New efficient RF fingerprint-based security solution for bluetooth secure simple pairing

Proceedings of the Annual Hawaii International Conference on System Sciences

Volumn , Issue , 2010, Pages

  Pasanen, Sanna ^a   Haataja, Keijo ^a   Päivinen, Niina ^a   Toivanen, Pekka ^a  

^a UNIVERSITY OF EASTERN FINLAND   (Finland)

Author keywords

[No Author keywords available]

Indexed keywords

BLUETOOTH DEVICE; BLUETOOTH NETWORKS; INTRUSION DETECTION AND PREVENTION SYSTEMS; RF FINGERPRINTS; SECURE SIMPLE PAIRING; SECURITY SOLUTIONS; SECURITY STANDARDS; SPECIAL INTEREST GROUPS;

INTRUSION DETECTION;

BLUETOOTH;

EID: 77951757681     PISSN: 15301605     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HICSS.2010.286     Document Type: Conference Paper

References (45)

1. Bluetooth SIG. Bluetooth Specifications 1.0-3.0+HS. [Online]. Available: http://www.bluetooth.com/Bluetooth/Technology/Building/Specifications. [Accessed August 27, 2009].
2. Bluetooth SIG. Bluetooth Wireless Technology Surpasses One Billion Devices. [Online]. Available: http://www.bluetooth.com/Bluetooth/Press/SIG. [Accessed August 27, 2009].
3. H. Cheung, How To: Building a BlueSniper Rifle - Part 1. [Online]. Available: http://www.smallnetbuilder.com/content/view/24256/98. [Accessed August 27, 2009].
4. H. Cheung, How To: Building a BlueSniper Rifle - Part 2. [Online]. Available: http://www.smallnetbuilder.com/content/view/24228/98. [Accessed August 27, 2009].
5. M. Moser, Busting the Bluetooth Myth - Getting RAW Access. [Online]. Available: http://www.packetstormsecurity.org/papers/wireless/busting-bluetooth- myth.pdf. [Accessed August 27, 2009].
6. K. Haataja, Security Threats and Countermeasures in Bluetooth-Enabled Systems, Ph.D. Dissertation, University of Kuopio, Department of Computer Science, February 6, 2009.
7. Darkircop, CSR Sniffer - Firmware assembler and disassembler. [Online]. Available: http://bluetooth-pentest.narod.ru/software/xap2.zip. [Accessed August 27, 2009].
8. D. Spill and A. Bittau, "BlueSniff - Eve meets Alice and Bluetooth", in Proceedings of the First USENIX Workshop on Offensive Technologies, Boston, MA, August 6, 2007.
9. D. Spill and A. Bittau, BlueSniff Source Codes. [Online]. Available: http://www.cs.ucl.ac.uk/staff/a.bittau/gr-bluetooth.tar.gz. [Accessed August 27, 2009].
10. B. Schneier, Applied Cryptography - Protocols, Algorithms, and Source Code in C, 2nd Edition, New York, Wiley & Sons, 1996.
11. M. Jakobsson and S. Wetzel, "Security weaknesses in Bluetooth", Lecture Notes in Computer Science, vol. 2020, pp. 176-191, Springer-Verlag, 2001.
12. D. Kügler, "Man in the middle attacks on Bluetooth", Lecture Notes in Computer Science, vol. 2742, pp. 149-161, Springer-Verlag, 2003.
13. A. Levi, E. Cetintas, M. Aydos, C. Koc, and M. Caglayan, "Relay Attacks on Bluetooth Authentication and Solutions", Lecture Notes in Computer Science, vol. 3280, pp. 278-288, Springer-Verlag, 2004.
14. J. Suomalainen, J. Valkonen, and N. Asokan, "Security Associations in Personal Networks: A Comparative Analysis", Lecture Notes in Computer Science, vol. 4572, pp. 43-57, Springer-Verlag, 2007.
15. K. Hyppönen and K. Haataja, "Niño Man-In-The-Middle Attack on Bluetooth Secure Simple Pairing", in Proceedings of the IEEE Third International Conference in Central Asia on Internet, The Next Generation of Mobile, Wireless and Optical Communications Networks, Tashkent, Uzbekistan, September 26-28, 2007.
16. K. Haataja and K. Hyppönen, "Man-In-The-Middle Attacks on Bluetooth: a Comparative Analysis, a Novel Attack, and Countermeasures", in Proceedings of the IEEE Third International Symposium on Communications, Control and Signal Processing, St. Julians, Malta, March 12-14, 2008.
17. K. Haataja and P. Toivanen, "Practical Man-In-The-Middle Attacks Against Bluetooth Secure Simple Pairing", in Proceedings of the 4th IEEE International Conference on Wireless Communications, Networking and Mobile Computing, Dalian, China, October 12-14, 2008.
18. J. Shandle, University Research Aims at More Secure Wi-Fi. [Online]. Available: http://www.eetimes.com/news/latest/showArticle.jhtml?articleID= 192501255. [Accessed August 27, 2009].
19. M. Barbeau, J. Hall, and E. Kranakis, "Detecting Impersonation Attacks in Future Wireless and Mobile Networks", Lecture Notes in Computer Science, vol. 4074, pp. 80-95, Springer-Verlag, 2006.
20. J. Franklin, D. McCoy, P. Tabriz, V. Neagoe, J. Randwyk, and D. Sicker, "Passive Data Link Layer 802.11 Wireless Device Driver Fingerprinting" , in Proceedings of the 15th USENIX Security Symposium, Vancouver, B.C., Canada, July 31-August 4, 2006.
21. O. Ureten and N. Serinken, "Wireless Security Through RF Fingerprinting", Canadian Journal of Electrical and Computer Engineering, vol. 32, no. 1, pp. 27-33, 2007.
