BLE security essentials Sławomir Jasek slawomir.jasek@smartlockpicking.com @slawekja Hardwear.io, Hague, 13.09.2018 Sławomir Jasek – short Sławek [suaveck] Enjoy appsec (dev, break, build...) since 2003. Pentesting, consulting, training - web, mobile, embedded, ... Trainings, workshops, tutorials: www.smartlockpicking.com Significant part of time for research. How much can we fit in a 2 hour workshop? Bluetooth Smart? Our hardware – flashing, embedded development BLE advertisements, connections, services, characteristics Sniffing BLE BLE „Man in the Middle”, relay, replay BtleJacking General idea Workshop for BLE beginners. Most exercises possible to repeat later at home using the provided hardware. Bluetooth Smart? AKA Bluetooth 4, Bluetooth Low Energy One of most exploding recently IoT technologies. Completely different than previous Bluetooth 2, 3 (BR/EDR). Designed from the ground up for low energy usage, simplici
