Ethical Hacking and. Version 6. Module XXXVII Bluetooth Hacking
|
|
|
- Beverley Richards
- 5 years ago
- Views:
Transcription
1 Ethical Hacking and Countermeasures Version 6 Module XXXVII Bluetooth Hacking
2 News Source:
3 Module Objective This module will familiarize you with: Bluetooth Security Issues in Bluetooth Attacks in Bluetooth Bluetooth Hacking Tools Viruses and Worms Bluetooth Security Tools
4 Module Flow Bluetooth Bluetooth Hacking Tools Security Issues in Bluetooth Viruses and Worms Attacks in Bluetooth Bluetooth Security Tools
5 Bluetooth: Introduction Bluetooth is a short-range wireless communications technology intended to replace the cables connecting portable or fixed devices while maintaining high levels of security It wirelessly connects mobile phones, portable computers, stereo headsets, MP3 players, and more Bluetooth technology has achieved global acceptance such that any Bluetooth enabled device, almost everywhere in the world, can connect to other Bluetooth enabled devices in proximity Bluetooth enabled electronic devices connect and communicate wirelessly through shortrange, ad hoc networks known as piconets Security within Bluetooth itself covers three major areas: Authentication Authorization Encryption
6 Security Issues in Bluetooth The following are the various security issues in Bluetooth: Short PINS are allowed Encryption key length is negotiable Unit key is reusable and becomes public once used The master key is shared No user authentication exists Unit key sharing can lead to eavesdropping End-to-end security is not performed Security services are limited
7 Bluetooth th Attacks
8 Security Attacks in Bluetooth Devices Bluejacking BlueSpam Blue snarfing BlueBug Attack Short Pairing Code Attacks Man-In-Middle Attacks BTKeylogging attack BTVoiceBugging attack Blueprinting Bluesmacking Denial-of-service attack
9 Bluejacking Bluejacking is the art of sending unsolicited messages over Bluetooth to Bluetooth-enabled devices such as PDA and mobile phones A loophole in the initialization stage of the Bluetooth communication protocol enables this attack Before starting the communication, both the Bluetooth devices exchange information during an initial handshake period In this period, initiating Bluetooth device name is necessary to be displayed on other device s screen Initiating device sends a user defined field to the target device An attacker hacks and uses this field to send the unsolicited messages on the target device
10 BlueSpam BlueSpam finds out the other bluetooth enabled devices and sends a file to them (spam them) BlueSpam is sent using the OBEX protocol The file ranges from VCFs (electronic business cards) to simple ASCII text files, images files, audio, and video files Attacker should have palm with an SD/MMC card to customize the message that should be sent, he/she then creates a directory /PALM/programs/BlueSpam/Send/ and puts the file in it BlueSpam supports backfire, if it finds any palm into discoverable and connectable mode, BlueSpam intercepts all connection attempts of other Bluetooth devices and starts sending messages back to sender
11 BlueSnarfing Bluesnarfing is the theft of information from a wireless device through h a Bluetooth connection For this attack, attacker requires to connect to the OBEX Push Profile (OPP), which is used to exchange information between wireless devices Attacker connects to the OBEX Push target and performs an OBEX GET request for known filenames such as 'telecom/pb.vcf' for the devices phone book or 'telecom/cal.vcs' for the devices calendar file If the device is not implemented properly, p attacker can gain access to all the files
12 BlueBug Attack Bluebug is the loophole l in the Bluetooth th security Attacker exploits this loophole and gets unauthorized access to the Bluetooth enabled device After getting unauthorized access, attacker can: Set call forwards Read SMS from the phone Send SMS to any number Initiate phone calls Write phonebook entries Connect to the Internet
13 Short Pairing Code Attacks Pairing is a part of Bluetooth, where two devices associate themselves with one another Those devices share some secret, which is used for future communication Attacker forces a pair of Bluetooth devices to repeat the pairing process and eavesdrop on it Attacker pretends to be one of the two devices and sends a message to other claiming to have forgotten the link key Another device discards the key and creates the new pairing session With this attack, attacker can eavesdrop on other s Bluetooth network
14 Man-In-the-Middle Attacks Man-in-the-middle attack is conducted on the Bluetooth link between the laptop and the mobile station Aim of the attacker is to connect the victim s laptop to a fake WLAN Access Point (AP) Attacker uses the device which receives the Bluetooth packets in promiscuous mode and then sends forged ones to the mobile and the laptop of the victim Attack is carried out in two phases: Recording the Bluetooth session Attacker records the Bluetooth session during which the victim s mobile sends the MSK (Master Session Key) to the victim s laptop Attacker can also obtain the MSK by compromising i the access point used by the victim Replaying the Bluetooth session Attacker forces the laptop p to use the compromised MSK by replaying the session recorded during the first phase Victim laptop connects to the attacker s access point that uses the compromised MSK
15 Man-In-Middle Attacks (cont d)
