TC: Small: Characterizing and Mitigating Device-Based Attacks in Cellular Telecommunications Networks

技术委员会：小号：蜂窝电信网络中基于设备的攻击的特征和缓解PI：帕特里克Traynor（Traynor@cc.gatech.edu）共同PI：JonesGiffin（giffin@cc.gatech.edu）移动的电话传统上提供了一组有限的电话操作。然而，最近迅速采用了复杂的操作系统、先进的用户界面和与因特网的连接，使这些系统转变为能力很强的通用计算平台。不幸的是，实现这些系统的软件往往缺乏基本的安全保护。在这个项目中，我们将调查一个不成熟和脆弱的软件基础设施上的移动的设备和蜂窝网络核心的影响。表征和响应威胁至关重要，特别是考虑到蜂窝网络的安全模型是围绕高度有限的用户设备的假设而设计的。我们计划首先创建Caegis，这是一套用于ARM代码分析和无线蜂窝电话模糊检测的原位工具，以帮助制造商提高软件质量并降低其对恶意软件的敏感性。 然后，我们将重点介绍远程修复的基本机制，这将允许网络帮助设备重新启动到已知的安全状态。 这两个工具的开发，再加上对恶意软件影响的改进描述，将大大提高为这一关键基础设施提供的安全性。此外，该项目将帮助学生在独立研究和相关类获得动手经验与安全研究对我们的阿尔卡特朗讯IMS网络核心。

TC: Small: Characterizing and Mitigating Device-Based Attacks in Cellular Telecommunications NetworksPI: Patrick Traynor (Traynor@cc.gatech.edu)Co-PI: Jonathon Giffin (giffin@cc.gatech.edu)Mobile phones have traditionally provided a limited set of telephony operations. However, the recent and rapid introduction of complex operating systems, sophisticated user interfaces and connectivity with the Internet has transformed these systems into highly capable general-purpose computing platforms. Unfortunately, the software implementing these systems often lacks even basic security protections. In this project, we will investigate the impact of an immature and vulnerable software infrastructure on both mobile devices and the cellular network core. Characterizing and responding to the threats is critical, especially given that the security models of cellular networks are designed around the assumption of highly limited user devices. We plan first to create Caegis, an in situ set of tools for ARM code analysis and over-the-air cellular phone fuzzing to help manufacturers improve the quality of their software and reduce its susceptibility to malware. We will then focus on basic mechanisms for Remote Repair, which will allow the network to help a device reboot to a known safe state. The development of these two tools, in combination with improved characterizations of the impact of malware, will significantly improve the security provided to this piece of critical infrastructure. Moreover, this project will help students in both independent research and a related class to gain hands-on experience with security research on our Alcatel-Lucent IMS network core.