Bluetooth Worms: Models, Dynamics, and Defense Implications

Guanhua Yan; Stephan Eidenbenz 

Computer Security Applications Conference, 2006. ACSAC '06. 22nd Annual,
Dec. 2006

Pages:245-256

Abstract: The occurrences of mobile worms like Cabir, Mabir and CommWarrior
have created growing concerns over the security of data stored on mobile
devices such as cell phones and PDAs. These worms have in common that they
all use Bluetooth communication as their infection channel. In order to
prepare effective defense strategies against such worms, we study the
nature, characteristics, and spreading dynamics of Bluetooth worms in the
safe environment of simulation. Our key findings are: (i) mobility may not
boost the Bluetooth worm propagation; instead, link instability owing to it
has negative impact on the worm spreading speed; (ii) the inherent capacity
constraints imposed by the wireless channel (e.g. interference) and the
specifics of the Bluetooth protocol can significantly slow down the
Bluetooth worm propagation; (iii) intelligently designed worms can improve
their propagation speed to a noticeable degree by strategically selecting
worm model parameters or exploiting out-of-band propagation capabilities.

URL:
http://ieeexplore.ieee.org.ezproxy.auckland.ac.nz/iel5/4041138/4041139/04041
171.pdf?isnumber=4041139&prod=STD&arnumber=4041171&arnumber=4041171&arSt=245
&ared=256&arAuthor=Guanhua+Yan%3B+Stephan+Eidenbenz