IMSI Catchers and Mobile Security

More documents

Recommendations

Info

WORKS CITED [1] AT&T Tech Channel, "Testing the First Public Cell Phone Network," [Online]. Available: http://techchannel.att.com/play-video.cfm/2011/6/13/AT&T-Archives- AMPS:-coming-of-age. [Accessed 28 April 2015]. [2] W. R. Young, "AMPS: Introduction, Background, and Objectives," Bell System Technical Journal, vol. 58, no. 1, pp. 1-14, 1979. [3] D. Matuszewski, "GSM Security," Instituto de Matemática e Estatística, Universidade de São Paulo, 2012. [4] K. R. Poranki, Y. Perwej and A. Perwej, "The Level of Customer Satisfaction related to GSM in India," Research Journal of Science & IT Management, vol. 4, no. 3, pp. 30-36, 2015. [5] World Time Zone, "GSM," [Online]. Available: http://www.worldtimezone.com/gsm.html. [Accessed 28 April 2015]. [6] International Telecommunication Union, "About mobile technology and IMT-2000," 4 April 2011. [Online]. Available: https://www.itu.int/osg/spu/imt-2000/technology.html. [Accessed 28 April 2015]. [7] Engineers Garage, "Difference between 2G and 3G Technology," [Online]. Available: http://www.engineersgarage.com/contribution/difference-between-2g-and-3gtechnology#. [Accessed 28 April 2015]. [8] T. Bradley, "GSM Phone Hack FAQ: What You Should Know," PCWorld, 1 August 2010. [Online]. Available: http://www.pcworld.com/article/202317/gsm_phone_hack_faq_what_you_should_know. html. [Accessed 28 April 2016]. [9] D. Strobel, "IMSI Catcher," Ruhr-Universität Bochum, 2007. [10] 3GPP, "Specifications," [Online]. Available: http://www.3gpp.org/specifications/79- specification-numbering. [Accessed 28 April 2015]. [11] A. Biryukov, A. Shamir and D. Wagner, "Real Time Cryptanalysis of A5/1 on a PC," in Fast Software Encryption, Springer Berlin Heidelberg, 2001, pp. 1-18. [12] GSM Arena, "GPRS," [Online]. Available: http://www.gsmarena.com/glossary.php3?term=gprs. [Accessed 28 April 2015]. [13] GSM Arena, "EDGE (Enhanced Data for Global Evolution)," [Online]. Available: http://www.gsmarena.com/glossary.php3?term=edge. [Accessed 28 April 2015]. [14] BBC News, "First 3G mobiles launched in Japan," 1 October 2001. [Online]. Available: http://news.bbc.co.uk/2/hi/business/1572372.stm. [Accessed 28 April 2015]. [15] Mobithinking, "Global mobile statistics 2014 Part B: Mobile Web; mobile broadband penetration; 3G/4G subscribers and networks; mobile search," MobiForge, 2 May 2014. [Online]. Available: http://mobiforge.com/research-analysis/global-mobile-statistics- 2014-part-b-mobile-web-mobile-broadband-penetration-3g4g-subscribers-and-ne. [Accessed 28 April 2015]. [16] S. Tindal, "Telstra boosts Next G to 21Mbps," ZDNet, 8 December 2008. [Online]. Available: http://www.zdnet.com/article/telstra-boosts-next-g-to-21mbps/. [Accessed 28 April 2015]. 38
[17] I. Poole, "EV-DO Rev. B," RadioElectronics.com, [Online]. Available: http://www.radio-electronics.com/info/cellulartelecomms/3gpp2/cdma2000-1xevdo-revb.php. [Accessed 28 April 2015]. [18] K. Nohl, "Mobile Self-defense (SnoopSnitch)," Chaos Computer Security Conference 2014, 28 December 2014. [Online]. Available: http://searchnetworking.techtarget.com/definition/Signaling-System-7. [Accessed 27 April 2015]. [19] O. Dunkelman, N. Keller and A. Shamir, "A Practical-Time Attack on the A5/3 Cryptosystem Used in Third Generation GSM Telephony," IACR Cryptology ePrint Archive, p. 13, 2010. [20] U. Meyer and S. Wetzel, "On the impact of GSM encryption and man-in-the-middle attacks on the security of interoperating GSM/UMTS networks," in Personal, Indoor and Mobile Radio Communications, 2004. PIMRC 2004. 