1.0 Purpose This policy provides for more secure Bluetooth Device ...
Short summary:
sign of a hack attempt. 3.3 Device Security Settings Bluetooth users must act appropriately to protect information, network access, passwords, ...
Long summary:
1.0 Purpose This policy provides for more secure Bluetooth Device operations. It protects the company from loss of Personally Identifiable Information (PII) and proprietary company data. 2.0 Scope This policy covers all Bluetooth Devices. 3.0 Policy 3. 1Version level No Bluetooth Device shall be deployed on equipment that does not meet Bluetooth v2.1 specifications without written authorization from the InfoSec Manager. Any Bluetooth equipment purchased prior to this policy must comply with all parts of this policy except the Bluetooth version specifications. 3.2 Pins and Pairing When pairing your Bluetooth unit to your Bluetooth enabled equipment (i.e. phone, laptop, etc.), ensure that you are not in a public area. If your Bluetooth enabled equipment asks for you to enter your pin after you have initially paired it, you must refuse the pairing request and report it to InfoSec, through your Help Desk, immediately. Unless your Bluetooth device itself has malfunctioned and lost its pin, this is a sign of a hack attempt. 3.3 Device Security Settings All Bluetooth devices shall employ security mode 3 which encrypts traffic in both directions, between your Bluetooth Device and its paired equipment. If your device allows the usage of long PINs, you must use either a 13 alphabetic PIN or a 19 digit PIN (or longer). Switch the Bluetooth device to use the hidden mode, and activate Bluetooth only when it is needed. Update the devices firmware when a new version is available ...
Source: www.sans.org
Related
Bluetooth Hacking - Full Disclosure, Bluetooth Hacking Full Disclosure @ 21C3.
Blue snarfing Data Theft Calendar
Appointments Images Phone Book Names,
Addresses, Numbers PINs and other codes
Images Bluetooth Hacking Full Disclosure
...,
more
Hacking Bluetooth Enabled Mobile Phones and Beyond, Bluetooth Scatternet. All security
routines are inside the Bluetooth chip.
Bluetooth Technology Data and voice
transmission ACL data connections SCO and
eSCO voice channels Symmetric and
asymmetric connections Frequency hopping
ISM band ...,
more
An Ethical Guide to Hacking Mobile Phones, Bluetooth Hacking. Bluejack Attack OBEX
Push Bluespamming Bluetoothing Modifying a
Remote Mobile Phones Address Book Fadias
Hot Tools for Bluejacking Countermeasures,
more