16 OnLine PIN Cracking Attack In Online PIN cracking attack, attacker tries to authenticate target device by guessing different PIN values This attack is possible only if the device has fixed PIN code For this attack, attacker must know the BD_ADDR of the target device BD_ADDR is the structure used by all Bluetooth stack layers to identify the address of a Bluetooth device Security analysis tools used by attacker for OnLine PIN Cracking are: OnLine PIN Cracking script BruteForce BD_ADDR Scanning script
17 BTKeylogging Attack BTKeylogging attack is possible if the target keyboard has a fixed PIN code and attacker knows its BD_ADDR Attacker uses PIN Cracking attack to discover the fixed PIN code of the target Bluetooth keyboard An attacker must know the initial pairing gprocess between the target keyboard and the target computer Attacker uses a protocol analyzer to intercept all required information (IN RAND, LK RAND, AU RAND, SRES, and EN RAND Attacker then uses the keyboard as a keylogger by intercepting all packets
18 BTVoiceBugging Attack BTVoiceBugging attack is possible when attacker knows the fixed PIN of target device Attacker uses protocol analyzer and opens two way real-time SCO/eSCO link with the headset The headset is used as a bugging device
19 Blueprinting Blueprinting is the process of remotely finding out the details of Bluetooth enabled device It helps to find out if there are other Bluetooth enabled devices which are vulnerable Blueprinting reveals the manufacture s details and model number
20 Bluesmacking - The Ping of Death Bluetooth enabled devices have restrictions on data packet size Attacker uses Logical Link Control and Adaptation Layer Protocol (L2CAP) for attack Attacker creates oversized data packets having a size more than the maximum size allowed and sends it to the victim s device After accessing such an oversized data packet, the victim s device works according to the likes of the attacker
21 Denial-of-Service Attack DoS attacks can be conducted on the Bluetooth radio and communications channel DoS makes devices unable to access Bluetooth resources or other Bluetooth devices to be able to connect it Bluetooth device, having maximum active connections, is vulnerable for DoS as it consumes the bandwidth In this case, attacker pairs with the victim s device to request data and never acknowledge receipt of the packets The communications link will be generated over the ACL physical link type ACL will retransmit the packet if it does not receive an acknowledgement receipt Attacker sends a request for large amount of data ACL retransmits the same data which blocks the bandwidth on the victim s device making the device unable to communicate with other Bluetooth devices
22 BlueDump Attack BlueDumping is the technique which causes Bluetooth device to 'dump' it's stored link key, and gives chance to the attacker to sniff into key exchange process For BlueDump, the attacker must know the BD_ADDR of a set of paired devices Attacker spoofs the address of one of the devices and connects to the other When the victim device requests authentication, the attacker's device will respond with an 'HCI_Link_Key_Request_Negative_Reply It causes the target device to delete its own link key and go into pairing mode
23 Bluetooth Hacking Tools
24 BTScanner Btscanner is a tool designed specifically to extract as much information as possible from a Bluetooth device without pairing A detailed information screen extracts HCI (Host Controller Interface) and SDP (Service Discovery Protocol) information, and maintains an open connection to monitor the RSSI and link quality Btscanner is based on the BlueZ Bluetooth stack, which is included with recent Linux kernels, and the BlueZ toolset
25 BTScanner: Screenshot
26 Bluesnarfer Bluesnarfer downloads the phone-book of any mobile device vulnerable to Bluesnarfing If a mobile phone is vulnerable, it is possible to connect to the phone without alerting the owner, and gain access to restricted portions of the stored data
27 Bluesnarfer: Screenshot
28 Bluediving Bluediving is a Bluetooth penetration testing suite It implements attacks like Bluebug, BlueSnarf, BlueSnarf++, and BlueSmack Features: Bluetooth address spoofing AT and a RFCOMM socket shell Implements tools like carwhisperer, bss, L2CAP packetgenerator, L2CAP connection resetter, and RFCOMM scanner
29 Bluediving: Screenshot
30 TBEAR - Transient Bluetooth Environment auditor T-BEAR is a developing suite of applications designed to improve slash "audit" the security of Bluetooth environments The suite currently consists of the following utilities: btsniff: A Bluetooth 'sniffer' for use with gnuradio btkbsniff: Designed to monitor data from a Bluetooth-enabled enabled keyboard btvsniff: Designed to monitor voice data from BT headsets btcrackpin: Attempts to crack a PIN associated with encrypted BT data
31 BTCrack BTCrack is a Bluetooth PIN and LINK-KEY Cracker BTCrack reconstructs the PIN and LINK-KEY with data sniffed during a pairing exchange The calculated PIN can be used to authenticate against a device in Pairing Mode and the LINK-KEY is used to get complete access to the Master and the Slave without t any Interaction from the user of these devices
32 BTCrack: Screenshot
33 Blooover Blooover is a tool that is intended dd to run on J2ME-enabled cell phones that appear to be comparably seamless Blooover serves as an audit tool that people can use to check whether their phones and phones of friends and employees are vulnerable
34 Hidattack Hidattack attacks the Bluetooth human interface driver (HID) protocol An attacker s Bluetooth scans for a PC in any interesting location, say, in a bank, which has an active Bluetooth HID driver running Once he finds a victim PC, the attacker's PC becomes a Bluetooth keyboard The attacker now has full control and therefore can do whatever he wants
