A comprehensive review of RFID and bluetooth security: practical analysis

The Internet of Things (IoT) provides the ability to digitize physical objects into virtual data, thanks to the integration of hardware (e.g., sensors, actuators) and network communications for collecting and exchanging data. In this digitization process, however, security challenges need to be take...

ver descrição completa

Detalhes bibliográficos
Autores: Figueroa-Lorenzo, S. (Santiago)|||/items/e7ce025e-1e3d-449c-ad8f-64729a414fa5, Añorga-Benito, J.(Javier)|||/items/6f03d979-dc45-43c2-8790-c82eb0a96d46, García-Cardarelli, P. (Pablo)|||/items/a4d8e114-bb05-4d59-8678-8f0785ba7789, Alberdi-Garaia, J. (Jon)|||/items/ec24947c-edbf-4bde-ab99-48c47481590c, Arrizabalaga-Juaristi, S. (Saioa)|||/items/8fd585fc-4135-44f8-803d-ddeb0605d98e
Formato: artículo
Fecha de publicación:2019
País:España
Recursos:Universidad de Navarra
Repositorio:Dadun. Depósito Académico Digital de la Universidad de Navarra
Idioma:inglés
OAI Identifier:oai:dadun.unav.edu:10171/62266
Acesso em linha:https://hdl.handle.net/10171/62266
Access Level:acceso abierto
Palavra-chave:IoT
RFID
NFC
Bluetooth
Proxmark3
Ubertooth
BtleJuice
Bleah
Descrição
Resumo:The Internet of Things (IoT) provides the ability to digitize physical objects into virtual data, thanks to the integration of hardware (e.g., sensors, actuators) and network communications for collecting and exchanging data. In this digitization process, however, security challenges need to be taken into account in order to prevent information availability, integrity, and confidentiality from being compromised. In this paper, security challenges of two broadly used technologies, RFID (Radio Frequency Identification) and Bluetooth, are analyzed. First, a review of the main vulnerabilities, security risk, and threats affecting both technologies are carried out. Then, open hardware and open source tools like: Proxmark3 and Ubertooth as well as BtleJuice and Bleah are used as part of the practical analysis. Lastly, risk mitigation and counter measures are proposed.