This is Your President Speaking: Spoofing Alerts in 4G LTE Networks
This is Your President Speaking: Spoofing Alerts in 4G LTE Networks
复制标题
这是你们的总统在讲话：4G LTE 网络中的欺骗警报
DOI：
10.1145/3307334.3326082
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Ha, Sangtae
中科院分区：
文献类型：
--
作者：
Lee, Gyuhong;Lee, Jihoon;Lee, Jinsung;Im, Youngbin;Hollingsworth, Max;Wustrow, Eric;Grunwald, Dirk;Ha, Sangtae
根据2006年《警告、警报和响应法案》的规定，现代手机必须通过无线紧急警报（WEA）程序接收和显示警报。这些警报包括安珀警报，恶劣天气警报和（不可封锁的）总统警报，旨在告知公众即将发生的威胁。最近，一个测试总统警报被发送到美国所有有能力的手机，引发了人们对底层WEA协议如何被滥用或攻击的担忧。在本文中，我们调查了这个系统的细节，并开发和演示了第一个实际的欺骗攻击总统警报，使用商用硬件以及修改后的开源软件。我们的攻击可以使用商用软件定义无线电以及我们对开源NextEPC和srsLTE软件库的修改来执行。我们发现，只需四个发射功率为1瓦的恶意便携式基站，几乎所有的50，000个座位的体育场都可以以90%的成功率被攻击。当然，这种攻击的真正影响取决于范围内手机的密度;在拥挤的城市或体育场发出虚假警报可能会导致恐慌的级联。解决这个问题需要运营商、政府利益相关者和手机制造商之间的大量合作。为了推动这一努力，我们还讨论了几种防御措施，以在短期和长期内解决这一威胁。
Modern cell phones are required to receive and display alerts via the Wireless Emergency Alert (WEA) program, under the mandate of the Warning, Alert, and Response Act of 2006. These alerts include AMBER alerts, severe weather alerts, and (unblockable) Presidential Alerts, intended to inform the public of imminent threats. Recently, a test Presidential Alert was sent to all capable phones in the United States, prompting concerns about how the underlying WEA protocol could be misused or attacked. In this paper, we investigate the details of this system, and develop and demonstrate the first practical spoofing attack on Presidential Alerts, using both commercially available hardware as well as modified open source software. Our attack can be performed using a commercially-available software defined radio, and our modifications to the open source NextEPC and srsLTE software libraries. We find that with only four malicious portable base stations of a single Watt of transmit power each, almost all of a 50,000-seat stadium can be attacked with a 90% success rate. The true impact of such an attack would of course depend on the density of cell phones in range; fake alerts in crowded cities or stadiums could potentially result in cascades of panic. Fixing this problem will require a large collaborative effort between carriers, government stakeholders, and cell phone manufacturers. To seed this effort, we also discuss several defenses to address this threat in both the short and long term.
CASTLE over the Air——蜂窝数据传输的分布式调度（演示）
DOI：
10.1145/3307334.3328576
发表时间：
2019
期刊：
and Services
影响因子：
--
作者：
Dhawaskar Sathyanarayana, Sandesh;Lee, Jihoon;Lee, Jinsung;Im, Youngbin;Rahimzadeh, Parisa;Zhang, Xiaoxi;Hollingsworth, Max;Joe-Wong, Carlee;Grunwald, Dirk;Ha, Sangtae
通讯作者：
Ha, Sangtae
重新思考连接安全指标
DOI：
--
发表时间：
2016
期刊：
Symposium On Usable Privacy and Security
影响因子：
--
作者：
A. Felt;R. Reeder;A. Ainslie;Helen Harris;Max Walker;Christopher Thompson;M. Acer;E. Morant;Sunny Consolvo
通讯作者：
Sunny Consolvo
4G LTE网络中基于IMS的短信业务带来新的安全威胁
DOI：
--
发表时间：
2016
期刊：
Conference on Computer and Communications Security
影响因子：
--
作者：
Guan;Chi;Chunyi Peng;Yuanjie Li;Songwu Lu
通讯作者：
Songwu Lu