# 25 Years of Bluetooth Technology
## 5 Bluetooth Security
In this way, unless the owner is actually observing their devices at the precise moment a connection is established, they are unlikely to notice anything unusual, and the attacker may be free to continue to use any resource that a trusted relationship with that device grants access to. This means that not only can data be retrieved from the phone, but other services, such as modems, or Internet, Wireless Application Protocol (WAP) and General Packet Radio Service (GPRS) gateways could be used [37]. The Backdoor attack can only be implemented if the target device's BT_ADDR is known. Therefore, this attack can be mitigated by hiding the Bluetooth devices BT_ADDR (for example by enabling encryption while establishing Bluetooth connections) [38]. * DoS attack  
In a Denial-of-Service (DoS) attack, the attacker attempts to prevent valid users from accessing the service by sending a large number of messages to the Bluetooth device. Denial of service attacks may aim to drain the battery life of the Bluetooth device through constant activity. For example, an attacker can send repeated pairing requests or device information requests to a Bluetooth device. This constant activity quickly drains the device battery and result in a Battery draining DoS attack [39]. * BD_ADDR attack The attack occurs when a 'bug' is kept within coverage area of a Bluetooth gadget. The bug duplicates the BD_ADDR of the target device. It is worth pointing out that the Bluetooth Device Address (or BD_ADDR) is a unique 48-bit identifier assigned to each Bluetooth device by the manufacturer. Whenever a Bluetooth node attempts to connect with the target device, both, the target device and the bug respond simultaneously and cause jamming. This allows a denial of access for the actual legitimate user. * SCO/eSCO attack This attack is based on a real-time, two-way voice packet. It acquires a lot of a Bluetooth piconet's attention so that the genuine piconet devices cannot access to the service in an acceptable time frame. Establishing a SCO or an enhanced-SCO (e-SCO link) with the piconet master can easily lead to this attack. * L2 CAP guaranteed service attack The intruder asks for maximum bandwidth and lowest latency performance. This leads to rejection of all other requests since bandwidth is now entirely reserved for the intruder. [40]. * Fuzzing This intrusion involves sending malformed or otherwise non-standard data to a device's Bluetooth radio and observing how the device reacts. When a device's response is slowed or stopped by these attacks, this indicates that a serious vulnerability potentially exists in the protocol stack [41]. * BlueBorne This attack allows an attacker to exploit some insecure implementations of Bluetooth on most platforms (Linux devices, Android devices, Amazon and Google home devices) to control or extract information remotely [42]. * MultiBlue In this attack, an intruder can access the node to be hacked. The MultiBlue dongle, a Bluetooth capable 4 GB thumb drive, is utilized to take control of the target device. The intruder utilizes the MultiBlue application to send pairing requests to discoverable nodes. The targeted device then presents a code (a pre-shared key) which the MultiBlue application uses as the authentication key. The attacker then has full node control [29]. * Cabir worm The Cabir worm is a malicious software that uses Bluetooth technology to search for available Bluetooth devices and send itself to them. The user has to manually accept the worm and install the malware in order to infect the phone. The Mabir worm is essentially a variant of the Cabir worm which uses Bluetooth and Multimedia Messaging Service messages (MMS) to replicate. * Helemoto This attack is like the Bluebugging attack but exploits the poor implementations of a \"trusted device\" management on certain phones. As with Bluebugging attacks, the attacker pretends to send a Virtual Contact File (vCard) to an unverified Bluetooth Object Exchange (OBEX) Push Profile on the victim's device.