TWC: Small: Exposing Attack Vectors and Identifying Defense Solutions for Data Cellular Networks

该项目解决了几个关键的新兴安全挑战，这些挑战是由于广泛成功地大规模采用具有各种网络功能的移动设备而产生的。这种新方法的重点是了解智能手机用户由于下载应用程序的请求权限而合法和自愿提供的各种信息如何可能被滥用。第二个研究重点是通过详细暴露和明确定义关键要求来确定蜂窝网络中间盒（例如防火墙）策略设计的改进。利用这两个研究重点的见解，利用现有机制和评估的新改进，探索了检测移动设备滥用网络资源的支持。本项目的技术贡献主要集中在三个关键领域：(1)研究利用非传统手段构建蜂窝僵尸网络；(2)发现蜂窝网络策略在资源滥用和针对性攻击方面的不足；(3)检测移动设备滥用基础设施资源以获取网络和能源不公平优势的不当行为。该项目将对网络安全社区和我们的社会产生重大而广泛的影响，因为对移动设备的信息访问的有效依赖正在迅速增长，而蜂窝数据网络基础设施的安全保障对于实现强大和高可用的移动网络和网络服务至关重要。在这项工作中开发的任何软件都将提供给研究界和网络运营商界。相关的实验工具和具体的实验配置将通过网络发布。

This project addresses several key emerging security challenges that arise due to the wildly successful large-scale adoption of mobile devices with diverse network capabilities. The novel approach focuses on to understanding how various information that are legitimately and willingly provided by smartphone users due to the requested permissions of downloaded applications can be potentially abused. The second research focus is to identify improvements in the design of cellular network middlebox (e.g., firewall) policies by detailed exposure and explicitly defining the key requirements. Using insights from the two research thrusts, support to detect abuse of network resources by mobile devices is explored, leveraging both existing mechanisms and new improvements for evaluation. There are three key areas of technical contributions from this project: (1) Investigation of the construction of cellular botnets from non-traditional means, (2) Discovery of the deficiency of cellular network policies to resource abuse and targeted attacks, and (3) Misbehavior detection of mobile devices in abusing infrastructure resources to gain unfair advantages in network and energy usage.This project will have significant and broad impact on both the networking security community and our society, as effective reliance on mobile devices for information access is rapidly growing and security assurance of cellular data network infrastructure is critical to achieving robust and highly available mobile networks and network services. Any software developed in this work will be available to the research community and the network operator community. Associated experimental tools and specific experimental configurations will be released through web venues.