35 Viruses and Worms
36 Cabir Cabir is a Bluetooth-worm that runs in Symbian mobile phones, which h supports the Series 60 platform Cabir replicates over Bluetooth connections It arrives to the phone's messaging Inbox as a file named caribe.sis containing the worm When the user clicks caribe.sis and chooses to install the caribe.sis file, the worm activates and starts looking for new devices to infect via Bluetooth When the Cabir worm finds another Bluetooth device, it will start sending infected SIS files to it, and lock that phone so that it will not look for other phones even when the target moves out of range
37 Mabir Mabir is a worm that operates on Symbian Series 60 devices Mabir worm is capable of spreading over both Bluetooth and MMS messages When Mabir.A infects a phone, it starts searching other phones that in can reach over Bluetooth, and sends infected SIS files to the phones it finds The SIS files that Mabir.A sends have always the same file name "caribe.sis
38 Lasco Lasco is a worm capable of infecting PDAs and mobile phones running under Symbian OS Lasco spreads to executable files (SIS archives) on the infected device Lasco.a replicates via Bluetooth in the same way as Cabir does When executing, it scans the disk for SIS archives, and attempts to infect these files found by inserting its code
39 Bluetooth Security Tools
40 BlueWatch BlueWatch is the Bluetooth monitoring solution It identifies all Bluetooth-enabled devices and their communications within a given air space; it also identifies misconfigured devices It monitors the Bluetooth traffic, and understands Bluetooth-related security threats Features: Identifies different types of Bluetooth devices, including laptops, PDAs, keyboards, and cell phones Provides key attributes, including device class, manufacturer, and signal strength Illustrates communication or connectivity among various devices Identifies services available on each device, including network access, fax, and audio gateway
41 BlueSweep BlueSweep is a freeware utility to identify and analyze Bluetooth device within a specific range BlueSweep provides a simple way to gain visibility into your Bluetooth environment and identify related security issues Features: Identifies every local Bluetooth device Sees interconnections between Bluetooth devices Identifies all services available on each device
42 BlueSweep: Screenshot
43 Bluekey Revolutionary security program that uses Bluetooth Uses Bluetooth devices to unlock your PDA Small program for the Palm that adds authentication through Bluetooth device Offers end-to-end wireless solutions for enhancing mobile device functionality
44 BlueFire Mobile Security Enterprise Edition BlueFire Mobile Security Enterprise Edition provides network security via an integrated LAN/WAN firewall Filters traffic to the device in compliance with administrator-controlled port and protocol policies
45 BlueFire Mobile Security Enterprise Edition: Features Intrusion Prevention: Scans inbound network packets to identify and prohibit traditional attacks such as LAND Authentication: Enforces power-on PIN or password requirements Device wipe allows data residing on the device to be wiped after a set number of failed log-in attempts Allows administrators to block features including Bluetooth, Speaker/Microphone, USB, IR, Storage Cards, Camera, and ActiveSync The Integrity Manager can be set to quarantine the device by blocking all incoming and outgoing network communication if an integrity violation has occurred Captures and retains detailed logs of security events such as successful and invalid login attempts, t password resets, quarantine overrides, port scans, firewall activity, it and integrity violations
46 BlueAuditor BlueAuditor is a tool for detecting and monitoring Bluetooth devices in a wireless network It can discover and track any Bluetooth device within a distance between 1 and 100 meters and display key information about each device being detected It enables the user to save the data of the detected Bluetooth devices in an.xml file It enables network administrators to effectively audit their wireless networks against security vulnerabilities associated with the use of Bluetooth devices
47 BlueAuditor: Screenshot
48 Bluetooth Network Scanner Bluetooth Network Scanner can analyze and scan your Bluetooth network, giving detailed information about local and remote devices found Features: Scans both remote devices and local devices Explores full details of your phone Detects device capabilities along with device information and device address You can deeply scan all services of every single Bluetooth device
49 Bluetooth Network Scanner: Screenshot 1
50 Bluetooth Network Scanner: Screenshot 2
51 Bluetooth Network Scanner: Screenshot 3
52 Bluetooth Network Scanner: Screenshot 4
53 Countermeasures Switch off Bluetooth when not in use Purchase only devices having long PIN codes Refrain from entering the PIN into the Bluetooth device for pairing Limit the electric power itself to keep the range of the network within the physical area Switch off all unnecessary SCO/eSCO links Select the proper place when two Bluetooth devices meet for the first time and generate initialization keys
54 Summary Bluetooth is a short-range wireless communications technology Bluejacking, BlueSpam, BlueSnarfing, and BlueBug are some of bluetooth attacks BlueDumping is the technique which causes Bluetooth device to 'dump' it's stored link key, and gives chance to the attacker to sniff into key exchange process Cabir is a Bluetooth-worm that runs in Symbian mobile phones that support the Series 60 platform BlueAuditor is a tool for detecting and monitoring Bluetooth devices in a wireless network
