BISON: Attacking Bluetooth's Broadcast Isochronous Streams

Theo Gasteiger; Carlo Alberto Boano; Kay  Römer

doi:10.5555/3639940.3639973

BISON: Attacking Bluetooth's Broadcast Isochronous Streams

Theo Gasteiger, Carlo Alberto Boano, Kay Römer

Institut für Technische Informatik (4480)

Publikation: Beitrag in Buch/Bericht/Konferenzband › Beitrag in einem Konferenzband › Begutachtung

Abstract

In this paper we present BISON, a novel attack on Bluetooth’s broadcast isochronous streams (BISes), and demonstrate it on off-the-shelf hardware. BISON exploits the plaintext metadata used for stream synchronization as well as the vague specification of the Broadcast_Code exchange to take over ongoing BISes and manipulate their content. With BISON, we are the first to raise awareness about the vulnerability of BISes, which are the stepping stone of several Bluetooth applications for audio diffusion at public locations. We further describe possible attack countermeasures and guidelines on how to design secure applications leveraging BISes

Originalsprache	englisch
Titel	EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks
Erscheinungsort	New York, NY
Herausgeber (Verlag)	Association of Computing Machinery
Seiten	256-261
DOIs	https://doi.org/10.5555/3639940.3639973
Publikationsstatus	Veröffentlicht - 25 Sept. 2023
Veranstaltung	20th International Conference on Embedded Wireless Systems and Networks: EWSN 2023 - University of Calabria, Rende, Italien Dauer: 25 Sept. 2023 → 27 Sept. 2023 https://events.dimes.unical.it/ewsn2023/

Konferenz

Konferenz	20th International Conference on Embedded Wireless Systems and Networks
Kurztitel	EWSN 2023
Land/Gebiet	Italien
Ort	Rende
Zeitraum	25/09/23 → 27/09/23
Internetadresse	https://events.dimes.unical.it/ewsn2023/

Fields of Expertise

Information, Communication & Computing

Zugriff auf Dokument

10.5555/3639940.3639973

http://www.carloalbertoboano.com/documents/gasteiger23bison.pdf

1 Laufend

Intelligent & Networked Embedded Systems
Boano, C. A., Römer, K. U., Schuß, M., Cao, N., Saukh, O., Hofmann, R., Stocker, M., Schuh, M. P., Papst, F., Salomon, E., Brunner, H., Gallacher, M., Mohamed Hydher, M. H., Wang, D., Corti, F., Krisper, M., Basic, F. & Petrovic, K.
1/09/13 → 31/12/24
Projekt: Arbeitsgebiet

1 Vortrag bei Konferenz oder Fachtagung

BISON: Attacking Bluetooth's Broadcast Isochronous Streams
Theo Gasteiger (Redner/in)
27 Sept. 2023
Aktivität: Vortrag oder Präsentation › Vortrag bei Konferenz oder Fachtagung › Science to science

1 Paper

Demo: Hijacking Bluetooth’s Broadcast Audio Streams using BISON
Gasteiger, T., Boano, C. A. & Römer, K. U., 25 Sept. 2023, (Angenommen/In Druck).
Publikation: Konferenzbeitrag › Paper › Begutachtung

Open Access

Dieses zitieren

BISON: Attacking Bluetooth's Broadcast Isochronous Streams. / Gasteiger, Theo ; Boano, Carlo Alberto ; Römer, Kay .
EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks. New York, NY: Association of Computing Machinery, 2023. S. 256-261.

Publikation: Beitrag in Buch/Bericht/Konferenzband › Beitrag in einem Konferenzband › Begutachtung

Gasteiger, T , Boano, CA & Römer, K 2023, BISON: Attacking Bluetooth's Broadcast Isochronous Streams. in EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks. Association of Computing Machinery, New York, NY, S. 256-261, 20th International Conference on Embedded Wireless Systems and Networks, Rende, Italien, 25/09/23. https://doi.org/10.5555/3639940.3639973

@inproceedings{342c86de07ff411a92076c39f02ce402,

title = "BISON: Attacking Bluetooth's Broadcast Isochronous Streams",

abstract = "In this paper we present BISON, a novel attack on Bluetooth{\textquoteright}s broadcast isochronous streams (BISes), and demonstrate it on off-the-shelf hardware. BISON exploits the plaintext metadata used for stream synchronization as well as the vague specification of the Broadcast_Code exchange to take over ongoing BISes and manipulate their content. With BISON, we are the first to raise awareness about the vulnerability of BISes, which are the stepping stone of several Bluetooth applications for audio diffusion at public locations. We further describe possible attack countermeasures and guidelines on how to design secure applications leveraging BISes",

author = "Theo Gasteiger and Boano, {Carlo Alberto} and Kay R{\"o}mer",

year = "2023",

month = sep,

day = "25",

doi = "10.5555/3639940.3639973",

language = "English",

pages = "256--261",

booktitle = "EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks",

publisher = "Association of Computing Machinery",

address = "United States",

note = "20th International Conference on Embedded Wireless Systems and Networks : EWSN 2023, EWSN 2023 ; Conference date: 25-09-2023 Through 27-09-2023",

url = "https://events.dimes.unical.it/ewsn2023/",

}

TY - GEN

T1 - BISON: Attacking Bluetooth's Broadcast Isochronous Streams

AU - Gasteiger, Theo

AU - Boano, Carlo Alberto

AU - Römer, Kay

PY - 2023/9/25

Y1 - 2023/9/25

N2 - In this paper we present BISON, a novel attack on Bluetooth’s broadcast isochronous streams (BISes), and demonstrate it on off-the-shelf hardware. BISON exploits the plaintext metadata used for stream synchronization as well as the vague specification of the Broadcast_Code exchange to take over ongoing BISes and manipulate their content. With BISON, we are the first to raise awareness about the vulnerability of BISes, which are the stepping stone of several Bluetooth applications for audio diffusion at public locations. We further describe possible attack countermeasures and guidelines on how to design secure applications leveraging BISes

AB - In this paper we present BISON, a novel attack on Bluetooth’s broadcast isochronous streams (BISes), and demonstrate it on off-the-shelf hardware. BISON exploits the plaintext metadata used for stream synchronization as well as the vague specification of the Broadcast_Code exchange to take over ongoing BISes and manipulate their content. With BISON, we are the first to raise awareness about the vulnerability of BISes, which are the stepping stone of several Bluetooth applications for audio diffusion at public locations. We further describe possible attack countermeasures and guidelines on how to design secure applications leveraging BISes

U2 - 10.5555/3639940.3639973

DO - 10.5555/3639940.3639973

M3 - Conference paper

SP - 256

EP - 261

BT - EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks

PB - Association of Computing Machinery

CY - New York, NY

T2 - 20th International Conference on Embedded Wireless Systems and Networks

Y2 - 25 September 2023 through 27 September 2023

ER -

BISON: Attacking Bluetooth's Broadcast Isochronous Streams

Abstract

Konferenz

Fields of Expertise

Zugriff auf Dokument

Fingerprint

Projekte

Intelligent & Networked Embedded Systems

Aktivitäten

BISON: Attacking Bluetooth's Broadcast Isochronous Streams

Publikationen

Demo: Hijacking Bluetooth’s Broadcast Audio Streams using BISON

Dieses zitieren