User location tracking attacks for LTE networks using the interworking functionality

Holtmanns, Silke; Rao, Siddharth Prakash; Oliver, Ian

doi:10.1109/ifipnetworking.2016.7497239

Cited by 26 publications

(16 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This nature is enabling the attack vectors Man-in-the-Middle (MitM), eavesdropping, Sybil, spoofing, relay, Denial of Service (DoS), and Smurf [3], [17]. Though the cellular network protocols are impervious to attacks with by design countermeasures, the novel approaches presented in [18], [19] are exposing the channels to perpetrate above attacks. The masquerading attempts are capable of instilling a UE with a compromised UE App to exploit the MEC system.…”

Section: Possible Solutionsmentioning

confidence: 99%

Realizing Multi-Access Edge Computing Feasibility: Security Perspective

Ranaweera

Jurcut

Liyanage

2019

2019 IEEE Conference on Standards for Communications and Networking (CSCN)

View full text Add to dashboard Cite

Internet of Things (IoT) and 5G are emerging technologies that prompt a mobile service platform capable of provisioning billions of communication devices which enable ubiquitous computing and ambient intelligence. These novel approaches are guaranteeing gigabit-level bandwidth, ultra-low latency and ultra-high storage capacity for their subscribers. To achieve these limitations, ETSI has introduced the paradigm of Multi-Access Edge Computing (MEC) for creating efficient data processing architecture extending the cloud computing capabilities in the Radio Access Network (RAN). Despite the gained enhancements to the mobile network, MEC is subjected to security challenges raised from the heterogeneity of IoT services, intricacies in integrating virtualization technologies, and maintaining the performance guarantees of the mobile networks (i.e. 5G). In this paper, we are identifying the probable threat vectors in a typical MEC deployment scenario that comply with the ETSI standards. We analyse the identified threat vectors and propose solutions to mitigate them.

show abstract

Section: Possible Solutionsmentioning

confidence: 99%

Realizing Multi-Access Edge Computing Feasibility: Security Perspective

Ranaweera

Jurcut

Liyanage

2019

2019 IEEE Conference on Standards for Communications and Networking (CSCN)

View full text Add to dashboard Cite

show abstract

“…Additionally, an attacker can run a precise DoS attack against a distinct user by deleting subscriber data in the VLR [56]. Attacks that are possible due to the interworking function between Diameter and SS7 are discussed by Holtmanns et al [168] and Rao et al [169]. Even Diameter has been found vulnerable and allows to intercept text messages [170].…”

Section: Cause: Insecure Inter-network Protocolsmentioning

confidence: 99%

On Security Research Towards Future Mobile Network Generations

Rupprecht

Dabrowski

Holz

et al. 2018

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

Over the last decades, numerous security and privacy issues in all three active mobile network generations have been revealed that threaten users as well as network providers. In view of the newest generation (5G) currently under development, we now have the unique opportunity to identify research directions for the next generation based on existing security and privacy issues as well as already proposed defenses. This paper aims to unify security knowledge on mobile phone networks into a comprehensive overview and to derive pressing open research questions. To achieve this systematically, we develop a methodology that categorizes known attacks by their aim, proposed defenses, underlying causes, and root causes. Further, we assess the impact and the efficacy of each attack and defense. We then apply this methodology to existing literature on attacks and defenses in all three network generations. By doing so, we identify ten causes and four root causes for attacks.Mapping the attacks to proposed defenses and suggestions for the 5G specification enables us to uncover open research questions and challenges for the development of next-generation mobile networks. The problems of unsecured pre-authentication traffic and jamming attacks exist across all three mobile generations. They should be addressed in the future, in particular to wipe out the class of downgrade attacks and, thereby, strengthen the users' privacy. Further advances are needed in the areas of inter-operator protocols as well as secure baseband implementations. Additionally, mitigations against denial-of-service attacks by smart protocol design represent an open research question.

show abstract

“…Figure 6 shows the SIM card slot. The SIM card stores data such as user identity, location and phone number, network authorization data, personal security keys, contact lists and stored text messages [2]. The operating system used in BBB is Ubuntu Linux.…”

Section: Figmentioning

confidence: 99%

“…The proposed location tracking system in this work uses latest technologies to make it user friendly. It supports IoT and adopts geo-fencing [2] techniques to alert the parents about the location of the children. The development of the proposed system is further explained in following section.…”

Section: Introductionmentioning

confidence: 99%

IoT Enabled Low Cost Wearable Device for Location and Information Tracking System

et al. 2017

View full text Add to dashboard Cite

Abstract. An internet-of-things (IoT) enabled low cost wearable device for location and information tracking system is developed to monitor and ensure the safety of the children while their parents are away either to work or abroad. This system aims to ensure human safety especially the children and efficiently initiate search and rescue in the event of emergencies. The device will notify the parents on the condition of the surroundings of the children, specifically inside the house and notify the parents if the children are outside the target area by using the application developed in the smartphone. The system uses a microcomputer called Beagle-Bone Black (BBB) as the processor while GPS and LTE technology for wireless communication. Future improvement mainly focuses on reducing the size and power consumption of the device, improving communication module, and optimizing microcomputer's specification.

show abstract

User location tracking attacks for LTE networks using the interworking functionality

Cited by 26 publications

References 1 publication

Realizing Multi-Access Edge Computing Feasibility: Security Perspective

Realizing Multi-Access Edge Computing Feasibility: Security Perspective

On Security Research Towards Future Mobile Network Generations

IoT Enabled Low Cost Wearable Device for Location and Information Tracking System

Contact Info

Product

Resources

About