15th IEEE International Symposium on, 2004. [21] International Telecommunication Union, "Requirements related to technical performance for IMT-Advanced radio interface(s)," [Online]. Available: http://www.itu.int/pub/R- REP-M.2134-2008/en. [Accessed 28 April 2015]. [22] 3GPP, "LTE," [Online]. Available: http://www.3gpp.org/technologies/keywordsacronyms/98-lte. [Accessed 28 April 2015]. [23] Radio Electronics, "IEEE 802.16 WiMAX standards," [Online]. Available: http://www.radio-electronics.com/info/wireless/wimax/ieee-802-16-standards.php. [Accessed 28 April 2015]. [24] International Telecommunication Union, "ITU World Radiocommunication Seminar highlights future communication technologies," 6 December 2010. [Online]. Available: http://www.itu.int/net/pressoffice/press_releases/2010/48.aspx#.VT81-SFViko. [Accessed 28 April 2015]. [25] D. Murphy, "Spring to Scrap WiMAX by Late 2015," PC, 11 October 2014. [Online]. Available: http://www.pcmag.com/article2/0,2817,2470209,00.asp. [Accessed 28 April 2015]. [26] CNN Money (New York), "FBI lets suspects go to protect 'Stingray' secrets," CNN, 18 March 2015. [Online]. Available: http://money.cnn.com/2015/03/18/technology/security/police-stingray-phone-tracker/. [Accessed 28 April 2015]. [27] A. Dabrowski, M. Mulazzani, N. Pianta, E. Weippl and T. Klepp, "IMSI-catch me if you can: IMSI-catcher-catchers," in Proceedings of the 30th Annual Computer Security Applications Conference, 2014. [28] H. Federrath, "Protection in Mobile Communications," in Multilateral Security in Communications, Addison-Wesley-Longman, 1999, pp. 349-364. [29] U. Meyer and S. Wetzel, "On the impact of GSM encryption and man-in-the-middle attacks on the security of interoperating GSM/UMTS netowrks," Personal, Indoor and Mobile Radio Communications, 2004. PIMRC 2004. 15th IEEE International Symposium on, vol. 4, pp. 2876-2883, 2004. 39
Page 1: By Joseph Ooi IMSI Catchers and Mob
Page 4 and 5: 1 INTRODUCTION IMSI catchers are ra
Page 6 and 7: Figure 1: GSM World Coverage Map [5
Page 8 and 9: Equipment Identity Register (EIR):
Page 10 and 11: 2.4.3 GSM vulnerabilities At a glan
Page 12 and 13: 3 IMSI CATCHERS 3.1 Introduction At
Page 14 and 15: Figure 4: Man-in-the-middle attack
Page 16 and 17: Digital Receiver Technology, Inc. (
Page 18 and 19: emulators more than 300 times over
Page 20 and 21: 4 COUNTERMEASURES 4.1 Detection Ind
Page 22 and 23: 4.1.6 Absence of Encryption As desc
Page 24 and 25: the near future. For calls, a new k
Page 26 and 27: Blackphone+. With these subsequent
Page 28 and 29: New cell towers suddenly appearing
Page 30 and 31: It appears that gaining access to f
Page 32 and 33: However, network operators have thu
Page 34 and 35: 6 APPENDIX 6.1 List of Federal Agen
Page 36 and 37: 6.3 Data Collection App source code
Page 38 and 39: Reset count of cell JSONObjects sig
Page 42 and 43: [30] "A5/1 Decryption," [Online]. A
Page 44 and 45: manufacturer-asked?redirect=blog/na
Page 46 and 47: [82] A. Greenberg, "There’s Now a

IMSI Catchers and Mobile Security

Create successful ePaper yourself

Delete template?

Save as template?