Relay attacks on bluetooth authentication and solutions
Levi, Albert and Çetintaş, Erhan and Aydos, Murat and Koç, Çetin Kaya and Çağlayan, M. Ufuk (2004) Relay attacks on bluetooth authentication and solutions. Lecture notes in computer science, 3280 . 278 - 288. ISSN 0302-9743 (Print) 1611-3349 (Online)
Full text not available from this repository.
Official URL: http://dx.doi.org/10.1007/b101749
We describe relay attacks on Bluetooth authentication protocol. The aim of these attacks is impersonation. The attacker does not need to guess or obtain a common secret known to both victims in order to set up these attacks, merely to relay the information it receives from one victim to the other during the authentication protocol run. Bluetooth authentication protocol allows such a relay if the victims do not hear each other. Such a setting is highly probable. We analyze the attacks for several scenarios and propose practical solutions. Moreover, we simulate attacks to make sure about their feasibility. These simulations show that current Bluetooth specifications do not have defensive mechanisms for relay attacks. However, relay attacks create a significant partial delay during the connection that might be useful for detection.
Repository Staff Only: item control page