WiFi-Based IMSI Catcher

Recommendations

Info

EAP-SIM/AKA Identities • Three basic identity types for authentication • Permanent-identity (IMSI) • Typically used initially after which temporary ids are used • Pseudonym identity • A pseudonym for the IMSI • Fast reauthentication-identity • Lower overhead re-attachment after initial exchange • Behaviour affected by peer policy • “Liberal” peer - Current default • Responds to any requests for permanent identity • “Conservative” peer – Being deployed • Only respond to requests for permanent identity when no Pseudonym identity available
EAP-SIM/AKA transport • Basic EAP is sent unencrypted • Currently EAP-SIM/AKA is not encrypted • Thus IMSI is visible (to a passive attacker) when permanent identity used for full authentication
Page 1 and 2: Department of Computer Science WiFi
Page 3 and 4: What is an IMSI? • International
Page 5 and 6: Techniques in Classic IMSI Catchers
Page 7 and 8: WiFi-Based IMSI Catcher • Feature
Page 9 and 10: Automatic configuration • iOS con
Page 11: Automatic WiFi Authentication • P
Page 15 and 16: IPsec brief overview • Internet P
Page 17 and 18: Operator Mitigations • Deprecate
Page 19: Conclusions & Future Work • Inves

WiFi-Based IMSI Catcher

Create successful ePaper yourself

Delete template?

Save as template?