Скачать или смотреть Teaser: Lost and Found: Stopping Bluetooth Finders from Leaking Private Information

Lost and Found: Stopping Bluetooth Finders from Leaking Private Information
by Mira Weller, Jiska Classen, Fabian Ullrich, Denis Wassmann, and Erik Tews
https://wisec2020.ins.jku.at/accepted...

The full paper will be presented at ACM WiSec 2020, the 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks, from July 8 to July 10, 2020.

** Abstract **
A Bluetooth finder is a small battery-powered device that can be attached to important items such as bags, keychains, or bikes. The finder maintains a Bluetooth connection with the user's phone, and the user is notified immediately on connection loss. We provide the first comprehensive security and privacy analysis of current commercial Bluetooth finders. Our analysis reveals several significant security vulnerabilities in those products concerning mobile applications and the corresponding backend services in the cloud. We also show that all analyzed cloud-based products leak more private data than required for their respective cloud services. Overall, there is a big market for Bluetooth finders, but none of the existing products is privacy-friendly. We close this gap by designing and implementing PrivateFind, which ensures locations of the user are never leaked to third parties. It is designed to run on similar hardware as existing finders, allowing vendors to updatetheir systems using PrivateFind.

** ACM WiSec 2020 **
The 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks (ACM WiSec 2020) takes place as an online (virtual) conference from July 8 to July 10, 2020. The event is hosted by the Institute of Networks and Security at Johannes Kepler University Linz.

ACM WiSec is the leading ACM and SIGSAC conference dedicated to all aspects of security and privacy in wireless and mobile networks and their applications, mobile software platforms, Internet of Things, cyber-physical systems, usable security and privacy, biometrics, and cryptography.

Copyright (c) 2020 Association for Computing Machinery

Impressum: https://wisec2020.ins.jku.at/impressum/