BTLEmap: Nmap for bluetooth low energy
BTLEmap: Nmap for bluetooth low energy
复制标题
BTLEmap：用于蓝牙低功耗的 Nmap
DOI：
10.1145/3395351.3401796
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
M. Hollick
中科院分区：
文献类型：
--
作者：
A. Heinrich;Milan Stute;M. Hollick
低功耗蓝牙（BLE）设备市场正在蓬勃发展，同时也成为对手的一个有吸引力的目标。为了提高BLE的安全性，我们提出了一个用于BLE环境的审计应用程序BTLEmap。BTLEmap的灵感来自网络发现和安全审计工具，如用于基于IP的网络的Nmap。它允许设备枚举、通用属性配置文件（GATT）服务发现和设备指纹识别。它还具有BLE广告分析器，数据导出器和用户友好的UI，包括接近视图。BTLEmap目前使用Apple的CoreBluetooth API在iOS和macOS上运行，但也接受Raspberry Pi等替代数据输入，以克服受限制的供应商API。该开源项目正在积极开发中，未来将提供更先进的功能，例如长期设备跟踪（尽管MAC地址随机化）。
The market for Bluetooth Low Energy (BLE) devices is booming and, at the same time, has become an attractive target for adversaries. To improve BLE security at large, we present BTLEmap, an auditing application for BLE environments. BTLEmap is inspired by network discovery and security auditing tools such as Nmap for IP-based networks. It allows for device enumeration, Generic Attribute Profile (GATT) service discovery, and device fingerprinting. It also features a BLE advertisement dissector, data exporter, and a user-friendly UI including a proximity view. BTLEmap currently runs on iOS and macOS using Apple's CoreBluetooth API but also accepts alternative data inputs such as a Raspberry Pi to overcome the restricted vendor API. The open-source project is under active development and will provide more advanced capabilities such as long-term device tracking (in spite of MAC address randomization) in the future.