# 25 Years of Bluetooth Technology
## 5 Bluetooth Security
Another type of SSP attack needs a visual contact with the victim's Bluetooth devices (such as direct line-of-sight or possibly a video camera that is hidden) to guarantee that a lower security association model choice is made by the Bluetooth device user. Once the attacker (MITM) has visual access to the victim's devices, the attacker acts before the legitimate user to establish Bluetooth connections to both victims' devices and to initiate the IO phase in which the less secure association model can be forcefully selected [31]. To mitigate MITM attacks, we need to incorporate more specific piconet information into the pairing process. For example, timestamps and nested mutual authentication can be used to determine the legitimacy of a device's challenge before responses are sent [27]. * Bluejacking attack  
Bluejacking makes use of the Bluetooth technology to send unsolicited/unwelcomed messages to Bluetooth enabled devices. The receiver does not know the sender of the message. It only receives the message along with the name and model of the sender's phone. Bluejacking is instigated by an attacker (also known as bluejacker or bluejack addict) who forwards unsolicited messages to a Bluetooth-enabled device user. When the connection is established, the bluejacker tries to send a message to the recipient. The actual message sent to the user's device does not cause any harm but is used to cause the user to counter react in some manner or add a new contact to the device's address book [32]. Figure 11: Man-in-the-Middle (MITM) attack on Bluetooth. Devices that are set in non-discoverable, hidden or invisible mode are not susceptible to blue jacking [32]. * BlueSnarfing attack  
BlueSnarfing allows unapproved access to a Bluetooth node. In this attack, the attacker hacks the node in order to access its contact book, document files, etc. It could also possibly forward messages and calls to another device [28]. BlueSnarfing can be avoided by deactivating discovery mode of the device, keeping the device in invisible mode, and by utilizing tools that restrict the device connection to known devices only. * Bluebugging attack  
Bluebugging is perhaps an attack of most concern. In a bluebugging attack, the intruder gets illegal access to a device and can then run commands or implement other actions such as making phone calls, and so on. Such actions can result in major problems. Bluebugging exploits a security flaw in the firmware of some older Bluetooth devices (mostly those using Bluetooth classic) to gain access to the device and its commands [33]. Bluebugging can be avoided by switching off the Bluetooth radio capability while not in use since Bluebuggers can only make a connection when Bluetooth is enabled. It is also useful to scan all incoming multimedia messages for viruses. Bluebuggers often gain access to the device by transmitting such information to it [34]. * Bluesmack attack  
A Bluesmack attack is the Bluetooth equivalent of the Ping-of-Death denial-of-service attack. This is a buffer overflow issue which uses L2 CAP echo messages, comprising a large volume of packets sent to the victim node in a short interval of time [35]. * BluePrinting attack  
Blueprinting is a method to remotely extract information from Bluetooth-enabled devices. Blueprinting can be used for generating statistics about manufacturers and models and to find out whether there are devices in range that have weak Bluetooth security [36]. Safety procedures include switching off Bluetooth functionality whenever not in use, employing authentication and encryption whenever possible, and never pairing with an unknown device. * Backdoor attack  
The backdoor attack involves establishing a trust relationship through the \"pairing\" mechanism but ensuring that it no longer appears in the target's register of paired devices.