55
56
57
Hacking the Bluetooth Stack for Fun, Fame and Profit
Hacking the Bluetooth Stack for Fun, Fame and Profit 1 2 Contents Who Are We? Why Bluetooth? What security Mechanisms? Bluetooth Attacks Newer Bluetooth attacks and nifty tricks Protection Further reading
Hacking the Bluetooth Stack for Fun, Fame and Profit
Hacking the Bluetooth Stack for Fun, Fame and Profit 1 2 Contents Who Are We? Why Bluetooth? What security Mechanisms? Bluetooth Attacks Newer Bluetooth attacks and nifty tricks Protection Further reading
Security. Nelli Gordon and Sean Vakili May 10 th 2011
Security Nelli Gordon and Sean Vakili May 10 th 2011 What is Bluetooth? Bluetooth is an open standard for short-range radio frequency (RF) communication. Bluetooth technology is used primarily to establish
NETWORK SECURITY. Ch. 3: Network Attacks
NETWORK SECURITY Ch. 3: Network Attacks Contents 3.1 Network Vulnerabilities 3.1.1 Media-Based 3.1.2 Network Device 3.2 Categories of Attacks 3.3 Methods of Network Attacks 03 NETWORK ATTACKS 2 3.1 Network
Security and Authentication
Security and Authentication Authentication and Security A major problem with computer communication Trust Who is sending you those bits What they allow to do in your system 2 Authentication In distributed
Wireless LAN Security (RM12/2002)
Information Technology in Education Project Reference Materials Wireless LAN Security (RM12/2002) Infrastructure Division Education Department The Government of HKSAR www.ited.ed.gov.hk December 2002 For
An Agency Under MOSTI SECURITY ASSURANCE. Securing Our Cyberspace. Copyright 2008 CyberSecurity Malaysia
An Agency Under MOSTI Understanding Mobile Phone Threat Vectors 4 th th ETSI Mobile Security Workshop Sophia Antipolis, France SECURITY ASSURANCE Creating Trust & Confidence Mohamad Nizam Kassim, GAWN
[A SHORT REPORT ON BLUETOOTH TECHNOLOGY]
![[A SHORT REPORT ON BLUETOOTH TECHNOLOGY]](/thumbs/74/69742987.jpg "[A SHORT REPORT ON BLUETOOTH TECHNOLOGY]")
2011 [A SHORT REPORT ON BLUETOOTH TECHNOLOGY] By Ram Kumar Bhandari 1. Introduction Bluetooth Technology A Technical Report Bluetooth is a short-ranged wire-less communication technology implementing the
Ethical Hacking and Prevention
Ethical Hacking and Prevention This course is mapped to the popular Ethical Hacking and Prevention Certification Exam from US-Council. This course is meant for those professionals who are looking for comprehensive
Ethical Hacking and Countermeasures: Secure Network Operating Systems and Infrastructures, Second Edition
Ethical Hacking and Countermeasures: Secure Network Operating Systems and Infrastructures, Second Edition Chapter 7 Hacking Mobile Phones, PDAs, and Handheld Devices Objectives After completing this chapter,
CTS2134 Introduction to Networking. Module 08: Network Security
CTS2134 Introduction to Networking Module 08: Network Security Denial of Service (DoS) DoS (Denial of Service) attack impacts system availability by flooding the target system with traffic or by exploiting
AURA ACADEMY Training With Expertised Faculty Call Us On For Free Demo
ETHICAL HACKING (CEH) CURRICULUM Introduction to Ethical Hacking What is Hacking? Who is a Hacker? Skills of a Hacker? Types of Hackers? What are the Ethics and Legality?? Who are at the risk of Hacking
Connecting & Addressing Security Concerns of Bluetooth Technology in Current Scenario
International Journal of Emerging Trends in Science and Technology DOI: http://dx.doi.org/10.18535/ijetst/v3i01.05 Connecting & Addressing Security Concerns of Bluetooth Technology in Current Scenario
Bluetooth. Quote of the Day. "I don't have to be careful, I've got a gun. -Homer Simpson. Stephen Carter March 19, 2002
Bluetooth Stephen Carter March 19, 2002 Quote of the Day "I don't have to be careful, I've got a gun. -Homer Simpson 1 About Bluetooth Developed by a group called Bluetooth Special Interest Group (SIG),
CISNTWK-440. Chapter 4 Network Vulnerabilities and Attacks
CISNTWK-440 Intro to Network Security Chapter 4 Network Vulnerabilities and Attacks Objectives Explain the types of network vulnerabilities List categories of network attacks Define different methods of
A Survey on Security Threats and Vulnerability attacks on Bluetooth Communication
A Survey on Security Threats and Vulnerability attacks on Bluetooth Communication Trishna Panse #, Prashant Panse * # Department of Information Technology, RGPV Sushila Devi Bansal College of Technology,
Interworking Evaluation of current security mechanisms and lacks in wireless and Bluetooth networks ...
Interworking 2006 Evaluation of current security mechanisms and lacks in wireless and Bluetooth networks Interworking Conference, 15th - 17th of January 2007 Dr-Ing Kai-Oliver Detken Business URL: http://wwwdecoitde
5. Execute the attack and obtain unauthorized access to the system.
Describe how a combination of preventive, detective, and corrective controls can be employed to provide reasonable assurance about information security. Before discussing the preventive, detective, and
Mobile Security Fall 2013
Mobile Security 14-829 Fall 2013 Patrick Tague Class #7 Personal Area Networks Early Project Tasks Topic Survey Presentation Background summary of your topic area Not too broad, and not too specific to
22C3. December 30st 2005, Berlin, Germany. by Adam Laurie, Marcel Holtmann and Martin Herfurt. ... because infinite is sometimes not enough!
