TWC: Small: Collaborative: Secure Data Charging Architecture for Mobile Devices in 3G/4G Cellular Networks: Vulnerabilities and Solutions

TWC：小型：协作：3G/4G 蜂窝网络中移动设备的安全数据充电架构：漏洞和解决方案

• 批准号: 1753500
• 负责人: Chunyi Peng
• 金额: $ 7.86万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-08-25 至 2018-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1753500&HistoricalAwards=false
• 关键词: TWC; Small; Collaborative; Secure; Data

Wireless cellular networks serve as an essential cyber-infrastructure for mobile users. Unlike the Internet, cellular networks have adopted usage-based charging, rather than the simpler flat-rate charging. Data-plan subscribers have to pay their data bills based on the consumed traffic volume in 3G/4G networks. Although this metered charging system has been operational and generally successful for years, the security study of such a system remains largely unaddressed. The objective of this research is to investigate the insecurity aspects of large-scale cellular network infrastructures, identify their security loopholes, sketch novel attacks that exploit such loopholes, devise defenses that protect from such attacks, and validate the attacks and the defenses via real experiments in operational carriers. The proposed study helps us to better understand how various forms of vulnerabilities exhibit in the cellular system, open new venue for secure system design and operations, and refine the networking design that makes both the infrastructure and the user devices more resilient against malicious threats.By addressing the key security issues of mobile data charging, the proposed research helps to protect the multi-trillion dollar network operations. It not only secures revenues of global cellular operators, but also protects the monetary rights of billions of mobile users. The proposed solutions will help to renovate the existing network infrastructure, and shape the upcoming 5G cellular technology in its standardization. It will also train a new generation of engineers and students in this field. The PIs will interact closely with industry for possible technology transfer.

无线蜂窝网络作为移动的用户的基本网络基础设施。与互联网不同，蜂窝网络采用基于使用的收费，而不是更简单的统一费率收费。数据套餐用户必须根据3G/4G网络中消耗的流量支付数据费用。虽然这种计量收费系统已运作多年，并普遍成功，这种系统的安全研究仍然在很大程度上没有解决。本研究的目的是调查大规模的蜂窝网络基础设施的不安全方面，确定其安全漏洞，素描新颖的攻击，利用这些漏洞，设计防御，防止这种攻击，并验证攻击和防御通过真实的实验运营商。这项研究有助于我们更好地了解蜂窝系统中各种形式的漏洞是如何表现出来的，为安全的系统设计和运营开辟了新的空间，并改进了网络设计，使基础设施和用户设备更能抵御恶意威胁。通过解决移动的数据收费的关键安全问题，这项研究有助于保护数万亿美元的网络运营。它不仅保障了全球移动运营商的收入，还保护了数十亿移动的用户的货币权利。拟议的解决方案将有助于更新现有的网络基础设施，并在其标准化中塑造即将到来的5G蜂窝技术。它还将培养这一领域的新一代工程师和学生。参与者将与工业界密切互动，以促进可能的技术转让。

项目成果

Demo: Combating Caller ID Spoofing on 4G Phones Via CEIVE

演示：通过 CEIVE 打击 4G 手机上的来电显示欺骗

• DOI: 10.1145/3241539.3267725
• 发表时间: 2018
• 期刊: Proceedings of the 24th Annual International Conference on Mobile Computing and Networking
• 作者: Deng, Haotian;Peng, Chunyi
• 通讯作者: Peng, Chunyi

CEIVE: Combating Caller ID Spoofing on 4G Mobile Phones Via Callee-Only Inference and Verification

• DOI: 10.1145/3241539.3241573
• 发表时间: 2018-10
• 期刊: Proceedings of the 24th Annual International Conference on Mobile Computing and Networking
• 作者: Haotian Deng;Weicheng Wang;Chunyi Peng