Injecting SMS messages into smart phones for security analysis

3rd USENIX Workshop on Offensive Technologies, WOOT 2009

Volumn , Issue , 2009, Pages

  Mulliner, Collin ^a   Miller, Charlie ^b  

^a TECHNISCHE UNIVERSITÄT BERLIN   (Germany)

^b Independent Security Evaluators   (Germany)

Author keywords

Fuzzing; Smart Phones; SMS; Vulnerability Analysis

Indexed keywords

DENIAL-OF-SERVICE ATTACK; NETWORK SECURITY; SAMARIUM; SMARTPHONES; TEXT MESSAGING;

BUILDING BLOCKES; FUZZING; MOBILE PHONE SERVICES; SECURITY ANALYSIS; SECURITY FLAWS; SHORT MESSAGE SERVICES; USER INTERACTION; VULNERABILITY ANALYSIS;

MOBILE SECURITY;

EID: 85084164752     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (11)

1. Sulley - Pure Python fully automated and unattended fuzzing framework. http://code.google.com/p/sulley/.
2. 3rd Generation Partnership Project. 3GPP TS 23.040 - Technical realization of the Short Message Service (SMS). http://www.3gpp.org/ftp/Specs/html-info/23040.htm, September 2004.
3. B. Jurry XFocus Team. Siemens Mobile SMS Exceptional Character Vulnerability. http://www.xfocus.org/advisories/200201/2.html, January 2002.
4. European Telecommunications Standards Institute (ETSI). GSM 06.06 (ETS 300 642): Digital cellular telecommunication system (Phase 2); AT Command set for GSM Mobile Equipment (ME). http://www.etsi.org, 1999.
5. J. de Haas. Mobile Security: SMS and a little WAP. http://www.itsx.com/hal2001/hal2001-itsx.ppt, August 2001.
6. C. Mulliner and G. Vigna. Vulnerability Analysis of MMS User Agents. In Proceedings of the Annual Computer Security Applications Conference (ACSAC), Miami, FL, December 2006.
7. O. Whitehouse @stack Inc. Nokia Phones Vulnerable to DoS Attacks. http://www.infoworld.com/article/03/02/26/HNnokiados_1.html, February 2003.
8. Oulu University Secure Programming Group. PROTOS Security Testing of Protocol Implementations. http://www.ee.oulu.fi/research/ouspg/protos/, 2002.
9. T. Engel. Remote SMS/MMS Denial of Service - Curse Of Silence. http://berlin.ccc.de/~tobias/cursesms.txt, December 2008.
10. W. Enck, P. Traynor, P. McDaniel and T. La Porta. Exploiting Open Functionality in SMS-Capable Cellular Networks. In Conference on Computer and Communications Security, 2005.
11. W. J. Hengeveld. Windows Mobile AT-command log-driver. http://nah6.com/~itsme/cvs-xdadevtools/itsutils/leds/logdev. cpp.