Bluetooth Hacking The State of the Art 22C3 December 30st 2005, Berlin, Germany by Adam Laurie, Marcel Holtmann and Martin Herfurt Agenda Quick technology overview Security mechanisms Known vulnerabilities
PracticeDump. Free Practice Dumps - Unlimited Free Access of practice exam
PracticeDump http://www.practicedump.com Free Practice Dumps - Unlimited Free Access of practice exam Exam : SY0-501 Title : CompTIA Security+ Certification Exam Vendor : CompTIA Version : DEMO Get Latest
Data Communication. Chapter # 5: Networking Threats. By: William Stalling
Data Communication Chapter # 5: By: Networking Threats William Stalling Risk of Network Intrusion Whether wired or wireless, computer networks are quickly becoming essential to everyday activities. Individuals
Curso: Ethical Hacking and Countermeasures
Curso: Ethical Hacking and Countermeasures Module 1: Introduction to Ethical Hacking Who is a Hacker? Essential Terminologies Effects of Hacking Effects of Hacking on Business Elements of Information Security
ECCouncil Certified Ethical Hacker. Download Full Version :
ECCouncil 312-50 Certified Ethical Hacker Download Full Version : http://killexams.com/pass4sure/exam-detail/312-50 A. Cookie Poisoning B. Session Hijacking C. Cross Site Scripting* D. Web server hacking
Drone /12/2018. Threat Model. Description. Threats. Threat Source Risk Status Date Created
Drone - 2 04/12/2018 Threat Model Description Threats Threat Source Risk Status Date Created Mobile Phone: Sensitive Data Leakage Smart Devices Mobile Phone: Session Hijacking Smart Devices Mobile Phone:
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme file
Endpoint Security - what-if analysis 1
Endpoint Security - what-if analysis 1 07/23/2017 Threat Model Threats Threat Source Risk Status Date Created File Manipulation File System Medium Accessing, Modifying or Executing Executable Files File
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme file
Securing A Bluetooth Device
Securing A Bluetooth Device Mrs. Dhanashri D. Dhokate 1, Mr. Milind C. Butale 2, Mr. Babasaheb S. Patil 3 Assistant Professor, Information Technology, PVPIT, Budhgaon, India 1. Associate Professor, Electronics
Wireless Network Security
Wireless Network Security Why wireless? Wifi, which is short for wireless fi something, allows your computer to connect to the Internet using magic. -Motel 6 commercial 2 but it comes at a price Wireless
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice.
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme file
Technology in Action
Technology in Action Chapter 7 Networking and Security: Connecting Computers and Keeping Them Safe from Hackers and Viruses 1 Peer-to-Peer Networks Nodes communicate with each other Peers Share peripheral
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice.
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme file
SECURING INFORMATION SYSTEMS
SECURING INFORMATION SYSTEMS (November 7, 2016) BUS3500 - Abdou Illia - Fall 2016 1 LEARNING GOALS Understand security attacks preps Discuss the major threats to information systems. Discuss protection
Bluetooth. Bluetooth Radio
Bluetooth Bluetooth is an open wireless protocol stack for low-power, short-range wireless data communications between fixed and mobile devices, and can be used to create Personal Area Networks (PANs).
CYBER ATTACKS EXPLAINED: WIRELESS ATTACKS
CYBER ATTACKS EXPLAINED: WIRELESS ATTACKS Wireless networks are everywhere, from the home to corporate data centres. They make our lives easier by avoiding bulky cables and related problems. But with these
Bluetooth PCI Adapter
Table of Contents 1 Introduction...2 2 Installation...2 2.1 Software Installation...2 2.1.1 Installation on Windows 95/98/ME/2000/XP...2 2.1.2 Installation on Windows NT...3 2.1.3 Installation on Linux...3
What action do you want to perform by issuing the above command?
1 GIAC - GPEN GIACCertified Penetration Tester QUESTION: 1 You execute the following netcat command: c:\target\nc -1 -p 53 -d -e cmd.exe What action do you want to perform by issuing the above command?
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice.
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme file
Bluetooth technology: security features, vulnerabilities and attacks Pasquale Stirparo Jan Loeschner Marco Cattani
Bluetooth technology: security features, vulnerabilities and attacks Pasquale Stirparo Jan Loeschner Marco Cattani JRC 68414 The mission of the JRC-IPSC is to provide research results and to support EU
12/2/09. Mobile and Ubiquitous Computing. Bluetooth Networking" George Roussos! Bluetooth Overview"
Mobile and Ubiquitous Computing Bluetooth Networking" George Roussos! g.roussos@dcs.bbk.ac.uk! Bluetooth Overview" A cable replacement technology! Operates in the unlicensed ISM band at 2.4 GHz! Frequency
Part 1. Lecturer: Prof. Mohamed Bettaz Coordinator: Prof. Mohamed Bettaz Internal Examiner: Dr. Mourad Maouche. Examination Paper
Philadelphia University Lecturer: Prof. Mohamed Bettaz Coordinator: Prof. Mohamed Bettaz Internal Examiner: Dr. Mourad Maouche Faculty of Information Technology Department of Computer Science Examination
Chapter 4. Network Security. Part I
Chapter 4 Network Security Part I CCNA4-1 Chapter 4-1 Introducing Network Security Introduction to Network Security CCNA4-2 Chapter 4-1 Introducing Network Security Why is Network Security important? Rapid
AN TOÀN LỚP 4: TCP/IP ATTACKS NGUYEN HONG SON PTITHCM
1 AN TOÀN LỚP 4: TCP/IP ATTACKS NGUYEN HONG SON PTITHCM 2 Introduction (1/2) TCP provides a full duplex reliable stream connection between two end points A connection is uniquely defined by the quadruple
Network Security. Evil ICMP, Careless TCP & Boring Security Analyses. Mohamed Sabt Univ Rennes, CNRS, IRISA Thursday, October 4th, 2018
Network Security Evil ICMP, Careless TCP & Boring Security Analyses Mohamed Sabt Univ Rennes, CNRS, IRISA Thursday, October 4th, 2018 Part I Internet Control Message Protocol (ICMP) Why ICMP No method
GCIH. GIAC Certified Incident Handler.
