{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T04:44:46Z","timestamp":1781325886386,"version":"3.54.1"},"reference-count":67,"publisher":"MDPI AG","issue":"3","license":[{"start":{"date-parts":[[2018,7,19]],"date-time":"2018-07-19T00:00:00Z","timestamp":1531958400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JSAN"],"abstract":"<jats:p>Bluetooth technology is a key component of wireless communications. It provides a low-energy and low-cost solution for short-range radio transmissions. Bluetooth, more specifically Bluetooth Low Energy (BLE) has become the predominant technology for connecting IoT (Internet of Things). It can be found in cell phones, headsets, speakers, printers, keyboards, automobiles, children\u2019s toys, and medical devices, as well as many other devices. The technology can also be found in automated smart homes, to provide monitors and controls for lights, thermostats, door locks, appliances, security systems, and cameras. Bluetooth offers convenience and ease of use, but it lacks a centralized security infrastructure. As a result, it has serious security vulnerabilities, and the need for awareness of the security risks are increasing as the technology becomes more widespread. This paper presents an overview of Bluetooth technology in IoT including its security, vulnerabilities, threats, and risk mitigation solutions, as well as real-life examples of exploits. Our study highlights the importance of understanding attack risks and mitigation techniques involved with using Bluetooth technology on our devices. Real-life examples of recent Bluetooth exploits are presented. Several recommended security measures are discussed to secure Bluetooth communication.<\/jats:p>","DOI":"10.3390\/jsan7030028","type":"journal-article","created":{"date-parts":[[2018,7,20]],"date-time":"2018-07-20T02:10:11Z","timestamp":1532052611000},"page":"28","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":146,"title":["Security Vulnerabilities in Bluetooth Technology as Used in IoT"],"prefix":"10.3390","volume":"7","author":[{"given":"Angela M.","family":"Lonzetta","sequence":"first","affiliation":[{"name":"Fordham Center for Cybersecurity, Fordham University, New York, NY 10023, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Cope","sequence":"additional","affiliation":[{"name":"Computer Science Department, New York Institute of Technology, Old Westbury, NY 11568, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joseph","family":"Campbell","sequence":"additional","affiliation":[{"name":"Computer Science Department, New York Institute of Technology, Old Westbury, NY 11568, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bassam J.","family":"Mohd","sequence":"additional","affiliation":[{"name":"Computer Engineering Department, Hashemite University, Zarqa 13133, Jordan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8952-1499","authenticated-orcid":false,"given":"Thaier","family":"Hayajneh","sequence":"additional","affiliation":[{"name":"Fordham Center for Cybersecurity, Fordham University, New York, NY 10023, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2018,7,19]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"86","DOI":"10.1109\/35.968817","article-title":"An overview of the Bluetooth wireless technology","volume":"39","author":"Bisikian","year":"2001","journal-title":"IEEE Commun. Mag."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Cope, P., Campbell, J., and Hayajneh, T. (2017, January 9\u201311). An Investigation of Bluetooth Security Vulnerabilities. Proceedings of the 7th IEEE Annual Computing and Communication Workshop and Conference (IEEE CCWC 2017), Las Vegas, NV, USA.","DOI":"10.1109\/CCWC.2017.7868416"},{"key":"ref_3","unstructured":"National Institute of Standards and Technology (2008). Guide to Bluetooth Security: Recommendations of the National Institute of Standards and Technology."