IMSI Catchers and Mobile Security

More documents

Recommendations

Info

manufacturer-asked?redirect=blog/national-security-technology-and-liberty/police-hideuse-cell-phone-tracker-courts-because. [Accessed 28 April 2015]. [57] K. Zetter, "NY Cops Used ‘Stingray’ Spy Tool 46 Times Without Warrant," Wired, 7 April 2015. [Online]. Available: http://www.wired.com/2015/04/ny-cops-used-stingrayspy-tool-46-times-without-warrant/. [Accessed 28 April 2015]. [58] C. Farivar, "Non Disclosure Agreement," Ars Technica, [Online]. Available: https://www.documentcloud.org/documents/1727748-non-disclosureagreement.html#document/p3/a212440. [Accessed 28 April 2015]. [59] J. Glenza and N. Woolf, "Stingray spying: FBI's secret deal with police hides phone dragnet from courts," The Guardian, 10 April 2015. [Online]. Available: http://www.theguardian.com/us-news/2015/apr/10/stingray-spying-fbi-phone-dragnetpolice. [Accessed 28 April 2015]. [60] M. Geuss, "Cops hid use of phone tracking tech in court documents at feds’ request," Ars Technica, 20 June 2014. [Online]. Available: http://arstechnica.com/techpolicy/2014/06/19/cops-hid-use-of-phone-tracking-tech-in-court-documents-at-fedsrequest/. [Accessed 28 April 2015]. [61] J. Stone, "Washington Stingray Bill Demands Police Obtain Warrant Before Deploying Phone Tracker," International Business Times, 27 April 2015. [Online]. Available: http://www.ibtimes.com/washington-stingray-bill-demands-police-obtain-warrantdeploying-phone-tracker-1898166. [Accessed 28 April 2015]. [62] C. Farivar, "California bill requires warrant for stingray use," Ars Technica, 25 March 2015. [Online]. Available: http://arstechnica.com/tech-policy/2015/03/25/california-billrequires-warrant-for-stingray-use/. [Accessed 28 April 2015]. [63] S. Nelson, "Utah May Ban Warrantless Use of 'Stingray' Devices," US News, 4 March 2014. [Online]. Available: http://www.usnews.com/news/articles/2014/03/04/utah-mayban-warrantless-use-of-stingray-devices. [Accessed 28 April 2015]. [64] Cushing, Tim, "FBI Says It Has A Warrant Requirement For Stingray Use; Has Exception Broad Enough To Ensure It Never Needs A Warrant," Tech Dirt, 6 January 2015. [Online]. Available: https://www.techdirt.com/articles/20150105/12590129600/fbi-says-it-has-warrantrequirement-stingray-use-has-exception-broad-enough-to-ensure-it-never-needswarrant.shtml. [Accessed 28 April 2015]. [65] H. Murphy, "The New York Times," The New York Times, 22 January 2014. [Online]. Available: http://thelede.blogs.nytimes.com/2014/01/22/ominous-text-message-sent-toprotesters-in-kiev-sends-chills-around-theinternet/?action=click&contentCollection=Europe&module=RelatedCoverage&region= Marginalia&pgtype=article&_r=3&gwh=66F66BFA4C84D20C5C976374F4. [Accessed 27 April 2015]. [66] M. Rachkevych, "Kyiv Post," Kyiv Post, 21 January 2014. [Online]. Available: http://www.kyivpost.com/content/kyiv/mobile-phone-providers-deny-sending-textmessages-to-euromaidan-participants-335349.html. [Accessed 27 April 2015]. [67] L. Franceschi-Bicchierai, "Mashable," Mashable, 21 January 2014. [Online]. Available: http://mashable.com/2014/01/21/kiev-protesters-text-message/. [Accessed 27 April 2015]. 42
