Neutralizing BLE Beacon-based Electronic Attendance System using Signal Imitation Attack
- Authors
- Kim, M.; Lee, J.; Paek, J.
- Issue Date
- Dec-2018
- Publisher
- Institute of Electrical and Electronics Engineers Inc.
- Keywords
- Proximity-based application; electronic attendance systems; Bluetooth low energy; BLE beacon; vulnerability analysis
- Citation
- IEEE Access, v.6, pp 77921 - 77930
- Pages
- 10
- Journal Title
- IEEE Access
- Volume
- 6
- Start Page
- 77921
- End Page
- 77930
- URI
- https://scholarworks.bwise.kr/cau/handle/2019.sw.cau/3338
- DOI
- 10.1109/ACCESS.2018.2884488
- ISSN
- 2169-3536
- Abstract
- Many emerging location- or proximity-based applications use Bluetooth Low Energy (BLE) beacons thanks to the increasing popularity of the technology in mobile systems. An outstanding example is the BLE beacon-based electronic attendance system (BEAS) used in many universities today to increase the efficiency of lectures. Despite its popularity and usefulness, however, BEAS has not been thoroughly analyzed for its potential vulnerabilities. In this paper, we neutralize a university’s BEAS by maliciously cheating attendance (i.e. faking attendance while the subject is not physically present at the location) in various scenarios using signal imitation attack, and investigate its possible vulnerabilities. The BEAS exploited in this work is a commercial system actually used in a well-known university. After the exploitation experiment, we analyze the system’s weaknesses and present possible counter-measures. Furthermore, additional attack methods are shown to re-counteract those possible counter-measures and to discuss the fundamental challenges, deficiencies, and suggestions in electronic attendance systems using BLE beacons. OAPA
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - College of Software > School of Computer Science and Engineering > 1. Journal Articles
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.