A denial of service attack to UMTS networks using SIM-less devices

IEEE Transactions on Dependable and Secure Computing

Volumn 11, Issue 3, 2014, Pages 280-291

  Merlo, Alessio ^a,b   Migliardi, Mauro ^c   Gobbo, Nicola ^c   Palmieri, Francesco ^d   Castiglione, Aniello ^e  

^a UNIVERSITY OF GENOA   (Italy)

^b Faculty of Engineering   (Italy)

^c UNIVERSITY OF PADOVA   (Italy)

^d SECOND UNIVERSITY OF NAPLES   (Italy)

^e UNIVERSITY OF SALERNO   (Italy)

Author keywords

Cellular networks security; Critical infrastructures; DoS attack; HLR; Mobile security; UMTS

Indexed keywords

3G MOBILE COMMUNICATION SYSTEMS; AUTHENTICATION; CRITICAL INFRASTRUCTURES; DENIAL-OF-SERVICE ATTACK; MOBILE TELECOMMUNICATION SYSTEMS; NETWORK SECURITY; WIRELESS NETWORKS;

ATTACHMENT PROCESS; CELLULAR NETWORK; NETWORK SERVICES; PERFORMANCE BOTTLENECKS; SECURITY ELEMENTS; SERVICE DEGRADATION; SUBSCRIBER IDENTITY MODULE; UMTS NETWORKS;

MOBILE SECURITY;

EID: 84904003665     PISSN: 15455971     EISSN: None     Source Type: Journal    
DOI: 10.1109/TDSC.2014.2315198     Document Type: Article

References (27)

