A Novel Strategy for the Identification of the Operating System of Bluetooth-Enabled Devices for Security Audit

Bluetooth is one of the technologies used by devices to communicate on the IoT network. As security issues persist, devices using Bluetooth technology are advocating the need for robust security measures. The security issues arise due to misconfiguration of the device or vulnerable software or firmware used in the device. We can identify the vulnerable software or firmware in the device by performing the security audit. For example, the device using the unpatched or outdated Operating System (OS) is vulnerable to exploit and this should be identified. There have been existing efforts to identify the OS of the device using various methods, but they could not reliably identify its version. This work provides a strategy to identify the OS and version of a Bluetooth enabled device, thus identifying the vulnerable OS. Our novel strategy uses features such as Service Discovery Protocol (SDP) profile information, echo request, response percentage, flooding response time and Received Signal Strength Indicator (RSSI) to identify the OS version. The experiment conducted on various Bluetooth devices and the results prove the accuracy in identifying the OS and version. In addition, our audit tool identifies the known vulnerabilities in the OS versions, enabling users to update and fix the security issues.