Man-in-the-middle attacks on bluetooth: A comparative analysis, a novel attack, and countermeasures

2008 3rd International Symposium on Communications, Control, and Signal Processing, ISCCSP 2008

Volumn , Issue , 2008, Pages 1096-1102

  Haataja, Keijo M J ^a   Hyppönen, Konstantin ^a  

^a UNIVERSITY OF EASTERN FINLAND   (Finland)

Author keywords

Authentication; Bluetooth; Man in the middle attack; Secure simple pairing; Wireless security

Indexed keywords

BLUETOOTH; COMPUTER NETWORKS; METROPOLITAN AREA NETWORKS; SIGNAL PROCESSING;

AUTHENTICATION; COMPARATIVE ANALYSIS; MAN-IN-THE-MIDDLE ATTACK; SECURE SIMPLE PAIRING; WIRELESS SECURITY;

CELLULAR TELEPHONE SYSTEMS;

EID: 50649091323     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISCCSP.2008.4537388     Document Type: Conference Paper

References (17)

1. Bluetooth SIG, Bluetooth specifications 1.0 - 2.1+EDR. Technical specifications, 1999-2007. http://www.bluetooth.com
2. Bluetooth SIG, Bluetooth Technology in Hands of One Billion. Press release, Nov. 14, 2006. http://www.bluetooth.com/Bluetooth/SIG/Billion.htm
3. H. Cheung, How To: Building a BlueSniper Rifle - Part 1. SmallNet-Builder, Pudai LLC, homepage, 2005. http://www.smallnetbuilder.com/ content/view/24256/98
4. H. Cheung, How To: Building a BlueSniper Rifle - Part 2. SmallNet-Builder, Pudai LLC, homepage, 2005. http://www.smallnetbuilder.com/ content/view/24228/98
5. Bluetooth security & Bluetooth hackers community blog, Bluetooth Sniffing For Less. Homepage, 2007. http://bluetoothsecurity.wordpress.com/ 2007/05/12/bluetooth-sniffing-for-less
6. M. Moser, Busting The Bluetooth Myth - Getting RAW Access. Remote-exploit.org, Research Report, 2007. http://www.remote-exploit.org/ research/busting_bluetooth_myth.pdf
7. Darkircop, CSR Sniffer - Firmware assembler and disassembler. Homepage, 2007. http://darkircop.org/bt/bt.tgz
8. D. Spill, A. Bittau, BlueSniff - Eve meets Alice and Bluetooth. Proceedings of the First USENIX Workshop on Offensive Technologies (WOOT'2007), Boston, MA, August 6, 2007.
9. D. Spill, A. Bittau, BlueSniff. University College London, 2007. http://www.cs.ucl.ac.uk/staff/a.bittau/gr-bluetooth.tar.gz
10. M. Jakobsson, S. Wetzel, Security weaknesses in Bluetooth. LNCS, Vol. 2020, pp. 176-191, Springer-Verlag, 2001.
11. D. Kügler, Man in the middle attacks on Bluetooth. Financial Cryptography, LNCS, vol. 2742, pp. 149-161, Springer-Verlag, 2003.
12. A. Levi, E. Cetintas, M. Aydos, C. Koc, M. Caglayan, Relay Attacks on Bluetooth Authentication and Solutions. Computer and Information Sciences (ISCIS'2004), 19th International Symposium, Kemer-Antalya, Turkey, 2004.
13. J. Suomalainen, J. Valkonen, N. Asokan, Security Associations in Personal Networks - A Comparative Analysis. Nokia Research Center Technical Report NRC-TR-2007-004, 2007. http://www.springerlink.com/content/ dk04356586jg4g00/fulltext.pdf
14. K. Hyppönen, K. Haataja, "Niño" Man-In-The-Middle Attack on Bluetooth Secure Simple Pairing. Proceedings of the IEEE Third International Conference in Central Asia on Internet, The Next Generation of Mobile, Wireless and Optical Communications Networks (ICI'2007), Tashkent, Uzbekistan, September 26-28, 2007.
15. N. Borisov, I. Goldberg, D. Wagner, Intercepting Mobile Communications - The Insecurity on 802.11. Proceedings of the 7th Annual International Conference on Mobile Computing and Networking, ACM Press, 2001.
16. K. Haataja, New Practical Attack Against Bluetooth Security Using Efficient Implementations of Security Analysis Tools. Proceedings of the IASTED International Conference on Communication, Network and Information Security (CNIS'2007), Berkeley, California, USA, September 24-26, 2007.
17. E. Uzun, K. Karvonen, N. Asokan, Usability Analysis of Secure Pairing Methods. Nokia Research Center Technical Report NRC-TR-2007-002, 2007. http://research.nokia.com/tr/NRC-TR-2007-002.pdf