1. S. Capkun, M. Cagalj, R. Rengaswamy, I. Tsigkogiannis, J.-P. Hubaux, and M. Srivastava, "Integrity codes: Message integrity protection and authentication over insecure channels," IEEE Trans. Dependable Secure Comput., vol. 5, no. 4, pp. 208-223, Oct.-Dec. 2008.
2. Y.-L. Huang, F.-Y. Leu, and K.-C. Wei, "A secure communication over wireless environments by using a data connection core," Math. Comput. Modelling, vol. 58, no. 5, pp. 1459-1474, 2013.
3. A. Castiglione, G. Cattaneo, A. De Santis, F. Petagna, and U. Ferraro Petrillo. 2006. "SPEECH: Secure personal end-to-end communication with handheld," in Proc. ISSE Securing Electronic Busines Processes. Vieweg, pp. 287-297, [Online]. Available:http://dx.doi.org/10.1007/978-3-8348-9195-2-31
4. Y.-L. Huang, F.-Y. Leu, I. You, Y.-K. Sun, and C.-C. Chu. (2014). A secure wireless communication system integrating RSA, Diffie-Hellman PKDS, intelligent protection-key chains and a Data Connection Core in a 4G environment. J. Supercomput. [Online]. 67(3), pp. 635-652. Available:http://dx. doi.org/10.1007/s11227-013-0958-z
5. B. Blanchet, "A computationally sound mechanized prover for security protocols," IEEE Trans. Dependable Secure Comput., vol. 5, no. 4, pp. 193-207, Oct.-Dec. 2008.
6. P. Traynor, M. Lin, M. Ongtang, V. Rao, T. Jaeger, P. McDaniel, and T. La Porta, "On cellular botNets: Measuring the impact of malicious devices on a cellular network core," in Proc. 16th ACM Conf. Comput. Commun. Security, 2009, pp. 223-234.
7. (2013). United States Department of Homeland Security. NIPP 2013: National Infrastructure Protection Plan 2013: Partnering for Critical Infrastructure Security and Resilience. [Online]. Available: http://www.dhs.gov/publication/nipp-2013-partnering-critical-infrastructure- security-and-resilience
8. (2008). European Commission, European Programme for Critical Infrastructure Protection (EPCIP). [Online]. Available: http://ec.europa.eu/dgs/ home-affairs/what-we-do/policies/crisis-and-terrorism/critical-infrastructure/ index-en.htm
9. V. Viduto, C. Maple, and W. Huang, "Managing threats by the use of visualisation techniques," Int. J. Space-Based Situated Comput., vol. 1, no. 2/3, pp. 204-212, 2011.
10. A. Armando, A. Merlo, M. Migliardi, and L. Verderame, "Breaking and fixing the android launching flow," Comput. Security, vol. 39, pp. 104-115, 2013.
11. A. Mylonas, S. Dritsas, B. Tsoumas, and D. Gritzalis, "Smartphone security evaluation - the malware attack case," in Proc. Int. Conf. Security Cryptography, 2011, pp. 25-36.
12. K. Derr, "Nightmares with mobile devices are just around the corner!" in Proc. IEEE Int. Conf. Portable Inform. Dev., 2007, pp. 1-5.
13. C. Guo, H. J. Wang, and W. Zhu, "Smart-phone attacks and defenses," in Proc. 3rd Workshop Hot Topics Netw., 2004, pp. 1-6.
14. P. Traynor, P. McDaniel, and T. La Porta, "On Attack Casuality in Internet-Connected Cellular Networks," in Proc. 16th USENIX Security Symp., 2007, pp. 1-16.
15. A. Castiglione, R. De Prisco, and A. De Santis. (2009). Do you trust your phone? Proc. 10th Int. Conf. E-Commerce Web Technol., vol. 5692, pp. 50-61 [Online]. Available:http://dx.doi.org/10.1007/978-3-642-03964-5-6
16. C. Fleizach, M. Liljenstam, P. Johansson, G. M. Voelker, and A. Mehes. (2007). Can you infect me now?: Malware propagation in mobile phone networks. Proc. ACM Workshop Recurring Malcode, pp. 61-68. [Online]. Available: http://doi.acm.org/10.1145/1314389.1314402
17. C. Mulliner and J.-P. Seifert, "Rise of the iBots: Owning a telco network," in Proc. 5th Int. conf. Malicious Unwanted Softw., 2010, pp. 71-80.
18. A. P. Felt, M. Finifter, E. Chin, S. Hanna, and D. Wagner. (2011). A survey of mobile malware in the wild. Proc. 1st ACM Workshop Security Privacy in Smartphones Mobile Dev., pp. 3-14. [Online]. Available: http://doi.acm.org/10. 1145/2046614.2046618
19. P. Traynor, W. Enck, P. McDaniel, and T. La Porta, "Mitigating attacks on open functionality in SMS-capable cellular networks," in Proc. 12th Annu. Int. Conf. Mobile Comput. Netw., 2006, pp. 182-193.
20. M. Khan, A. Ahmed, and A. R. Cheema, "Vulnerabilities of UMTS access domain security architecture," in Proc. IEEE 9th Int. Conf. Softw. Eng., Artif. Intell., Netw. Parallel/Distrib. Comput., 2008, pp. 350-355.
21. G. Kambourakis, C. Kolias, S. Gritzalis, and J. Hyuk-Park, "Signaling-oriented DoS attacks in UMTS networks," in Proc. 3rd Int. Conf. Workshops Adv. Inform. Security Assurance, 2009, pp. 280-289.
22. N. Gobbo, A. Merlo, and M. Migliardi. (2013). A denial of service attack to GSM networks via attach procedure, Proc. ARES Workshop, vol. 8128, pp. 361-376, [Online]. Available:http://dx.doi.org/10.1007/978-3-642-40588-4-25
23. 3GPP, (2012). TS 25.214 - Physical layer procedures (FDD). [Online]. Available: http://www.3gpp.org/ftp/Specs/html-info/25214.htm
24. 3GPP, (2012). TS 24.008 - Mobile radio interface Layer 3 specification; Core network protocols; Stage 3. [Online]. Available: http://www.3gpp.org/ftp/ Specs/html-info/24008.htm
25. 3GPP, (2012). TS 25.322 - Radio Link Control (RLC) protocol specification. [Online]. Available: http://www.3gpp.org/ftp/Specs/html-info/ 25322.htm
26. C. Johnson, H. Holma, and I. Sharp, "Connection setup delay for packet switched services," in Proc. 6th IEEE Int. Conf. 3G Beyond, 2005, pp. 1-5.
27. H. Holma and A. Toskala, WCDMA for UMTS. Hoboken, NJ, USA: Wiley, 2002.