BISON: Attacking Bluetooth's Broadcast Isochronous Streams

Theo Gasteiger; Carlo Alberto Boano; Kay  Römer

doi:10.5555/3639940.3639973

BISON: Attacking Bluetooth's Broadcast Isochronous Streams

Theo Gasteiger, Carlo Alberto Boano, Kay Römer

Institute of Technical Informatics (4480)

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abstract

In this paper we present BISON, a novel attack on Bluetooth’s broadcast isochronous streams (BISes), and demonstrate it on off-the-shelf hardware. BISON exploits the plaintext metadata used for stream synchronization as well as the vague specification of the Broadcast_Code exchange to take over ongoing BISes and manipulate their content. With BISON, we are the first to raise awareness about the vulnerability of BISes, which are the stepping stone of several Bluetooth applications for audio diffusion at public locations. We further describe possible attack countermeasures and guidelines on how to design secure applications leveraging BISes

Original language	English
Title of host publication	EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks
Place of Publication	New York, NY
Publisher	Association of Computing Machinery
Pages	256-261
DOIs	https://doi.org/10.5555/3639940.3639973
Publication status	Published - 25 Sept 2023
Event	20th International Conference on Embedded Wireless Systems and Networks: EWSN 2023 - University of Calabria, Rende, Italy Duration: 25 Sept 2023 → 27 Sept 2023 https://events.dimes.unical.it/ewsn2023/

Conference

Conference	20th International Conference on Embedded Wireless Systems and Networks
Abbreviated title	EWSN 2023
Country/Territory	Italy
City	Rende
Period	25/09/23 → 27/09/23
Internet address	https://events.dimes.unical.it/ewsn2023/

Fields of Expertise

Information, Communication & Computing

Access to Document

10.5555/3639940.3639973

http://www.carloalbertoboano.com/documents/gasteiger23bison.pdf

1 Active

Intelligent & Networked Embedded Systems
Boano, C. A., Römer, K. U., Schuß, M., Cao, N., Saukh, O., Hofmann, R., Stocker, M., Schuh, M. P., Papst, F., Salomon, E., Brunner, H., Gallacher, M., Mohamed Hydher, M. H., Wang, D., Corti, F., Krisper, M., Basic, F. & Petrovic, K.
1/09/13 → 31/12/24
Project: Research area

1 Talk at conference or symposium

BISON: Attacking Bluetooth's Broadcast Isochronous Streams
Theo Gasteiger (Speaker)
27 Sept 2023
Activity: Talk or presentation › Talk at conference or symposium › Science to science

1 Paper

Demo: Hijacking Bluetooth’s Broadcast Audio Streams using BISON
Gasteiger, T., Boano, C. A. & Römer, K. U., 25 Sept 2023, (Accepted/In press).
Research output: Contribution to conference › Paper › peer-review

Open Access

Cite this

BISON: Attacking Bluetooth's Broadcast Isochronous Streams. / Gasteiger, Theo ; Boano, Carlo Alberto ; Römer, Kay .
EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks. New York, NY: Association of Computing Machinery, 2023. p. 256-261.

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Gasteiger, T , Boano, CA & Römer, K 2023, BISON: Attacking Bluetooth's Broadcast Isochronous Streams. in EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks. Association of Computing Machinery, New York, NY, pp. 256-261, 20th International Conference on Embedded Wireless Systems and Networks, Rende, Italy, 25/09/23. https://doi.org/10.5555/3639940.3639973

@inproceedings{342c86de07ff411a92076c39f02ce402,

title = "BISON: Attacking Bluetooth's Broadcast Isochronous Streams",

abstract = "In this paper we present BISON, a novel attack on Bluetooth{\textquoteright}s broadcast isochronous streams (BISes), and demonstrate it on off-the-shelf hardware. BISON exploits the plaintext metadata used for stream synchronization as well as the vague specification of the Broadcast_Code exchange to take over ongoing BISes and manipulate their content. With BISON, we are the first to raise awareness about the vulnerability of BISes, which are the stepping stone of several Bluetooth applications for audio diffusion at public locations. We further describe possible attack countermeasures and guidelines on how to design secure applications leveraging BISes",

author = "Theo Gasteiger and Boano, {Carlo Alberto} and Kay R{\"o}mer",

year = "2023",

month = sep,

day = "25",

doi = "10.5555/3639940.3639973",

language = "English",

pages = "256--261",

booktitle = "EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks",

publisher = "Association of Computing Machinery",

address = "United States",

note = "20th International Conference on Embedded Wireless Systems and Networks : EWSN 2023, EWSN 2023 ; Conference date: 25-09-2023 Through 27-09-2023",

url = "https://events.dimes.unical.it/ewsn2023/",

}

TY - GEN

T1 - BISON: Attacking Bluetooth's Broadcast Isochronous Streams

AU - Gasteiger, Theo

AU - Boano, Carlo Alberto

AU - Römer, Kay

PY - 2023/9/25

Y1 - 2023/9/25

N2 - In this paper we present BISON, a novel attack on Bluetooth’s broadcast isochronous streams (BISes), and demonstrate it on off-the-shelf hardware. BISON exploits the plaintext metadata used for stream synchronization as well as the vague specification of the Broadcast_Code exchange to take over ongoing BISes and manipulate their content. With BISON, we are the first to raise awareness about the vulnerability of BISes, which are the stepping stone of several Bluetooth applications for audio diffusion at public locations. We further describe possible attack countermeasures and guidelines on how to design secure applications leveraging BISes

AB - In this paper we present BISON, a novel attack on Bluetooth’s broadcast isochronous streams (BISes), and demonstrate it on off-the-shelf hardware. BISON exploits the plaintext metadata used for stream synchronization as well as the vague specification of the Broadcast_Code exchange to take over ongoing BISes and manipulate their content. With BISON, we are the first to raise awareness about the vulnerability of BISes, which are the stepping stone of several Bluetooth applications for audio diffusion at public locations. We further describe possible attack countermeasures and guidelines on how to design secure applications leveraging BISes

U2 - 10.5555/3639940.3639973

DO - 10.5555/3639940.3639973

M3 - Conference paper

SP - 256

EP - 261

BT - EWSN '23: Proceedings of the 2023 International Conference on embedded Wireless Systems and Networks

PB - Association of Computing Machinery

CY - New York, NY

T2 - 20th International Conference on Embedded Wireless Systems and Networks

Y2 - 25 September 2023 through 27 September 2023

ER -

BISON: Attacking Bluetooth's Broadcast Isochronous Streams

Abstract

Conference

Fields of Expertise

Access to Document

Fingerprint

Projects

Intelligent & Networked Embedded Systems

Activities

BISON: Attacking Bluetooth's Broadcast Isochronous Streams

Research output

Demo: Hijacking Bluetooth’s Broadcast Audio Streams using BISON

Cite this