Insecurity of operational cellular IoT service: new vulnerabilities, attacks, and countermeasures
Insecurity of operational cellular IoT service: new vulnerabilities, attacks, and countermeasures
复制标题
DOI：
10.1145/3447993.3483239
复制
发表时间：
2021-10
期刊：
影响因子：
--
通讯作者：
Sihan Wang;Guan-Hua Tu;Xi Lei;Tian Xie;Chi-Yu Li;Polun Chou;Fu-Cheng Hsieh;Yiwen Hu;
中科院分区：
文献类型：
--
作者：
Sihan Wang;Guan-Hua Tu;Xi Lei;Tian Xie;Chi-Yu Li;Polun Chou;Fu-Cheng Hsieh;Yiwen Hu;
全世界有150多个蜂窝网络已推出了大规模的物联网服务，例如智能计量和环境监测。这种蜂窝物联网服务与非iot（例如智能手机）共享现有的蜂窝网络体系结构。当它们新将其新集成到蜂窝网络中时，新的安全漏洞可能会因不明智的集成而发生。在这项工作中，我们从系统集成和服务集成方面探索了细胞IoT的安全性漏洞。我们发现了跨越蜂窝标准设计缺陷，网络操作单和IoT设备实现缺陷的五个漏洞。威胁性的是，他们允许对手远程识别分配给蜂窝物联网设备的IP地址和电话号码，并针对它们启动数据/文本垃圾邮件攻击。我们通过三个美国主要的物联网承运人实验验证了这些漏洞和攻击。攻击评估结果表明，对手可以以少于120 MB的垃圾邮件流量筹集高达226美元的物联网数据账单，并以每秒5美元的价格增加物联网文本账单；此外，细胞IoT设备可能会拒绝物联网服务。我们最终提出，原型和评估推荐的解决方案。
More than 150 cellular networks worldwide have rolled out massive IoT services such as smart metering and environmental monitoring. Such cellular IoT services share the existing cellular network architecture with non-IoT (e.g., smartphone) ones. When they are newly integrated into the cellular network, new security vulnerabilities may happen from imprudent integration. In this work, we explore the security vulnerabilities of the cellular IoT from both system-integrated and service-integrated aspects. We discover five vulnerabilities spanning cellular standard design defects, network operation slips, and IoT device implementation flaws. Threateningly, they allow an adversary to remotely identify IP addresses and phone numbers assigned to cellular IoT devices and launch data/text spamming attacks against them. We experimentally validate these vulnerabilities and attacks with three major U.S. IoT carriers. The attack evaluation result shows that the adversary can raise an IoT data bill by up to $226 with less than 120 MB spam traffic and increase an IoT text bill at a rate of $5 per second; moreover, cellular IoT devices may suffer from denial of IoT services. We finally propose, prototype, and evaluate recommended solutions.