Fingerprinting Bluetooth-Low-Energy Devices Based on the Generic Attribute Profile - Chaire Internet des Objets entre INSA Lyon et SPIE ICS
Communication Dans Un Congrès Année : 2019

Fingerprinting Bluetooth-Low-Energy Devices Based on the Generic Attribute Profile

Résumé

Bluetooth Low Energy (BLE) is a short range wireless technology included in many consumer devices such as smartphones, earphones and wristbands. As part of the Attribute (ATT) protocol, discover-able BLE devices expose a data structure called Generic Attribute (GATT) profile that describes supported features using concepts of services and characteristics. This profile can be accessed by any device in range and can expose users to privacy issues. In this paper, we discuss how the GATT profile can be used to create a fingerprint that can be exploited to circumvent anti-tracking features of the BLE standard (i.e. MAC address randomization). Leveraging a dataset of more than 13000 profiles, we analyze the potential of this fingerprint and show that it can be used to uniquely identify a number of devices. We also shed light on several issues where GATT profiles can be mined to infer sensitive information that can impact privacy of users. Finally, we suggest solutions to mitigate those issues.
Fichier principal
Vignette du fichier
paper.pdf (789.03 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-02359914 , version 1 (16-12-2019)

Identifiants

Citer

Guillaume Celosia, Mathieu Cunche. Fingerprinting Bluetooth-Low-Energy Devices Based on the Generic Attribute Profile. IoT S&P 2019 - 2nd International ACM Workshop on Security and Privacy for the Internet-of-Things, Nov 2019, London, United Kingdom. pp.24-31, ⟨10.1145/3338507.3358617⟩. ⟨hal-02359914⟩
466 Consultations
3830 Téléchargements

Altmetric

Partager

More