DEMO:BTLEmap:Nmap用于低功耗蓝牙
DEMO: BTLEmap: Nmap for Bluetooth Low Energy
摘要:
低功耗蓝牙设备的市场正在蓬勃发展,同时也成为对手的一个有吸引力的目标。为了提高BLE的安全性,我们提出了一个用于BLE环境的审计应用程序BTLEmap。BTLEmap的灵感来自网络发现和安全审计工具,如用于基于IP的网络的Nmap。它允许设备枚举、GATT服务发现和设备指纹识别。它还集成了BLE广告分析器,数据导出器和用户友好的UI,包括接近视图。BTLEmap目前使用Apple的CoreBluetooth API在iOS和macOS上运行,但也接受Raspberry Pi等替代数据输入,以克服受限制的供应商API。该开源项目正在积极开发中,未来将提供更先进的功能,例如长期设备跟踪(尽管MAC地址随机化)。
英文摘要:
The market for Bluetooth Low Energy devices is booming and, at the same time, has become an attractive target for adversaries. To improve BLE security at large, we present BTLEmap, an auditing application for BLE environments. BTLEmap is inspired by network discovery and security auditing tools such as Nmap for IP-based networks. It allows for device enumeration, GATT service discovery, and device fingerprinting. It goes even further by integrating a BLE advertisement dissector, data exporter, and a user-friendly UI, including a proximity view. BTLEmap currently runs on iOS and macOS using Apple's CoreBluetooth API but also accepts alternative data inputs such as a Raspberry Pi to overcome the restricted vendor API. The open-source project is under active development and will provide more advanced capabilities such as long-term device tracking (in spite of MAC address randomization) in the future.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。