},{"key":"ref_4","unstructured":"(2018, June 06). NIST Special Publication 800-121 Revision 2: Guide to Bluetooth Security, Available online: https:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-121r2.pdf."},{"key":"ref_5","unstructured":"Gerez, S. (2018, July 14). Implementation of Digital Signal Processing: Some Background on GFSK Modulation. Available online: http:\/\/wwwhome.ewi.utwente.nl\/~gerezsh\/sendfile\/sendfile.php\/gfsk-intro.pdf?sendfile=gfsk-intro.pdf."},{"key":"ref_6","unstructured":"(2018, June 06). Bluetooth 5 FAQ: Everything You Need to Know. Available online: https:\/\/www.macworld.com\/article\/3262664\/hardware\/bluetooth-5-faq-everything-you-need-to-know.html."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"30","DOI":"10.1109\/MCOM.2016.1600546CM","article-title":"Bluetooth low energy in dense IoT environments","volume":"54","author":"Harris","year":"2016","journal-title":"IEEE Commun. Mag."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"127","DOI":"10.5121\/ijdps.2012.3110","article-title":"Bluetooth security threats and solutions: A survey","volume":"3","author":"Tarique","year":"2012","journal-title":"Int. J. Distrib. Parallel Syst."},{"key":"ref_9","first-page":"741","article-title":"A Survey on Security Threats and Vulnerability attacks on Bluetooth Communication","volume":"4","author":"Panse","year":"2013","journal-title":"Int. J. Comput. Sci. Inf. Technol."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"308","DOI":"10.1016\/j.cose.2017.03.008","article-title":"Security Threats in Bluetooth Technology","volume":"74","author":"Hassan","year":"2017","journal-title":"Comput. Secur."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Darroudi, S.M., and Gomez, C. (2017). Bluetooth low energy mesh networks: A survey. Sensors, 17.","DOI":"10.3390\/s17071467"},{"key":"ref_12","unstructured":"Zou, Y., Wang, X., and Hanzo, L. (arXiv, 2015). A survey on wireless security: Technical challenges, recent advances and future trends, arXiv."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"2165","DOI":"10.1007\/s11276-014-0736-8","article-title":"A survey of wireless technologies coexistence in WBAN: Analysis and open research issues","volume":"20","author":"Hayajneh","year":"2014","journal-title":"Wirel. Netw."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"90","DOI":"10.1109\/MCOM.2002.1007414","article-title":"Bluetooth in wireless communication","volume":"40","author":"Sairam","year":"2002","journal-title":"IEEE Commun. Mag."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"185","DOI":"10.1109\/74.997963","article-title":"Wireless communications and networking: An overview","volume":"44","author":"Jordan","year":"2002","journal-title":"IEEE Antennas Propag. Mag."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1109\/MWC.2005.1404569","article-title":"Bluetooth and Wi-Fi wireless protocols: A survey and a comparison","volume":"12","author":"Ferro","year":"2005","journal-title":"IEEE Wirel. Commun."},{"key":"ref_17","unstructured":"(2018, June 06). Bluetooth Versions Walkthrough and Bluetooth 4.0 Low Energy Development Resources. Available online: https:\/\/www.cnx-software.com\/2013\/06\/05\/bluetooth-versions-walkthrough-and-bluetooth-4-0-low-e."},{"key":"ref_18","first-page":"88","article-title":"Analysis of security risks in Bluetooth","volume":"1","author":"Shrivastava","year":"2012","journal-title":"Int. J. Comput. Acad. Res."