| Title | Bridging The Gap: Data Exfiltration In Highly Secured Environments Using Bluetooth IoTs |
| Publication Type | Conference Paper |
| Year of Publication | 2019 |
| Authors | Carpentier, Eleonore, Thomasset, Corentin, Briffaut, Jeremy |
| Conference Name | 2019 IEEE 37th International Conference on Computer Design (ICCD) |
| Keywords | air gapped network, Bluetooth, Bluetooth IoT, bluetooth security, Bluetooth smart bulb, botnets, Browsers, Chromium, composability, computer network security, covert, cryptography, Cyber physical system, cyber physical systems, Data, Data Exfiltration, exfiltration, free-space optical communication, highly secured network, home networks, Human Behavior, Image color analysis, insecure IoT, Internet of Things, invasive software, IoT, IoT devices, malicious actor, Payloads, professional networks, pubcrawl, resilience, Resiliency, security, security measures, security standard, sensitive environments, sensitive information, smart bulb, Software, strict security policies, unprecedented threats, web bluetooth api |
| Abstract | IoT devices introduce unprecedented threats into home and professional networks. As they fail to adhere to security best practices, they are broadly exploited by malicious actors to build botnets or steal sensitive information. Their adoption challenges established security standard as classic security measures are often inappropriate to secure them. This is even more problematic in sensitive environments where the presence of insecure IoTs can be exploited to bypass strict security policies. In this paper, we demonstrate an attack against a highly secured network using a Bluetooth smart bulb. This attack allows a malicious actor to take advantage of a smart bulb to exfiltrate data from an air gapped network. |
| DOI | 10.1109/ICCD46524.2019.00044 |
| Citation Key | carpentier_bridging_2019 |
Bridging The Gap: Data Exfiltration In Highly Secured Environments Using Bluetooth IoTs