Security in mobile environments

移动环境中的安全

• 批准号: 283344-2013
• 负责人: Matrawy, Ashraf
• 金额: $ 1.46万
• 依托单位: Carleton University
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2017
• 资助国家: 加拿大
• 起止时间: 2017-01-01 至 2018-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=634280
• 关键词: Security; mobile; environments

The security of the mobile environment is the focus of this research proposal. This proposed research program will consider the security of the mobile cellular network and location-aware services of the mobile environment. The research will consider contemporary LTE (Long Term Evolution) and future LTE-Advanced networks as well as earlier 2G and 3G networks as all current operational networks evolved to run these technologies side-by-side and are expected to do for some time.On the mobile cellular network side, the proposal will investigate the relationship between the complexity of the mobile network and security issues. Investigating ways to reduce the mobile network complexity could help reduce its susceptibility to a number of attacks that exploit this complexity. The second investigated aspect is proposing evasion-resistant geolocation techniques to enhance the security of certain location-based services. Several attacks in mobile networks and on the Internet succeed because of the attackers' ability to hide their location. While most mobile devices are equipped with location capabilities, the information obtained from a service about a certain device location cannot be trusted since the device could send false location information to the service. This proposal will look into ways beyond relying on a device's IP address or the information supplied by the device to a service to verify if there is an attempt to evade the geolocation required by certain services.

移动环境的安全性是本研究提案的重点。该拟议研究计划将考虑移动蜂窝网络的安全性和移动环境的位置感知服务。该研究将考虑当代 LTE（长期演进）和未来的 LTE-Advanced 网络以及早期的 2G 和 3G 网络，因为当前所有运营网络都已演进为并行运行这些技术，并且预计将持续一段时间。在移动蜂窝网络方面，该提案将调查移动网络的复杂性与安全问题之间的关系。研究降低移动网络复杂性的方法可能有助于降低其对利用这种复杂性的多种攻击的敏感性。第二个研究方面是提出防规避地理定位技术，以增强某些基于位置的服务的安全性。移动网络和互联网上的一些攻击之所以成功，是因为攻击者能够隐藏其位置。虽然大多数移动设备都配备了定位功能，但从服务获取的有关特定设备位置的信息不能被信任，因为设备可能会向服务发送错误的位置信息。该提案将研究除了依赖设备的 IP 地址或设备向服务提供的信息之外的其他方法，以验证是否有人试图逃避某些服务所需的地理位置。