},{"key":"ref_19","unstructured":"National Institute of Standards and Technology (2016). Guide to Bluetooth Security."},{"key":"ref_20","unstructured":"Mitchell, A. (2016, May 01). The Car Whisperer: Eavesdrop Onand Take Part in Nearby Bluetooth Conversations. Available online: https:\/\/www.theinternetpatrol.com\/the-car-whisperer-eavesdrop-on-and-take-part-in-nearby-bluetooth-conversations\/."},{"key":"ref_21","unstructured":"Dunning, J.P. (2018, April 13). Bluetooth Threat Taxonomy. Available online: https:\/\/vtechworks.lib.vt.edu\/bitstream\/handle\/10919\/76883\/etd-10242010-163002_Dunning_JP_T_2010.pdf?sequence =1&isAllowed=y)."},{"key":"ref_22","unstructured":"(2018, June 06). Bluetooth Security. Available online: https:\/\/cs.stanford.edu\/people\/eroberts\/courses\/soco\/projects\/2003-04\/wireless-computing\/sec_bluetooth.shtml."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Meghanathan, N., and Reddy, Y.B. (2013). Security and Privacy Challenges in Cognitive Wireless Sensor Networks. Cognitive Radio Technology Applications for Wireless and Mobile Ad hoc Networks, IGI-Global.","DOI":"10.4018\/978-1-4666-4221-8"},{"key":"ref_24","unstructured":"Shaked, Y., and Wool, A. (2018, June 06). Cracking Bluetooth PIN. Available online: http:\/\/www.eng.tau.ac.il\/~yash\/shaked-wool-mobisys05\/."},{"key":"ref_25","unstructured":"Saravanan, K., Vijayanand, L., and Negesh, R.K. (arXiv, 2012). A Novel Bluetooth Man-In-The-Middle Attack Based on SSP using OOB Association model, arXiv."},{"key":"ref_26","unstructured":"Moreno, A., and Okamoto, E. (2018, June 06). BlueSnarf Revisted: OBEX FTP Service Directory Traversal. Available online: https:\/\/link.springer.com\/content\/pdf\/10.1007%2F978-3-642-23041-7_16.pdf."},{"key":"ref_27","unstructured":"Ahmed, M., Musleh, A., Marouf, A., Mahmoud, A., and Abu-Amara, M. (2018, June 07). Bluetooth Security. Available online: https:\/\/www.slideshare.net\/ram_ari\/bluetooth-security."},{"key":"ref_28","unstructured":"Becker, A. (2007). Bluetooth Security & Hacks, Ruhr University of Bochum. Available online: https:\/\/gsyc.urjc.es\/~anto\/ubicuos2\/bluetooth_security_and_hacks.pdf."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1109\/MSP.2007.43","article-title":"Studying bluetooth malware propagation: The BlueBag project","volume":"5","author":"Carettoni","year":"2007","journal-title":"IEEE Secur. Priv."},{"key":"ref_30","unstructured":"(2018, June 06). Trifinite: BlueBump. Available online: https:\/\/trifinite.org\/trifinite_stuff_bluebump.html."},{"key":"ref_31","unstructured":"(2018, June 06). BlueDump. Available online: https:\/\/trifinite.org\/trifinite_stuff_bluedump.html."},{"key":"ref_32","unstructured":"(2018, June 06). Trifinite: BluePrinting. Available online: https:\/\/trifinite.org\/trifinite_stuff_blueprinting.html."},{"key":"ref_33","unstructured":"(2018, June 06). Red Hat CVE-2017-1000251. Available online: https:\/\/access.redhat.com\/security\/cve\/cve-2017-1000251."},{"key":"ref_34","unstructured":"(2018, June 06). The Attack Vector \u201cBlueBorne\u201d Exposes Almost Every Connected Device. Available online: https:\/\/www.armis.com\/blueborne\/."},{"key":"ref_35","first-page":"1833","article-title":"Bluetooth technology: Security issues and its prevention","volume":"5","author":"Tsira","year":"2014","journal-title":"Int. J. Comput. Appl. Technol."