GIAC GCIH GIAC Certified Incident Handler TYPE: DEMO http://www.examskey.com/gcih.html Examskey GIAC GCIH exam demo product is here for you to test the quality of the product. This GIAC GCIH demo also
CIS Controls Measures and Metrics for Version 7
Level One Level Two Level Three Level Four Level Five Level Six 1.1 Utilize an Active Discovery Tool Utilize an active discovery tool to identify devices connected to the organization's network and update
FRONT RUNNER DIPLOMA PROGRAM Version 8.0 INFORMATION SECURITY Detailed Course Curriculum Course Duration: 6 months
FRONT RUNNER DIPLOMA PROGRAM Version 8.0 INFORMATION SECURITY Detailed Course Curriculum Course Duration: 6 months MODULE: INTRODUCTION TO INFORMATION SECURITY INFORMATION SECURITY ESSENTIAL TERMINOLOGIES
Specialized Security Services, Inc. REDUCE RISK WITH CONFIDENCE. s3security.com
Specialized Security Services, Inc. REDUCE RISK WITH CONFIDENCE s3security.com Security Professional Services S3 offers security services through its Security Professional Services (SPS) group, the security-consulting
CIS Controls Measures and Metrics for Version 7
Level 1.1 Utilize an Active Discovery Tool 1.2 Use a Passive Asset Discovery Tool 1.3 Use DHCP Logging to Update Asset Inventory 1.4 Maintain Detailed Asset Inventory 1.5 Maintain Asset Inventory Information
Blackjacking. Daniel Hoffman. Security Threats to BlackBerry Devices, PDAs, and Cell Phones in the Enterprise. Wiley Publishing, Inc.
Blackjacking Security Threats to BlackBerry Devices, PDAs, and Cell Phones in the Enterprise Daniel Hoffman Wiley Publishing, Inc. Contents About the Author Acknowledgments Introduction Chapter 1 Understanding
Wireless Attacks and Countermeasures
Wireless Attacks and Countermeasures Wireless Network Technology Wireless network refers to any type of computer network which is wireless, and is commonly associated with a network whose interconnections
FinIntrusion Kit / Release Notes. FINFISHER: FinIntrusion Kit 4.0 Release Notes
1 FINFISHER: FinIntrusion Kit 4.0 Release Notes 2 Copyright 2013 by Gamma Group International, UK Date 2013-07-12 Release information Version Date Author Remarks 1.0 2010-06-29 ht Initial version 2.0 2011-05-26
ECCouncil Exam v9 Certified Ethical Hacker Exam V9 Version: 7.0 [ Total Questions: 125 ]
![ECCouncil Exam v9 Certified Ethical Hacker Exam V9 Version: 7.0 [ Total Questions: 125 ]](/thumbs/78/77837973.jpg "ECCouncil Exam v9 Certified Ethical Hacker Exam V9 Version: 7.0 [ Total Questions: 125 ]")
s@lm@n ECCouncil Exam 312-50v9 Certified Ethical Hacker Exam V9 Version: 7.0 [ Total Questions: 125 ] Question No : 1 An Intrusion Detection System(IDS) has alerted the network administrator to a possibly
Exam : JK Title : CompTIA E2C Security+ (2008 Edition) Exam. Version : Demo
Exam : JK0-015 Title : CompTIA E2C Security+ (2008 Edition) Exam Version : Demo 1.Which of the following logical access control methods would a security administrator need to modify in order to control
Internetwork Expert s CCNA Security Bootcamp. Common Security Threats
Internetwork Expert s CCNA Security Bootcamp Common Security Threats http:// Today s s Network Security Challenge The goal of the network is to provide high availability and easy access to data to meet
e-commerce Study Guide Test 2. Security Chapter 10
e-commerce Study Guide Test 2. Security Chapter 10 True/False Indicate whether the sentence or statement is true or false. 1. Necessity refers to preventing data delays or denials (removal) within the
ETHICAL HACKING & COMPUTER FORENSIC SECURITY
ETHICAL HACKING & COMPUTER FORENSIC SECURITY Course Description From forensic computing to network security, the course covers a wide range of subjects. You will learn about web hacking, password cracking,
Chapter 11: Networks
Chapter 11: Networks Devices in a Small Network Small Network A small network can comprise a few users, one router, one switch. A Typical Small Network Topology looks like this: Device Selection Factors
CompTIA FC0-U51. CompTIA IT Fundamentals.
CompTIA FC0-U51 CompTIA IT Fundamentals http://killexams.com/exam-detail/fc0-u51 or intranet against unauthorized access from the Internet or other outside networks. It restricts inbound and outbound access
CYBER RISK CONSULTING. Smartphone Security Issues
CYBER RISK CONSULTING Blackhat Briefings Europe 2004 Smartphone Security Issues May 2004 Luc DELPHA Maliha RASHID 1. Introduction Why smartphones? Functionalities Operating Systems Supported Connectivity
News from the Front. What The Hack. July 29th 2005, Liempde, Netherlands. Adam Laurie, Marcel Holtmann, Martin Herfurt
Bluetooth Security News from the Front What The Hack July 29th 2005, Liempde, Netherlands Who we are Adam Laurie CSO of The Bunker Secure Hosting Ltd. Co-Maintainer of Apache-SSL DEFCON Staff/Organiser
D. The bank s web server is using an X.509 certificate that is not signed by a root CA, causing the user ID and password to be sent unencrypted.
Volume: 119 Questions Question No: 1 John Smith uses a coffee shop's Internet hot-spot (no authentication or encryption) to transfer funds between his checking and savings accounts at his bank's website.
