Security for smart mobile networks: The NEMESYS approach

Abstract

Abstract-The growing popularity of smart mobile devices such as smartphones and tablets has made them an attractive target for cyber-criminals, resulting in a rapidly growing and evolving mobile threat as attackers experiment with new business models by targeting mobile users. With the emergence of the first large-scale mobile botnets, the core network has also become vulnerable to distributed denial-of-service attacks such as the signaling attack. Furthermore, complementary access methods such as Wi-Fi and femtocells introduce additional vulnerabilities for the mobile users as well as the core network. In this paper, we present the NEMESYS approach to smart mobile network security. The goal of the NEMESYS project is to develop novel security technologies for seamless service provisioning in the smart mobile ecosystem, and to improve mobile network security through a better understanding of the threat landscape. To this purpose, NEMESYS will collect and analyze information about the nature of cyber-attacks targeting smart mobile devices and the core network so that appropriate counter-measures can be taken. We are developing a data collection infrastructure that incorporates virtualized mobile honeypots and honeyclients in order to gather, detect and provide early warning of mobile attacks and understand the modus operandi of cyber-criminals that target mobile devices. By correlating the extracted information with known attack patterns from wireline networks, we plan to reveal and identify the possible shift in the way that cyber-criminals launch attacks against smart mobile devices.

G-Networks and Their Applications to Machine Learning, Energy Packet Networks and Routing: Introduction to the Special Issue

“…Network worms were also considered, and CPN was used to reroute the users' traffic to avoid the infected nodes (Sakellari and Gelenbe [176], Sakellari, Hey, and Gelenbe [177]). Further research on network security can be found in (Gelenbe et al [87], Gorbil et al [151], Yu et al [185]). …”

3GPP LTE-Assisted Wi-Fi-Direct: Trial Implementation of Live D2D Technology

“…The original purpose of the aforementioned firewall policies could have been prevention of undesired incoming connections and P2P data transfer between different mobile network users. As a result, they deny any and all P2P connectivity over cellular networks [21].…”

“…The original purpose of the aforementioned firewall policies could have been prevention of undesired incoming connections and P2P data transfer between different mobile network users. As a result, they deny any and all P2P connectivity over cellular networks [21].For the purposes of our network-assisted D2D trial, we needed to circumvent the firewall by making the D2D server open direct communication paths for selected connections whenever necessary. In our case, implementing such functionality has been fairly straightforward, since the D2D server can reconfigure the firewall on a per-connection basis.…”

Android Malware Classification by Applying Online Machine Learning

“…And, a detection model is trained with the information gathered via the communication among components. A security framework has been deployed by an European project called NEMESYS for gathering and analyzing information about the nature of cyber-attacks targeting mobile devices and presented a model-based approach for detection of anomalies [9][10][11].…”