On attack causality in internet-connected cellular networks

16th USENIX Security Symposium

Volumn , Issue , 2007, Pages 307-322

  Traynor, Patrick ^a   McDaniel, Patrick ^a   Porta, Thomas La ^a  

^a PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BANDWIDTH; DENIAL-OF-SERVICE ATTACK; MOBILE TELECOMMUNICATION SYSTEMS; NETWORK SECURITY; PHILOSOPHICAL ASPECTS; WIRELESS NETWORKS;

AVAILABLE BANDWIDTH; CELLULAR NETWORK; DATA-COMMUNICATION; DESIGN PHILOSOPHY; MALICIOUS TRAFFIC; METROPOLITAN AREA; TELECOMMUNICATIONS NETWORKS; VULNERABILITES;

MOBILE SECURITY;

EID: 84871061297     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (52)

1. 3G Newsroom. High speed mobile data driving uptake of PC cards. http://www.3gnewsroom.com/3g_news/mar_06/news_6855.shtml, 2006.
2. 3rd Generation Partnership Project. General Packet Radio Service (GPRS); Mobile Station (MS) - Base Station System (BSS) interface; Radio Link Control/Medium Access Control (RLC/MAC) protocol. Technical Report 3GPP TS 44.060 v7.6.0.
3. 3rd Generation Partnership Project. General Packet Radio Service (GPRS); Overall description of GPRS radio interface; Stage 2. Technical Report 3GPP TS 03.64 v8.12.0.
4. 3rd Generation Partnership Project. GSM/EDGE Radio Access Network; General PAcket Radio Service (GPRS); Overall description of the GPRS radio interface; Stage 2. Technical Report 3GPP TS 43.064 v7.2.0.
5. 3rd Generation Partnership Project. Physical layer on the radio path; General description. Technical Report 3GPP TS 04.18 v8.26.0.
6. 3rd Generation Partnership Project. Technical realization of the Short Message Service (SMS). Technical Report 3GPP TS 03.40 v7.5.0.
7. 3rd Generation Partnership Project. Technical Specification Group GSM/EDGE Radio Access Network; Multiplexing and multiple access on the radio path. Technical Report 3GPP TS 05.02 v8.11.0.
8. 3rd Generation Partnership Project. Technical Specification Group Radio Access Network; Medium Access Control (MAC) protocol specification (Release 7). Technical Report 3GPP TS 25.321 v7.2.0.
9. A. Abutaleb and V. O. Li. Paging strategy optimization in personal communication systems. Wireless Networks, 3(3):195–204, 1997.
10. S. Berinato. Online Extortion – How a Bookmaker and a Whiz Kid Took On an Extortionist and Won. CSO Online, May 2005.
11. S. Bhattacharjee, K. Calvert, and E. Zegura. Active Networking and the End-to-End Argument. In Proceedings of the IEEE International Conference on Network Protocols (ICNP), 1997.
12. M. Blumenthal and D. Clark. Rethinking the design of the Internet: the end-to-end arguments vs. the brave new world. ACM Transactions on Internet Technology (TOIT), 1(1):70–109, 2001.
13. S. Byers, A. Rubin, and D. Kormann. Defending Against an Internet-based Attack on the Physical World. ACM Transactions on Internet Technology (TOIT), 4(3):239–254, August 2004.
14. Cingular Wireless. Cingular Wireless. http://www.cingular.com/, 2007.
15. D. Clark, J. Wroslawski, K. Sollins, and R. Braden. Tussle in Cyberspace: Defining Tomorrow’s Internet. In Proceedings of ACM SIGCOMM, 2002.
16. W. Enck, P. Traynor, P. McDaniel, and T. F. La Porta. Exploiting Open Functionality in SMS-Capable Cellular Networks. In Proceedings of the ACM Conference on Computer and Communication Security (CCS), November 2005.
17. R. Farrow. DNS Root Servers: Protecting the Internet. Network Magazine, 2003.
18. M. Grenville. Stats & Research: 3GSM Visitors Low Users Of Mobile Data. http://www.160characters.org/news.php?action=view&nid=1950, 2006.
19. C. Haney. NAI is latest DoS victim. http://security.itworld.com/4339/NWW116617_02-05-2001/page_1.html, February 5 2001.
20. J. Hedden. Math::Random::MT::Auto - Auto-seeded Mersenne Twister PRNGs. http://search.cpan.org/~jdhedden/Math-Random-MT-Auto-5.01/lib/Math/Random/MT/Auto.pm. Version 5.01.
21. Hewlett-Packard. HP to Drive Mobile Connectivity Around the Globe with Vodafone. http://www.hp.com/hpinfo/newsroom/press/2006/060706b.html, 2006.
22. J. Ioannidis and S. Bellovin. Implementing Push-back: Router-Based Defense Against DDoS Attacks. In Proceedings of Network and Distributed System Security Symposium (NDSS), February 2002.
23. A. Juels and J. G. Brainard. Client Puzzles: A Cryptographic Countermeasure Against Connection Depletion Attacks. In Proceedings of Network and Distributed System Security Symposium (NDSS), 1999.
