Authors:
Aaron Hunter
and
Kenneth C. K. Wong
Affiliation:
BC Institute of Technology, Canada
Keyword(s):
Decoy Systems, Intrusion Detection and Response, Low Energy Bluetooth.
Related
Ontology
Subjects/Areas/Topics:
Internet Technology
;
Intrusion Detection and Response
;
Web Information Systems and Technologies
Abstract:
We propose an architecture for a decoy system that uses low energy Bluetooth devices for communication.
We argue that these devices can be effective not only due to low power consumption, but also because an
attacker can not detect the signal from a distance. As such, information sent from the decoy system to a
monitoring system is unlikely to be noticed by an attacker. We describe a physical system that we have
developed for testing and experimentation with this approach. The results so far are promising both in terms
of the effectiveness of monitoring, and also with respect to the hidden communication. Moreover, while the
decoy system is high-interaction, it does not lead to any system interruption on the main system. Our system
is novel in that it is developed from scratch, using low-cost hardware in a manner that accurately captures
the way communication would happen in a real system. We discuss the advantages and limitations of our
framework, and discuss possible approa
ches to establishing formal proofs of security for this kind of physical
system.
(More)