book contact and write messages. u Pop up messages from the hacker u User can panic that his/her device is hacked. u

Continued…

Bluebugging u u u Bluebugging goes well beyond bluesnurfing and bluejacking. Allows hackers to completely takeover a Bluetooth device. Blue bug has capabilities like bluesnarfing. Bluebugger can pick up conversations in phone’s immediate area. Bluebugger manipulates “backdoor” attacks and many more etc….

Continued…

Security recommendations, needs and requirements. u u u Disable Bluetooth, Turn off Bluetooth features when not in use. Paring security: Bluetooth devices should be paired up in a private physical setting to minimize the risk of potential attack. User should not respond to any messages requesting for a pin. Pin for Bluetooth devices should be changed on regular intervals with at least eight characters alphanumeric. Always Upgrade your devices to the latest technology.

Continued… u u Do not pair up with other devices if you feel its unsecure. Higher layer of encryption will also add an additional layer to security. With increase in Bluetooth enabled devices the user should establish connection only with trusted devices. Spatial distance can avoid other devices to gain access to your Bluetooth enabled device.

QUESTIONS