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Nawir, M., Amir, A., Yaakob, N., and Lynn, O. (2016, January 11\u201312). Internet of Things (IoT): Taxonomy of Security Attacks. Proceedings of the 2016 3rd International Conference on Electronic Design (ICED), Phuket, Thailand.","DOI":"10.1109\/ICED.2016.7804660"},{"key":"ref_37","unstructured":"Haataja, K. (2018, July 14). Security Threats and Countermeasures in Bluetooth-Enabled Systems. Available online: http:\/\/epublications.uef.fi\/pub\/urn_isbn_978-951-27-0111-7\/urn_isbn_978-951-27-0111-7.pdf."},{"key":"ref_38","first-page":"3","article-title":"Analysis and elicitation of Bluetooth versions and Bluetooth attacks","volume":"5","author":"Chatterjee","year":"2017","journal-title":"Int. J. Mod. Comput. Sci."},{"key":"ref_39","unstructured":"(2018, June 07). Trifinite: BluePrinting. Available online: https:\/\/trifinite.org\/trifinite_stuff_bluesmack.html."},{"key":"ref_40","unstructured":"(2018, June 06). Using MultiBlue to Control Any Mobile Device. Available online: https:\/\/null-byte.wonderhowto.com\/how-to\/hack-bluetooth-part-2-using-multiblue-control-any-mobile-device-0164377\/."},{"key":"ref_41","unstructured":"(2018, April 01). Trifinite Group. Available online: https:\/\/trifinite.org\/trifinite_stuff_helomoto.html."},{"key":"ref_42","unstructured":"Pandey, T., and Khara, P. (2016, April 01). Bluetooth Hacking and its Prevention. Available online: http:\/\/www.larsentoubro.com\/media\/27618\/bluetooth-hacking-and-its-prevention-2014.pdf."},{"key":"ref_43","unstructured":"Naone, E. (2016, April 11). Taking Control of Cars from Afar. Available online: https:\/\/www.technologyreview.com\/s\/ 423292\/taking-control-of-cars-from-afar\/."},{"key":"ref_44","unstructured":"Markoff, J. (2018, June 07). Researchers Show How a Car\u2019s Electronics Can Be Taken over Remotely. Available online: https:\/\/www.nytimes.com\/2011\/03\/10\/business\/10hack.html."},{"key":"ref_45","unstructured":"(2018, June 07). Trifinite: BluePrinting. Available online: https:\/\/trifinite.org\/trifinite_stuff_carwhisperer.html."},{"key":"ref_46","unstructured":"(2018, July 14). IGI Global: Disseminator of Knowledge. Available online: https:\/\/www.igi-global.com\/dictionary\/synchronous-connection-oriented-sco-link\/28975."},{"key":"ref_47","unstructured":"(2018, June 07). Car Whisperer\u2019 Puts Hackers in the Drivers Seat. Available online: https:\/\/www.pcworld.com\/article\/122077\/article.html."},{"key":"ref_48","unstructured":"Wright, J. (2018, June 07). I Can Hear You Now. Available online: http:\/\/www.willhackforsushi.com\/presentations\/icanhearyounow-sansns2007.pdf."},{"key":"ref_49","unstructured":"(2018, April 11). Orthogonal. Available online: http:\/\/orthogonal.io\/articles\/developing-bluetooth-enabled-medical-devices\/."},{"key":"ref_50","unstructured":"(2018, April 13). Bluetooth. Available online: https:\/\/www.bluetooth.com \/markets\/connected-device."},{"key":"ref_51","unstructured":"Zetter, K. (2016, April 10). It\u2019s Insanely Easy to Hack Hospital Equipment. Available online: https:\/\/www.wired.com\/2014\/ 04\/hospital-equipment-vulnerable\/."},{"key":"ref_52","unstructured":"Kijewski, M. (2018, April 10). The Medical Devices Most Vulnerable to Hackers. Available online: https:\/\/www.medtechintelligence.com\/feature_article\/medical-devices-vulnerable-hackers\/."},{"key":"ref_53","unstructured":"Paganini, P. (2016, April 05). Smartwatch Hacked, How to Access Data Exchanged with Smartphone. Available online: http:\/\/securityaffairs.co\/wordpress\/31007\/intelligence\/smartwatch-hacked.html."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"200","DOI":"10.2495\/SAFE-V8-N2-200-211","article-title":"An Active Man-in-the-Middle Attack on Bluetooth Smart Devices","volume":"8","author":"Melamed","year":"2018","journal-title":"Int. J. Saf. Secur. Eng."