[68] C. Timberg, "Feds to study illegal use of spy gear," The Washington Post, 11 August 2014. [Online]. Available: http://www.washingtonpost.com/blogs/theswitch/wp/2014/08/11/feds-to-study-illegal-use-of-spy-gear/. [Accessed 28 April 2015]. [69] Federal Communications Commission, "CDBS Public Access," Federal Communications Commission, [Online]. Available: http://licensing.fcc.gov/prod/cdbs/pubacc/prod/cdbs_pa.htm. [Accessed 27 April 2015]. [70] Ability Computers and Software Industries Ltd., "3G Interception," [Online]. Available: https://wikileaks.org/spyfiles/files/0/80_ABILITY-GSM_3G_Intercept.pdf. [Accessed 27 April 2015]. [71] Gamma Group, "3G-GSM Interception & Target Location," [Online]. Available: https://info.publicintelligence.net/Gamma-GSM.pdf. [Accessed 27 April 2015]. [72] SecUpwN, "Changing LAC on same CID #91," [Online]. Available: https://github.com/SecUpwN/Android-IMSI-Catcher-Detector/issues/91. [Accessed 28 April 2015]. [73] GSMK, "GSMK CryptoPhone," [Online]. Available: http://www.cryptophone.de/en/. [Accessed 28 April 2015]. [74] A. Boxall, "Paranoid much? Demand for secure CryptoPhone is so high, company can’t keep up," Digital Trends, 20 March 2014. [Online]. Available: http://www.digitaltrends.com/mobile/cryptophone-demand-exceeds-supply/. [Accessed 28 April 2015]. [75] K. Zetter, "Phone Firewall Identifies Rogue Cell Towers Trying to Intercept Your Calls," 3 September 2014. [Online]. Available: http://www.wired.com/2014/09/cryptophonefirewall-identifies-rogue-cell-towers/. [Accessed 28 April 2015]. [76] XCell Technologies, "XCell Technologies," [Online]. Available: http://xcellular.com/index.html. [Accessed 27 April 2015]. [77] SGP Technologies, "Blackphone," [Online]. Available: https://blackphone.ch/. [Accessed 28 April 2015]. [78] S. Knight, "Privacy-centric Blackphone now shipping to pre-order customers," Techspot, 30 June 2014. [Online]. Available: http://www.techspot.com/news/57266-privacycentric-blackphone-now-shipping-to-pre-order-customers.html. [Accessed 28 April 2015]. [79] T. Maytom, "Shipping Starts on Blackphone, World’s First Privacy-Optimised Smartphone," Mobile Marketing, 30 June 2014. [Online]. Available: http://mobilemarketingmagazine.com/shipping-starts-on-blackphone-first-privacyoptimised-smartphone. [Accessed 28 April 2015]. [80] J. Kopstein, "A Phone for the Age of Snowden," New Yorker, 30 January 2014. [Online]. Available: http://www.newyorker.com/tech/elements/a-phone-for-the-age-ofsnowden. [Accessed 28 April 2015]. [81] L. Armasu, "Fake Cell Towers Could Be Attacking Your Cellphone Up To 80-90 Times Per Hour," Tom's Hardware, 2 September 2014. [Online]. Available: http://www.tomshardware.com/news/cryptophone-gsmk-esd-basebandfirewall,27585.html. [Accessed 28 April 2015]. 43
Page 1: By Joseph Ooi IMSI Catchers and Mob
Page 4 and 5: 1 INTRODUCTION IMSI catchers are ra
Page 6 and 7: Figure 1: GSM World Coverage Map [5
Page 8 and 9: Equipment Identity Register (EIR):
Page 10 and 11: 2.4.3 GSM vulnerabilities At a glan
Page 12 and 13: 3 IMSI CATCHERS 3.1 Introduction At
Page 14 and 15: Figure 4: Man-in-the-middle attack
Page 16 and 17: Digital Receiver Technology, Inc. (
Page 18 and 19: emulators more than 300 times over
Page 20 and 21: 4 COUNTERMEASURES 4.1 Detection Ind
Page 22 and 23: 4.1.6 Absence of Encryption As desc
Page 24 and 25: the near future. For calls, a new k
Page 26 and 27: Blackphone+. With these subsequent
Page 28 and 29: New cell towers suddenly appearing
Page 30 and 31: It appears that gaining access to f
Page 32 and 33: However, network operators have thu
Page 34 and 35: 6 APPENDIX 6.1 List of Federal Agen
Page 36 and 37: 6.3 Data Collection App source code
Page 38 and 39: Reset count of cell JSONObjects sig
Page 40 and 41: WORKS CITED [1] AT&T Tech Channel,
Page 42 and 43: [30] "A5/1 Decryption," [Online]. A
Page 46 and 47: [82] A. Greenberg, "There’s Now a

IMSI Catchers and Mobile Security

Create successful ePaper yourself

Delete template?

Save as template?