22. O. Ureten and N. Serinken, "Bayesian Detection of Radio Transmitter Turn-On Transients", in Proceedings of the IEEE Non Linear Signal and Image Processing Conference, Antalya, Turkey, June 1999, pp. 830-834.
23. J. Hall, M. Barbeau, and E. Kranakis, "Detecting Rogue Devices in Bluetooth Networks Using Radio Frequency Fingerprinting", in Proceedings of the IASTED International Conference on Communications and Computer Networks, Lima, Peru, October 4-6, 2006.
24. K. Rasmussen and S. Capkun, "Implications of Radio Fingerprinting on the Security of Sensor Networks", in Proceedings of the IEEE 3rd International Conference on Security and Privacy in Communications Networks, Nice, France, September 17-20, 2007, pp. 331-340.
25. J. Hall, M. Barbeau, and E. Kranakis, "Enhancing Intrusion Detection in Wireless Networks using Radio Frequency Fingerprinting", in Proceedings of the 3rd IASTED International Conference on Communications, Internet and Information Technology, St. Thomas, U.S. Virgin Islands, November 2004, pp. 201-206.
26. J. Hall, M. Barbeau, and E. Kranakis, "Detection of Transient in Radio Frequency Fingerprinting Using Signal Phase", in Proceedings of the IASTED International Conference on Wireless and Optical Communications, Banff, Canada, July 14-16, 2003, pp. 13-18.
27. A. Graps, "An Introduction to Wavelets", IEEE Computational Science & Engineering, vol. 2, no. 2, pp. 50-61, 1995.
28. J. Toonstra and W. Kinsner, "A Radio Transmitter Fingerprinting System ODO-1", in Proceedings of the IEEE Canadian Conference on Electrical and Computer Engineering, vol. 1, 1996, pp. 60-63.
29. NIST/SEMATECH. E-Handbook of Statistical Methods. [Online]. Available: http://www.itl.nist.gov/div898/handbook. [Accessed August 27, 2009].
30. J. Toonstra and W. Kinsner, "Transient Analysis and Genetic Algorithms for Classification", in Proceedings of the IEEE Communications, Power, and Computing, vol. 2, 1995, pp. 432-437.
31. R. Callan, The Essence of Neural Networks, Prentice Hall Europe, 1999.
32. P. Somervuo and T. Kohonen, "Self-Organizing Maps and Learning Vector Quantization for Feature Sequences", Neural Processing Letters, vol. 10, no. 2, pp. 151-159, 1999. (Pubitemid 30503364)
33. R. Hippenstiel and Y. Payal, "Wavelet Based Transmitter Identification", in Proceedings of the International Symposium on Signal Processing and its Applications, Gold Coast, Australia, August 25-30, 1996.
34. S. Russell and P. Norvig, Artificial Intelligence: A Modern Approach, Prentice Hall, USA, 2002.
35. X. Li, Y. Bar-Shalom, and T. Kirubarajan, Estimation with Applications to Tracking and Navigation, John Wiley & Sons, 2001.
36. V. Brik, S. Banerjee, M. Gruteser, and S. Oh, "Wireless Device Identification with Radiometric Signatures", in Proceedings of the 14th ACM International Conference on Mobile Computing and Networking, San Francisco, California, USA, September 14-19, 2008, pp. 116-127.
37. D. Loh, C. Cho, C. Tan, and R. Lee, "Identifying Unique Devices Through Wireless Fingerprinting", in Proceedings of the First ACM Conference on Wireless Network Security, Alexandria, Virginia, USA, March 31-April 2, 2008, pp. 46-55.
38. M. Herfurt and C. Mulliner, BluePrinting - Remote Device Identification based on Bluetooth Fingerprinting Techniques, White Paper, Berliner Congress Center, Berlin, Germany, December 27-29, 2004.
39. Trifinite, Trifinite.org - The Home for the Trifinite.group. [Online]. Available: http://trifinite.org. [Accessed August 27, 2009].
40. The Shmoo Group, Hacking, Moose, Crypto. [Online]. Available: http://www.shmoo.com. [Accessed August 27, 2009].
41. SecuriTeam, BTScanner - Bluetooth Scanner. [Online]. Available: http://www.securiteam.com/tools/6I00P2A8KK.html. [Accessed August 27, 2009].
42. T. Buennemeyer, T. Nelson, L. Clagett, J. Dunning, R. Marchany, and J. Tront, "Mobile Device Profiling and Intrusion Detection Using Smart Batteries", in Proceedings of the IEEE 41st Hawaii International Conference on System Sciences, Waikoloa, Big Island, Hawaii, January 7-10, 2008.
43. Y. Zhang and W. Lee, "Intrusion Detection in Wireless Ad-Hoc Networks", in Proceedings of the ACM 6th Annual International Conference on Mobile Computing and Networking, Boston, Massachusetts, USA, August 6-11, 2000, pp. 275-283. (Pubitemid 32024702)
44. O. Kachirski and R. Guha, "Intrusion Detection Using Mobile Agents in Wireless Ad Hoc Networks", in Proceedings of the IEEE Workshop on Knowledge Media Networking, CRL, Kyoto, Japan, July 10-12, 2002, pp. 153-158.
45. K. Haataja, "New Efficient Intrusion Detection and Prevention System for Bluetooth Networks", in Proceedings of the ACM International Conference on Mobile, Wireless MiddleWare, Operating Systems, and Applications, Innsbruck, Austria, February 12-15, 2008.