CompTIA Security+(2008 Edition) Exam
http://www.51- pass.com Exam : SY0-201 Title : CompTIA Security+(2008 Edition) Exam Version : Demo 1 / 7 1.An administrator is explaining the conditions under which penetration testing is preferred over
Most Common Security Threats (cont.)
Most Common Security Threats (cont.) Denial of service (DoS) attack Distributed denial of service (DDoS) attack Insider attacks. Any examples? Poorly designed software What is a zero-day vulnerability?
Introduction to Wireless Networking ECE 401WN Spring 2009
I. Overview of Bluetooth Introduction to Wireless Networking ECE 401WN Spring 2009 Lecture 6: Bluetooth and IEEE 802.15 Chapter 15 Bluetooth and IEEE 802.15 What is Bluetooth? An always-on, short-range
PRODUCT GUIDE Wireless Intrusion Prevention Systems
PRODUCT GUIDE Wireless Intrusion Prevention Systems The Need for Wireless INTRUSION PREVENTION SYSTEMS A Wireless Intrusion Prevention System (WIPS) is designed to address two classes of challenges facing
Inside Bluetooth Low Energy
Inside Bluetooth Low Energy Naresh Gupta BOSTON LONDON artechhouse.com Contents Preface Acknowledgments Foreword xix xxiii xxv Introduction 1 1.1 Introduction to Wireless Communication 1 1.2 Data Rates
Bluetooth: Short-range Wireless Communication
Bluetooth: Short-range Wireless Communication Wide variety of handheld devices Smartphone, palmtop, laptop Need compatible data communication interface Complicated cable/config. problem Short range wireless
Section 4 Cracking Encryption and Authentication
Section 4 Cracking 802.11 Encryption and Authentication In the previous section we showed the vulnerabilities of Open Wireless LANs. In this section we ll show some of the techniques and tools used to
Ethical Hacking and Countermeasures: Web Applications, Second Edition. Chapter 3 Web Application Vulnerabilities
Ethical Hacking and Countermeasures: Web Chapter 3 Web Application Vulnerabilities Objectives After completing this chapter, you should be able to: Understand the architecture of Web applications Understand
What is Eavedropping?
WLAN Security What is Eavedropping? War Driving War Driving refers to someone driving around with a laptop and an 802.11 client card looking for an 802.11 system to exploit. War Walking Someone walks
A Review Paper on Network Security Attacks and Defences
EUROPEAN ACADEMIC RESEARCH Vol. IV, Issue 12/ March 2017 ISSN 2286-4822 www.euacademic.org Impact Factor: 3.4546 (UIF) DRJI Value: 5.9 (B+) A Review Paper on Network Security Attacks and ALLYSA ASHLEY
Hacker Academy Ltd COURSES CATALOGUE. Hacker Academy Ltd. LONDON UK
Hacker Academy Ltd COURSES CATALOGUE Hacker Academy Ltd. LONDON UK TABLE OF CONTENTS Basic Level Courses... 3 1. Information Security Awareness for End Users... 3 2. Information Security Awareness for
Wireless Network (In)Security
Wireless Network (In)Security JIM GEOVEDI jim.geovedi@bellua.com Bellua Asia Pacific www.bellua.com How to describe Wireless Technology? Last mile. Freedom. Cheap. Simple. Jakarta Wireless Survey 2003.
CS4/MSc Computer Networking. Lecture 13: Personal Area Networks Bluetooth
CS4/MSc Computer Networking Lecture 13: Personal Area Networks Bluetooth Computer Networking, Copyright University of Edinburgh 2005 BlueTooth Low cost wireless connectivity for Personal Area Networks
THE NEW LANDSCAPE OF AIRBORNE CYBERATTACKS
SESSION ID: MBS-W04 THE NEW LANDSCAPE OF AIRBORNE CYBERATTACKS Nadir Izrael CTO & Co-Founder Armis, Inc. Ben Seri Head of Research Armis, Inc. Placeholder Slide: Image of spread of infection Placeholder
BlueCore. Operation of Bluetooth v2.1 Devices. Application Note. Issue 7
BlueCore Operation of Bluetooth v2.1 Devices Application Note Issue 7 Page 1 of 26 Document History Revision Date History 1 06 DEC 07 Original publication of this document. 2 27 MAR 08 Bonding description
PrepAwayExam. High-efficient Exam Materials are the best high pass-rate Exam Dumps
PrepAwayExam http://www.prepawayexam.com/ High-efficient Exam Materials are the best high pass-rate Exam Dumps Exam : 642-541 Title : VPN and Security Cisco SAFE Implementation Exam (CSI) Vendors : Cisco
Rab Nawaz Jadoon (Assistant Professor) Department of Computer Science COMSATS University, Abbottabad, Pakistan
Rab Nawaz Jadoon (Assistant Professor) Department of Computer Science COMSATS University, Abbottabad, Pakistan rabnawaz@ciit.net.pk 1 TABLE OF CONTENTS 1. Introduction... 3 1.1 History... 3 1.2 Bluetooth
Cyber Security & Ethical Hacking Training. Introduction to Cyber Security Introduction to Cyber Security. Linux Operating System and Networking: LINUX
Cyber Security & Ethical Hacking Training. Introduction to Cyber Security Introduction to Cyber Security HTML PHP Database Linux Operating System and Networking: LINUX NETWORKING Information Gathering:
Acceptable Use Policy
Acceptable Use Policy. August 2016 1. Overview Kalamazoo College provides and maintains information technology resources to support its academic programs and administrative operations. This Acceptable
