Auditing Windows Bluetooth Security at the Application Layer
摘要
This study investigates security risks associated with the lack of user visibility and control over Bluetooth device pairings on Windows systems. Of significance is the accumulation of unused pairings over time and differences in how Windows manages Bluetooth Low-Energy connections compared with Bluetooth Classic. To address this issue, the researchers have developed the Bluetooth Device Security Auditor (BDSA) using Windows PowerShell. BDSA is a prototype application that both monitors real-time device connections and analyses Bluetooth device pairing information stored in the Windows registry. Along with basic device management functionality, BDSA assigns a Security Risk Rating ranging from ‘Lowest’ to ‘Severe’ for each device, enhancing both user visibility and control over Bluetooth device pairings. However, BDSA is limited in its device management functionality, particularly regarding BLE devices. This study demonstrates how tools such as BDSA can help improve user visibility and control over Bluetooth device connections on Windows systems, and highlights the need for further development of more robust and comprehensive Bluetooth security auditing software.