Mitigating attacks on open functionality in SMS-capable cellular networks

Proceedings of the Annual International Conference on Mobile Computing and Networking, MOBICOM

Volumn 2006, Issue , 2006, Pages 182-193

  Traynor, Patrick ^a   Enck, William ^a   McDaniel, Patrick ^a   La Porta, Thomas ^a  

^a The Pennsylvania State University   (United States)

Author keywords

Denial of service; Open functionality; Sms; Telecommunications

Indexed keywords

CELLULAR NEURAL NETWORKS; INFORMATION SERVICES; INTERNET; SECURITY OF DATA; TELECOMMUNICATION NETWORKS; VOICE/DATA COMMUNICATION SYSTEMS;

BLOCKING RATES; DENIAL-OF-SERVICE; OPEN-FUNCTIONALITY; QUEUE MANAGEMENT;

COMPUTER CRIME;

EID: 33751040642     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1161089.1161111     Document Type: Conference Paper

References (37)

1. The National Strategy to Secure Cyberspace, http://www.us-cert.gov/ reading_room/cyberapace_st.rategy.pdf. February 2003.
2. Young prefer texting to calls'. http://news.bbc.co.uk/2/hi/business/ 2985072.stm, June 2003.
3. 3rd Generation Partnership Project Physical layer on the radio path; General description, Technical Report 3GPP TS 04.18 v8.26.0.
4. 3rd Generation Partnership Project Physical layer on the radio path; General description, Technical Report 3GPP TS 05.01 v8.9.0.
5. A. Acampora and M. Naghshineh. Control and Quality-of-Service Provisioning in High- Speed Microcellular Networks. IEEE Personal Communications, 1(2):36-43, 1994.
6. S. Berinato. Online Extortion - How a Bookmaker and a Whiz Kid Took On an Extortionist and Won. CSO Online, May 2005.
7. B. Branden, D. Clark, J. Crowcroft, B. Davie, S. Deering, D. Estrin, S. Floyd, V. Jacobson, G. Minshall, C. Partridge, L. Peterson, K. Ramakrishnan, S. Shenker, J. Wroclawski, and L. Zhang. RFC 2309 - Recommendations on Queue Management and congestion Avoidance in the Internet, rfc2309.txt, 1998.
8. S. Byers, A. Rubin, and D. Kormann. Defending Against an Internet-based Attack on the Physical World. ACM Transactions on Internet Technology (TOIT), 4(3):239-254, August 2004.
9. A. Demers, S. Keshav, and S. Shenker. Analysis and Simulation of a Fair Queueing Algorithm. In Proceedings of ACM SIGCOMM, pages 3-12, 1989.
10. L. Dryburgh and J. Hewett. Signaling System No. 7: The Role of SS7. http://www.ciscopeess.com/articles/acticle.asp?p=330805\&r1=1, 2004.
11. C. M. Ellison and B. Schneier. Ten Risks of PKI: What You're Not Being Told About Public-Key Infrastructure. Computer Security Journal, 16(1):1-7, 1999.
12. W. Enck, P. Traynor, T. F. La Porta, and P. McDaniel. Exploiting Open Functionality in SMS-Capable Cellular Networks. In Proceedings of the ACM Conference on Computer and Communication Security (CCS), November 2003.
13. S. Floyd and V. Jacobson. Random Early Detection Gateways for Congestion Avoidance. IEEE/ACM Transactions on Networking, 1(4):397-413, August 1993.
14. C. Haney. NAI is latest DoS victim, http://security.itworld.com/4339/ NWW116617_02-05-2001/page_1.html, February 5 2001.
15. J. Hedden. Math::Random::MT::Auto - Auto-seeded Mersenne Twister PRNGs. http://search.cpan.org/~jdhedden/Math-Random-MT-Auto-5.01/lib/Math/Random/MT/ Auto.pm.Version 5.01.
16. J. Ioannidis and S. Bellovin. Implementing Pushback: Router-Based Defense Against DDoS Attacks. In Proceedings of Network and Distributed System Security Symposium (NDSS), February 2002.
17. R. Jain. Myths about congestion management in high speed networks. Internetworking: Research and Experience, 3:101-113, 1992.
18. G. Kunene. Perimeter Security Ain't What It Used to Be, Experts Say. DevX.com, 2004.
19. Lucent Technologies. 5ESS(R) 2000 - Switch Mobile Switching Centre (MSC) for Service Providers. http://www.lucent.com/products/aolution/0, ,CTID+2019-STID+10048-SOID+824-LOCL+1, 00.html, 2006.
20. C. Luders and R. Haferbeck. The Performance of the GSM Random Access Procedure. In Vehicular Technology Conference, pages 1165-1169, June 1994.
21. K. Maney. Surge in text messaging makes cell operators :-). July 27 2003.
22. Mike Grenville. Operators: Celebration Messages Overload SMS Network. http://www.160characters.org/news.php?action=view&nid=819, November 2003.
23. J. Mirkovic and P. Reiher. A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms. ACM SIGCOMM Computer Communication Review, 34(2):39-53, 2004.
24. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. Inside the Slammer Worm. IEEE Security and Privacy, 1(4), July 2003.
25. Motorola Corporation, Motorola GSM Solutions, www.motorola.com/ networkoperators/pdfs/GSM-Solutions.pdf, 2006.
26. J. B. Nagle, On Packet Switches with Infinite Storage, IEEE Transactions on Communications, COM-35(4), April 1987.
27. National Communications System. SMS over SS7. Technical Report Technical Information Bulletin 03-2 (NCS TIB 03-2), December 2003.
28. Nyquetek, Inc. Wireless Priority Service for National Security, http://wireless.fcc.gov/releases/da051650PublicUse.pdf, 2002.
29. R. Ramjee, R. Nagarajan, and D. F. Towsley. On optimal call admission control in cellular networks. In Proceedings of the IEEE Conference on Computer Communications (INFOCOM), pages 43-30, 1996.
30. R. F. Rey, editor. Engineering and Operations in the Bell System. Bell Telephone Laboratories, INC, second edition, 1984.
31. M. Richtel. Yahoo Attributes a Lengthy Service Failure to an Attack. The New York Times, February 8 2000.
32. Roam Secure. 17 Counties & Cities in Washington, DC Region deploy Roam Secure Alert Network, http://www.roamsecure.net/story.php?news.id=52, September 2003.
33. P. Roberts, Al-Jazeera Sites Hit With Denial-of-Service Attacks. PCWorld Magazine, March 26 2003.
34. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proceedings of ACM SIGCOMM, pages 295-306, October 2000.
35. M. Schwartz. . In Telecommunication Networks - Protocols, Modeling and Analysis, Addison-Wesley Publishing Company, 1987.
36. Tamara Neale. VDOT LAUNCHES NEW 511 EMAIL ALERT SERVICE. http://www.virginiadot.org/infoservice/news/newsrelease.asp?ID=CO-511-06, February 2000.
37. B. Waters, A. Juels, J. Halderman, and E. Felten. New client puzzle outsourcing techniques for DoS resistance. In Proceedings of ACM CCS'04, pages 246-256, 2004.