Hacking Bluetooth Low Energy Based Applications Tal Melamed Application Security Expert Tal@appsec.it The Twelfth International Conference on Internet Monitoring and Protection ICIMP 2017 June 25 - 29, 2017- Venice, Italy Discussed Topics Key aspects in Bluetooth Low Energy (BLE) How is it different than Bluetooth Classic? Where is the risk? Bluetooth Low Energy Architecture The Security Manager Bluetooth Pairing Generic Attribute Profile (GATT) Man-in-the-Middle (MitM) Related work Possible Mitigations Bibliography Hacking Bluetooth Low Energy Based Applications - ICIMP 2017 2 What is Bluetooth Low Energy Bluetooth Low Energy (BLE) a.k.a Bluetooth Smart, part of Bluetooth 4 Designed to be power-efficient Significantly smaller and cheaper. Low cost and ease of implementation lead BLE to be widely used among IoT devices and applications Wearables, sensors, lightbulbs, medical devices, and many other smart-products. 48 billion IoT devices expected by 2
