TWC: Small: Collaborative: Secure Data Charging Architecture for Mobile Devices in 3G/4G Cellular Networks: Vulnerabilities and Solutions

无线蜂窝网络作为移动的用户的基本网络基础设施。与互联网不同，蜂窝网络采用基于使用的收费，而不是更简单的统一费率收费。数据套餐用户必须根据3G/4G网络中消耗的流量支付数据费用。虽然这种计量收费系统已运作多年，并普遍成功，这种系统的安全研究仍然在很大程度上没有解决。本研究的目的是调查大规模的蜂窝网络基础设施的不安全方面，确定其安全漏洞，素描新颖的攻击，利用这些漏洞，设计防御，防止这种攻击，并验证攻击和防御通过真实的实验运营商。这项研究有助于我们更好地了解蜂窝系统中各种形式的漏洞是如何表现出来的，为安全的系统设计和运营开辟了新的空间，并改进了网络设计，使基础设施和用户设备更能抵御恶意威胁。通过解决移动的数据收费的关键安全问题，这项研究有助于保护数万亿美元的网络运营。它不仅保障了全球移动运营商的收入，还保护了数十亿移动的用户的货币权利。拟议的解决方案将有助于更新现有的网络基础设施，并在其标准化中塑造即将到来的5G蜂窝技术。它还将培养这一领域的新一代工程师和学生。参与者将与工业界密切互动，以促进可能的技术转让。

Wireless cellular networks serve as an essential cyber-infrastructure for mobile users. Unlike the Internet, cellular networks have adopted usage-based charging, rather than the simpler flat-rate charging. Data-plan subscribers have to pay their data bills based on the consumed traffic volume in 3G/4G networks. Although this metered charging system has been operational and generally successful for years, the security study of such a system remains largely unaddressed. The objective of this research is to investigate the insecurity aspects of large-scale cellular network infrastructures, identify their security loopholes, sketch novel attacks that exploit such loopholes, devise defenses that protect from such attacks, and validate the attacks and the defenses via real experiments in operational carriers. The proposed study helps us to better understand how various forms of vulnerabilities exhibit in the cellular system, open new venue for secure system design and operations, and refine the networking design that makes both the infrastructure and the user devices more resilient against malicious threats.By addressing the key security issues of mobile data charging, the proposed research helps to protect the multi-trillion dollar network operations. It not only secures revenues of global cellular operators, but also protects the monetary rights of billions of mobile users. The proposed solutions will help to renovate the existing network infrastructure, and shape the upcoming 5G cellular technology in its standardization. It will also train a new generation of engineers and students in this field. The PIs will interact closely with industry for possible technology transfer.