P.K. SHARMA

Cyber security intelligence, AI governance, practitioner analysis

Wireless and radio

Bluetooth device (BT): what it is and how it is attacked

Something that connects to a phone or a computer over a short-range radio link: a headset, a keyboard, a car.

Also known as

  • BT
  • Bluetooth Low Energy
  • BLE
  • pairing
  • wireless keyboard

Typing any of them into the editor finds this object.

Why it matters on a security diagram

It is a network of its own that no firewall sees, and the devices on it frequently hold keyboard, microphone or file access to the machine they pair with.

How it gets attacked, and what reduces it

How it gets attacked

  • Pairing left open, or accepted on a prompt nobody read
  • Input devices that can type, which makes them a route into the machine rather than an accessory on it
  • Pairings kept indefinitely from hire cars, hotels and former colleagues' equipment

What reduces it

  • Make pairing a deliberate act at a known time in a known place, not a standing state
  • Treat a wireless keyboard as an interface into the machine, not an accessory on it
  • Put clearing pairings into the travel routine and the leaver process

Where it sits

Group
Wireless and radio · The parts of the network that travel through the air, and how far they reach.
Whose side, by default
Ours · Belongs to the organisation the diagram is about.
Catalogue identifier
bluetooth-device

Reviewed . CC BY 4.0.

Others in wireless and radio

The wireless and radio group lists all 11 of them side by side.

Bluetooth device on your own diagram

Open the editor, press N, and type BT. The object is placed and connected to whatever was selected, and Tab adds the next one already joined to it. Nothing is uploaded: the page is served with a Content Security Policy that forbids the browser from making any outbound request at all.

Open the diagram maker