Download the Driver software from the following link: Establish Bluetooth Connection
Download the Driver software from the following link: http://files.microinv.com/micro_drivers/usb50bt%20driver.zip Establish Bluetooth Connection A connection is normally initiated from the client. On
Spring 2010 CS419. Computer Security. Vinod Ganapathy Lecture 14. Chapters 6 and 9 Intrusion Detection and Prevention
Spring 2010 CS419 Computer Security Vinod Ganapathy Lecture 14 Chapters 6 and 9 Intrusion Detection and Prevention Firewalls and IPSes effective means of protecting LANs internet connectivity essential
ELEC5616 COMPUTER & NETWORK SECURITY
ELEC5616 COMPUTER & NETWORK SECURITY Lecture 17: Network Protocols I IP The Internet Protocol (IP) is a stateless protocol that is used to send packets from one machine to another using 32- bit addresses
Security of Wireless Networks in Intelligent Vehicle Systems
Security of Wireless Networks in Intelligent Vehicle Systems Syed M. Mahmud and Shobhit Shanker Electrical and Computer Engg. Dept. Wayne State University Detroit, MI 48202 Email: smahmud@eng.wayne.edu
GPRS security. Helsinki University of Technology S Security of Communication Protocols
GPRS security Helsinki University of Technology S-38.153 Security of Communication Protocols vrantala@cc.hut.fi 15.4.2003 Structure of the GPRS Network BSS GTP PLMN BSS-Base Station sub-system VLR - Visiting
Access Controls. CISSP Guide to Security Essentials Chapter 2
Access Controls CISSP Guide to Security Essentials Chapter 2 Objectives Identification and Authentication Centralized Access Control Decentralized Access Control Access Control Attacks Testing Access Controls
Pass Microsoft Exam
Pass Microsoft 98-367 Exam Number: 98-367 Passing Score: 700 Time Limit: 45 min File Version: 51.0 http://www.gratisexam.com/ Pass Microsoft 98-367 Exam Exam Name: Security Fundamentals Certdumps QUESTION
Actual4Test. Actual4test - actual test exam dumps-pass for IT exams
Actual4Test http://www.actual4test.com Actual4test - actual test exam dumps-pass for IT exams Exam : GCFW Title : GIAC Certified Firewall Analyst Vendors : GIAC Version : DEMO Get Latest & Valid GCFW Exam's
Accounting Information Systems
Accounting Information Systems Fourteenth Edition Chapter 6 Computer Fraud and Abuse Techniques ALW AYS LEARNING Learning Objectives Compare and contrast computer attack and abuse tactics. Explain how
Bluetooth. March 28, 2005 Patrick Lui
Bluetooth March 28, 2005 Patrick Lui 0053252 1. Introduction As our everyday lives move closer towards complete digital age, connectivity between devices is an important aspect that has not been emphasized
SYSTEM THREAT ANALYSIS FOR HIGH ASSURANCE SOFTWARE DEFINED RADIOS
SYSTEM THREAT ANALYSIS FOR HIGH ASSURANCE SOFTWARE DEFINED RADIOS David Murotake, (SCA Technica, Inc. Nashua NH, USA; david.murotak@scatechnica.com) Antonio Martin (SCA Technica, Inc., Nashua NH, USA;
DONE FOR YOU SAMPLE INTERNET ACCEPTABLE USE POLICY
DONE FOR YOU SAMPLE INTERNET ACCEPTABLE USE POLICY Published By: Fusion Factor Corporation 2647 Gateway Road Ste 105-303 Carlsbad, CA 92009 USA 1.0 Overview Fusion Factor s intentions for publishing an
Chapter 1 B: Exploring the Network
Chapter 1 B: Exploring the Network Types of Networks The two most common types of network infrastructures are: Local Area Network (LAN) Wide Area Network (WAN). Other types of networks include: Metropolitan
Unencrypted Mouse Packet
MouseJack Injecting Keystrokes into Wireless Mice Marc Newlin Bastille Threat Research Team February 12, 2016 Abstract MouseJack is a collection of security vulnerabilities affecting non-bluetooth wireless
Chapter 10: Security and Ethical Challenges of E-Business
Chapter 10: Security and Ethical Challenges of E-Business Learning Objectives Identify several ethical issues in IT that affect employment, individuality, working condition, privacy, crime health etc.
SANS Exam SEC504 Hacker Tools, Techniques, Exploits and Incident Handling Version: 7.1 [ Total Questions: 328 ]
![SANS Exam SEC504 Hacker Tools, Techniques, Exploits and Incident Handling Version: 7.1 [ Total Questions: 328 ]](/thumbs/91/106327268.jpg "SANS Exam SEC504 Hacker Tools, Techniques, Exploits and Incident Handling Version: 7.1 [ Total Questions: 328 ]")
s@lm@n SANS Exam SEC504 Hacker Tools, Techniques, Exploits and Incident Handling Version: 7.1 [ Total Questions: 328 ] https://certkill.com SANS SEC504 : Practice Test Topic break down Topic No. of Questions
II.C.4. Policy: Southeastern Technical College Computer Use
II.C.4. Policy: Southeastern Technical College Computer Use 1.0 Overview Due to the technological revolution in the workplace, businesses such as Southeastern Technical College (STC) have turned to computer
Ethical Hacking. Content Outline: Session 1
Ethical Hacking Content Outline: Session 1 Ethics & Hacking Hacking history : How it all begin - Why is security needed? - What is ethical hacking? - Ethical Hacker Vs Malicious hacker - Types of Hackers