NeTS: Small: Collaborative Research: Identifying Design and Operational Loopholes in Cellular Network Protocols

蜂窝网络是目前部署的最大的无线基础设施。它在为用户提供移动互联网接入和蜂窝语音服务方面发挥着重要作用。蜂窝网络的一个关键设计组件是信令协议，信令协议在控制平面上运行。与互联网协议相比，这些信令协议更复杂，以确保重要的控制功能，如移动性支持、无线电资源控制、数据和语音会话管理等。因此，它们的正确设计和操作对蜂窝运营商和用户都至关重要。该项目的目标是通过以下方式设计工具并验证当前蜂窝网络中信令协议的正确性：(i)识别3GPP标准定义的协议中的设计漏洞，以及运营商和供应商制造的操作失误，（ii）分析其根本原因和性能损失，以及（iii）设计解决此类问题的技术。所提出的活动可以在设计和实践中提高蜂窝网络的可靠性。它们不仅有助于我们更好地理解如何避免蜂窝系统中的设计和实现错误，而且还有助于更新当前的协议设计，甚至影响即将到来的5G蜂窝技术的标准化。如果成功，研究结果将有助于为我们的社会设计和实践一个更可靠的移动互联网基础设施。该项目还将招募和培训新一代的学生和工程师，包括那些来自少数民族的人，他们在技术上为移动互联网时代做好了准备。这些项目将与相关行业密切互动，以实现可能的技术转让。这个项目的研究有两个重点。一个是设计工具，识别蜂窝网络中的设计漏洞和操作失误。该项目将开发一种特定于蜂窝的验证器，该验证器采用具有特定领域蜂窝知识的通用模型检查技术，并使用基于手机的经验验证。该项目将应用模型检查来识别潜在候选漏洞的超集，然后通过在运营的3G/4G运营商上进行实验来验证真实漏洞，重点关注两类设计漏洞：(a)协议与共享特定上下文（例如，连接状态，命令，IP地址，虚拟连接）的交互，这在跨层，跨域和系统间协议通信中很流行；(b)信号传递乱序。当指定的控制消息序列中断时，其代价远远超过丢失或延迟的消息。根据定义的语义对错误排序的信号进行反应，并可能触发错误的协议操作。该项目还将通过对操作载体的用户研究来评估这两类问题的实际影响。该项目的另一个重点是对已发现的漏洞提出修复建议。提出的解决方案将新的启发式方法纳入蜂窝信令协议，并要求在移动设备和网络基础设施上协同努力。

The cellular network is the largest wireless infrastructure deployed today. It plays an important role to provide users mobile Internet access and cellular voice service. A key design component of the cellular network is its signaling protocols, which operate on the control plane. Compared with their Internet counterparts, these signaling protocols are more complex to ensure vital control functions, such as mobility support, radio resource control, session management for data and voice, to name a few. Consequently, their proper design and operation are critical to both the cellular operators and the users. The objective of this project is to devise tools and verify the correctness of signaling protocols in current cellular networks by: (i)identifying design loopholes in the protocols defined by the 3GPP standards, as well as operational slips made by operators and vendors, (ii) analyzing their root causes and performance penalties, and (iii) devising techniques that fix such problems. The proposed activities can enhance the reliability of cellular networks in both design and practice. They will help us to not only better understand how to avoid design and implementation mistakes in a cellular system, but also to renovate the current protocol design and even affect the upcoming 5G cellular technology in its standardization. If successful, the results will facilitate the design and practice of a more reliable mobile Internet infrastructure for our society. The project will also recruit and train a new generation of students and engineers, including those from minority groups, who are technically ready for the mobile Internet era. The PIs will interact closely with the related industry for possible technology transfer. The research in this project has two main thrusts. One is to devise tools and identify design loopholes and operational slips in cellular networks. The project will develop a cellular-specific verifier that adapts generic model-checking techniques with domain-specific cellular knowledge, and uses phone-based empirical validation. The project will apply model checking to identify a superset of potential candidate loopholes, and then validate the real ones through experiments over operational 3G/4G carriers, by focusing on design slips in two categories: (a) protocols interaction with shared certain context (e.g., connection status, commands, IP address, virtual connection), which is popular in cross-layer, cross-domain, and inter-system protocol communications; (b) Out-of-sequenced signaling delivery. When the designated sequence of control messages is disrupted, its cost is way beyond lost or delayed messages. Missequenced signals are reacted based on defined semantics and may trigger wrong protocol operations. This project will also assess the real-world impact of both categories of issues through user studies over operational carriers. The other thrust of this project is to propose fixes to the identified loopholes. The proposed solutions incorporate new heuristics into cellular signaling protocols and call for concerted effort on the mobile device and the network infrastructure.