Securing the Invisible Thread: A Comprehensive Analysis of BLE Tracker Security in Apple AirTags and Samsung SmartTags
Hosam Alamleh, Michael Gogarty, David Ruddell, Ali Abdullah S., AlQahtani

TL;DR
This paper provides a comprehensive analysis of security vulnerabilities in BLE tracking devices like Apple AirTags and Samsung SmartTags, highlighting cryptographic, physical, and network-related risks and their implications for user privacy and device integrity.
Contribution
It offers an in-depth examination of attack vectors, cryptographic security, and design limitations of BLE trackers, proposing insights for future security enhancements.
Findings
AirTags face spoofing due to authentication challenges
SmartTags raise concerns over cloud security and privacy
Device design constraints limit security features
Abstract
This study presents an in-depth analysis of the security landscape in Bluetooth Low Energy (BLE) tracking systems, with a particular emphasis on Apple AirTags and Samsung SmartTags, including their cryptographic frameworks. Our investigation traverses a wide spectrum of attack vectors such as physical tampering, firmware exploitation, signal spoofing, eavesdropping, jamming, app security flaws, Bluetooth security weaknesses, location spoofing, threats to owner devices, and cloud-related vulnerabilities. Moreover, we delve into the security implications of the cryptographic methods utilized in these systems. Our findings reveal that while BLE trackers like AirTags and SmartTags offer substantial utility, they also pose significant security risks. Notably, Apple's approach, which prioritizes user privacy by removing intermediaries, inadvertently leads to device authentication challenges,…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsBluetooth and Wireless Communication Technologies · Opportunistic and Delay-Tolerant Networks · User Authentication and Security Systems
