RSSI-based Fingerprinting of Bluetooth Low Energy Devices - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2023

RSSI-based Fingerprinting of Bluetooth Low Energy Devices

Abstract

To prevent tracking, the Bluetooth Low Energy protocol integrates privacy mechanisms such as address randomization. However, as highlighted by previous researches address randomization is not a silver bullet and can be circumvented by exploiting other types of information disclosed by the protocol such as counters or timing. In this work, we propose a novel attack to break address randomization in BLE exploiting side information that has not been considered before: Received Signal Strength Indication (RSSI). More precisely, we demonstrate how RSSI measurements, extracted from received BLE advertising packets, can be used to link together the traces emitted by the same device or re-identify it despite address randomization. The proposed attack leverages the distribution of RSSI to create a fingerprint of devices. An empirical evaluation of the attack on various scenarios demonstrate its effectiveness. For instance in the static context, in which devices remain at the same position, the proposed approach yields a re-identification accuracy of up to 99%, which can even be boosted by increasing the number of receivers controlled by the adversary.
Fichier principal
Vignette du fichier
RSSI-Based Fingerprinting of Bluetooth Low Energy Devices.pdf (395.09 Ko) Télécharger le fichier
RSSI-Based Fingerprinting of Bluetooth Low Energy Devices (1).pdf (395.09 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-04161424 , version 1 (13-07-2023)

Licence

Attribution

Identifiers

  • HAL Id : hal-04161424 , version 1

Cite

Guillaume Gagnon, Sébastien Gambs, Mathieu Cunche. RSSI-based Fingerprinting of Bluetooth Low Energy Devices. SECRYPT 2023 - 20th International Conference on Security and Cryptography, Jul 2023, Rome, Italy. pp.1-12. ⟨hal-04161424⟩
198 View
312 Download

Share

Gmail Facebook X LinkedIn More