Assessing Cybersecurity Risks in BLE-based Asset Management Systems.

In the current era of digital transformation, asset management systems using beacons are being applied across various domains, allowing for the detection of individuals or objects within a building. While the impact of a compromised system may not be significant in certain domains, in others it can pose risks and potentially lead to the loss of human lives or other significant consequences. This paper presents a risk assessment of cyber-attacks targeting Bluetooth Low Energy (BLE) devices in two specific scenarios: healthcare and industry. The aim is to estimate the attacks that pose the greatest risk in each application area. Results show that, risk levels vary depending on the targeted scenario. Replay, battery exhaustion, jamming, fuzzing, blue-smack, and physical hijacking attacks are the ones that pose the greatest risk levels in the considered scenarios.