24. A. Keromytis, V. Misra, and D. Rubenstein. SOS: Secure Overlay Services. In Proceedings of ACM SIGCOMM, 2002.
25. B. Krishnamachari, R.-H. Gau, S. B. Wicker, and Z. J. Haas. Optimal sequential paging in cellular wireless networks. Wireless Networks, 10(2):121–131, 2004.
26. C. Lepschy, G. Minerva, D. Minervini, and F. Pascali. GSM-GPRS radio access dimensioning. In IEEE Technology Conference (VTC Fall), 2001.
27. C. Luders and R. Haferbeck. The Performance of the GSM Random Access Procedure. In Vehicular Technology Conference (VTC), pages 1165–1169, June 1994.
28. K. Maney. Surge in text messaging makes cell operators:-). http://www.usatoday.com/money/2005-07-27-text-messaging_x.htm, July 27 2005.
29. J. Mirkovic and P. Reiher. A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms. ACM SIGCOMM Computer Communication Review, 34(2):39–53, 2004.
30. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. Inside the Slammer Worm. IEEE Security and Privacy, 1(4), July 2003.
31. T. Moors. A critical review of’End-to-end arguments in system design’. In Proceedings of the IEEE International Conference on Communications (ICC), 2002.
32. C. Mulliner and G. Vigna. Vulnerability Analysis of MMS User Agents. In Proceedings of the Annual Computer Security Applications Conference (AC-SAC), 2006.
33. R. Mullner, C. F. Ball, K. Ivanov, and H. Winkler. Advanced quality of service strategies for GERAN mobile radio networks. In IEEE Symposium on Personal, Indoor and Mobile Radio Communications (PIMRC), 2004.
34. J. Nagle. RFC 896 - Congestion Control in IP/TCP Internetworks. http://www.ietf.org/rfc/rfc896.txt, 1984.
35. National Communications System. SMS over SS7. Technical Report Technical Information Bulletin 03-2 (NCS TIB 03-2), December 2003.
36. R. Racic, D. Ma, and H. Chen. Exploiting MMS Vulnerabilities to Stealthily Exhaust Mobile Phone’s Battery. In Proceedings of the IEEE International Conference on Security and Privacy in Communication Networks (SecureComm), 2006.
37. M. Reardon. ThinkPads to support Cingular 3G technology. http://news.com.com/ThinkPads+to+support+Cingular+3G+technology/2100-1034_3-6017968.html, 2006.
38. D. Reed, J. Saltzer, and D. Clark. Active Networking and End-To-End Arguments. IEEE Network, 12(3):67–71, May/June 1998.
39. F. Ricciato. Unwanted Traffic in 3G Networks. In ACM SIGCOMM Computer Communication Review, 2006.
40. M. Richtel. Yahoo Attributes a Lengthy Service Failure to an Attack. The New York Times, February 8 2000.
41. P. Roberts. Al-Jazeera Sites Hit With Denial-of-Service Attacks. PCWorld Magazine, March 26 2003.
42. J. H. Saltzer, D. P. Reed, and D. D. Clark. End-To-End Arguments In System Design. ACM Transactions on Computer Systems, 2(4):277–288, 1984.
43. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proceedings of ACM SIGCOMM, pages 295–306, October 2000.
44. J. Serror, H. Zang, and J. C. Bolot. Impact of paging channel overloads or attacks on a cellular network. In Proceedings of the ACM Workshop on Wireless Security (WiSe), 2006.
45. S. Staniford, V. Paxson, and N. Weaver. How to 0wn the Internet in Your Spare Time. In Usenix Security Symposium, pages 149–167, 2002.
46. A. Stavrou, A. Keromytis, J. Nieh, V. Misra, and D. Rubenstein. MOVE: An End-to-End Solution To Network Denial of Service. In Proceedings of Network and Distributed System Security Symposium (NDSS), 2005.
47. P. Traynor, W. Enck, P. McDaniel, and T. La Porta. Mitigating Attacks on Open Functionality in SMS-Capable Cellular Networks. In Proceedings of the Twelfth Annual ACM International Conference on Mobile Computing and Networking (MobiCom), 2006.
48. United States Census Bureau. United States Census 2000. http://www.census.gov/main/www/cen2000.html, 2000.
49. L. von Ahn, M. Blum, N. Hopper, and J. Langford. CAPTCHA: Using hard AI problems for security. In Proceedings of Eurocrypt, pages 294–311, 2003.
50. L. von Ahn, M. Blum, and J. Langford. Telling humans and computers apart automatically. Communications of the ACM, 47(2):56–60, 2004.
51. J. Wang, X. Liu, and A. A. Chien. Empirical Study of Tolerating Denial-of-Service Attacks with a Proxy Network. In Proceedings of the USENIX Security Symposium, 2005.
52. B. Waters, A. Juels, J. Halderman, and E. Felten. New client puzzle outsourcing techniques for DoS resistance. In Proceedings of ACM Conference on Computer and Communications Security (CCS), pages 246–256, 2004.