The Bluetooth Device Database
Ryan Holeman explores the bluetooth device database at DEF CON 21, examining bluetooth and practical defenses.
Summary
Architecture and Background
The Bluetooth Device Database RYAN HOLEMAN SENIOR SOFTWARE DEVELOPER, ZIFTEN TECHNOLOGIES As of 2013, it is estimated that there are now billions of bluetooth devices deployed worldwide. The goal of the Bluetooth Database Project is to track and freely distribute real time sightings and statistics of these wide spread devices. The data collected from these devices can be used to answer questions pertaining to various topics, such as device geolocation, device proliferation, population analysis, device misconfigurations, and an assortment of other security related analytics.
Vulnerability Analysis
During this presentation I will go over the current community driven, distributed, real time, client/server architecture of the project. I will show off some of analytics that can be leveraged from the projects data sets. Finally, I will be releasing various open source open source bluetooth scanning clients (Linux, iOS, OSX).
Exploitation and Demonstrations
These clients are easily installable across various operating systems and can be used to systematically contribute data to the project. Ryan Holeman (@hackgnar) resides in Austin Texas where he works as a senior software developer for Ziften Technologies. He has a Masters of Science in Software Engineering.
Remediation and Defensive Strategies
He has published papers though ICSM and ICPC and spoken at various security conferences including DEF CON and Black Hat. His spare time is mostly spent digging into various network protocols and shredding local skateparks. Materials:
Related talks
Main Stage·37 min
Joseph Paul Cohen
Joseph Paul Cohen details blucat: Netcat For Bluetooth JOSEPH PAUL COHEN TCP/IP has tools such as nmap and netcat to explore devices and create socket connections.
Main Stage·50 min
Kevin Mahaffey · John Hering · and Anthony Lineberry
Kevin Mahaffey and John Hering explores is your iphone pwned at DEF CON 17, examining bluetooth and practical defenses.
Main Stage·23 min
David Hulton
David Hulton details david Hulton: Faster PwninG Assured: New adventures with FPGAs I've been giving talks on how FPGAs are cool for the past couple of years at Defcon, so what's different this year.