Implementation of Server-Based Intrusion Detection Software Framework in Bluetooth Networks

Bluetooth is a well-known, convenient wireless connection protocol for low-energy devices. As a protocol, it provides convenient connections between devices that are compatible with the protocol. Unfortunately, Bluetooth is subject to a variety of different attacks. With this in mind, we have created a software framework for hardware integrity servers that are able to verify devices in terms of the device's security implementations. It is hypothesized that if a trusted device integrity server is implemented in high-security or enterprise networks, then the network will be less vulnerable overall without a major impact on network traffic latency. Our server implementation relies on the Python programming language and primarily utilizes the LogCat Android function to inform the server of connecting devices, the Bleakscanner and BluePy libraries to scan for devices, and the PyShark library to monitor and detect potential intrusions. We concluded that the hardware server with the implemented software framework can inform clients of the type and nature of new connecting or existing devices. Additionally, the hardware server was capable of identifying truly benign devices with significant accuracy, however, it had difficulty with other device natures, particularly ones with complex manipulation.