},{"key":"ref_55","unstructured":"(2018, April 13). Mobile Fact Sheet. Available online: http:\/\/www.pewinternet.org\/fact-sheet\/mobile\/."},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"150","DOI":"10.1145\/1467247.1467282","article-title":"Security threats of smart phones and Bluetooth","volume":"52","author":"Loo","year":"2009","journal-title":"Commun. ACM"},{"key":"ref_57","unstructured":"Olick, D. (2018, April 13). Why 2017 Will Finally be the Year of the Smart Home: Consumers Figure it Out. Available online: https:\/\/www.cnbc.com\/2017\/01\/04\/why-2017-will-finally-be-the-year-of-the-smart-home-consumers-figure-it-out.html."},{"key":"ref_58","unstructured":"Estes, A.C. (2018, April 13). This Nest Security Flaw is Remarkably Dumb. Available online: https:\/\/gizmodo.com\/this-nest-security-flaw-is-remarkably-dumb-1793524264."},{"key":"ref_59","unstructured":"(2018, June 07). Google-Nest-Cam-Bug-Disclosures. Available online: https:\/\/github.com\/jasondoyle\/Google-Nest-Cam-Bug-Disclosures\/blob\/master\/README.md."},{"key":"ref_60","unstructured":"Kite-Powell, J. (2018, April 13). This Company Staged a Hack with Multiple Devices to Show Your Home\u2019s Vulnerability. Available online: https:\/\/www.forbes.com\/sites\/jenniferhicks\/2017\/09\/19\/this-company-staged-a-hack-with-multiple-devices-to-show-your-homes-vulnerablity\/#654ac4565322."},{"key":"ref_61","unstructured":"(2018, April 13). Techopedia. Available online: https:\/\/www.techopedia.com\/definition\/24748\/cyberattack."},{"key":"ref_62","unstructured":"Khandelwal, A. (2018, April 13). Bluetooth Hack Affects 20 Million Amazon Echo and Google Home Devices. Available online: https:\/\/thehackernews.com\/2017\/11\/amazon-alexa-hacking-bluetooth.html."},{"key":"ref_63","unstructured":"Wagenseil, P. (2018, April 13). 75 Percent of Bluetooth Smart Locks Can Be Hacked. Available online: https:\/\/www.tomsguide.com\/us\/bluetooth-lock-hacks-defcon2016,news-23129.html."},{"key":"ref_64","unstructured":"Dibrov, Y. (2018, April 13). IoT Devices Compromising Your Business Today. Available online: https:\/\/www.smartindustry.com\/blog\/smart-industry-connect\/six-iot-devices-compromising-your-business-today\/."},{"key":"ref_65","unstructured":"Samuels, M. (2018, April 13). With Teddy Bear Bluetooth Hack, 11-Year-Old Proves IoT Security is No Child\u2019s Play. Available online: https:\/\/securityintelligence.com\/news\/with-teddy-bear-bluetooth-hack-11-year-old-proves-iot-security-is-no-childs-play\/."},{"key":"ref_66","unstructured":"Smithers, R. (2018, April 13). Strangers Can Talk to Your Child through Connected Toys, Investigation Finds. Available online: https:\/\/www.theguardian.com\/technology\/2017\/nov\/14\/retailers-urged-to-withdraw-toys-that-allow-hackers-to-talk-to-children."},{"key":"ref_67","unstructured":"Rakic-Skokovic, M. (2017, January 4\u20136). Guidelines for Overcoming some IoT Security Issues. Proceedings of the XVII International Scientific Conference on Industrial Systems (IS\u201917), Novi Sad, Serbia."}],"container-title":["Journal of Sensor and Actuator Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2224-2708\/7\/3\/28\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T15:13:07Z","timestamp":1760195587000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2224-2708\/7\/3\/28"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,7,19]]},"references-count":67,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2018,9]]}},"alternative-id":["jsan7030028"],"URL":"https:\/\/doi.org\/10.3390\/jsan7030028","relation":{},"ISSN":["2224-2708"],"issn-type":[{"value":"2224-2708","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,7,19]]}}}