The Bluetooth connection of the nRF52832 module encounters a DoS attack

Hello,

When using two nRF52832 modules for Bluetooth connection, can it prevent Dos attack program?
We have found a situation where a malfunctioning or malicious client could perform a DoS attack on the nRF52832 pre-programmed firmware by doing the following:
- Establish a connection with the nRF52832 and never close it.
- If the nRF52832 terminates the connections reconnect immediately.
Does the programmed firmware for bluetooth connection have a suggested protection method?

(PCA10040 ,SDK 17.1.0)

Any help would be appreciated.

Best Regards,

Lulu

Parents
  • Hello,

    DoS attacks isn't a really common term in Bluetooth Low Energy, but I understand what you mean (I think). 

    In BLE we have something called pairing and bonding. Pairing is the encryption of the connection, while bonding is storing these encryption keys for later. When you bond you can use something called whitelisting when you advertise, meaning the peripheral will only allow connections from that specific device. 

    Strictly speaking, a malicious client could pretend to be the bonded device, and try to connect, but when it turns out that it doesn't have the correct encryption keys, the device will automatically disconnect. 

    To see how this is done, you can have a look at the SDK\examples\ble_peripheral\ble_app_hrs.

    Best regards,

    Edvin

Reply
  • Hello,

    DoS attacks isn't a really common term in Bluetooth Low Energy, but I understand what you mean (I think). 

    In BLE we have something called pairing and bonding. Pairing is the encryption of the connection, while bonding is storing these encryption keys for later. When you bond you can use something called whitelisting when you advertise, meaning the peripheral will only allow connections from that specific device. 

    Strictly speaking, a malicious client could pretend to be the bonded device, and try to connect, but when it turns out that it doesn't have the correct encryption keys, the device will automatically disconnect. 

    To see how this is done, you can have a look at the SDK\examples\ble_peripheral\ble_app_hrs.

    Best regards,

    Edvin

Children
No Data
Related