COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-666

BlueSmacking

An adversary uses Bluetooth flooding to transfer large packets to Bluetooth enabled devices over the L2CAP protocol with the goal of creating a DoS. This attack must be carried out within close proximity to a Bluetooth enabled device.

Soyutlama

Standard

Tipik ciddiyet

Medium

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

An adversary uses Bluetooth flooding to transfer large packets to Bluetooth enabled devices over the L2CAP protocol with the goal of creating a DoS. This attack must be carried out within close proximity to a Bluetooth enabled device.

Uygulama akışı

Saldırı adım adım nasıl ilerler?

1

Explore

Scan for Bluetooth Enabled Devices

Using BlueZ along with an antenna, an adversary searches for devices with Bluetooth on.

Kullanılan teknikler

  • Note the MAC address of the device you want to attack.
2

Experiment

Change L2CAP Packet Length

The adversary must change the L2CAP packet length to create packets that will overwhelm a Bluetooth enabled device.

Kullanılan teknikler

  • An adversary downloads and installs BlueZ, the standard Bluetooth utility package for Linux.
3

Exploit

Flood

An adversary sends the packets to the target device, and floods it until performance is degraded.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • The system/application has Bluetooth enabled.

Gerekli beceri

  • Low: An adversary only needs a Linux machine along with a Bluetooth adapter, which is extremely common.

Gerekli kaynak

MITRE kaydında belirtilmemiş.

Tespit

Saldırının göstergeleri nelerdir?

Performance is degraded or halted by incoming L2CAP packets.

Etki

Başarılı saldırı neye yol açar?

Unreliable ExecutionResource Consumption

Etkilenen alanlar: Availability

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
Disable Bluetooth when not being used.
2
When using Bluetooth, set it to hidden or non-discoverable mode.