TWC: Small: Collaborative: Secure Data Charging Architecture for Mobile Devices in 3G/4G Cellular Networks: Vulnerabilities and Solutions

无线蜂窝网络是移动用户必不可少的网络基础设施。与互联网不同，蜂窝网络采用了基于使用量的收费，而不是更简单的统一费率收费。数据套餐用户必须根据3G/4G网络中的流量来支付数据账单。虽然这种计量收费系统已经运行多年，总体上是成功的，但这种系统的安全性研究在很大程度上仍然没有得到解决。这项研究的目的是调查大规模蜂窝网络基础设施的不安全方面，识别其安全漏洞，利用这些漏洞设计新型攻击，设计针对此类攻击的防御措施，并通过在运营运营商上的真实实验来验证攻击和防御。拟议的研究有助于我们更好地了解各种形式的漏洞如何在蜂窝系统中表现出来，为安全的系统设计和运营打开新的场所，并优化网络设计，使基础设施和用户设备对恶意威胁具有更强的弹性。通过解决移动数据收费的关键安全问题，拟议的研究有助于保护数万亿美元的网络运营。它不仅确保了全球移动运营商的收入，还保护了数十亿移动用户的货币权利。拟议的解决方案将有助于翻新现有的网络基础设施，并塑造即将到来的5G蜂窝技术的标准化。它还将培养这一领域的新一代工程师和学生。采购经理将与工业界密切互动，以进行可能的技术转让。

Wireless cellular networks serve as an essential cyber-infrastructure for mobile users. Unlike the Internet, cellular networks have adopted usage-based charging, rather than the simpler flat-rate charging. Data-plan subscribers have to pay their data bills based on the consumed traffic volume in 3G/4G networks. Although this metered charging system has been operational and generally successful for years, the security study of such a system remains largely unaddressed. The objective of this research is to investigate the insecurity aspects of large-scale cellular network infrastructures, identify their security loopholes, sketch novel attacks that exploit such loopholes, devise defenses that protect from such attacks, and validate the attacks and the defenses via real experiments in operational carriers. The proposed study helps us to better understand how various forms of vulnerabilities exhibit in the cellular system, open new venue for secure system design and operations, and refine the networking design that makes both the infrastructure and the user devices more resilient against malicious threats.By addressing the key security issues of mobile data charging, the proposed research helps to protect the multi-trillion dollar network operations. It not only secures revenues of global cellular operators, but also protects the monetary rights of billions of mobile users. The proposed solutions will help to renovate the existing network infrastructure, and shape the upcoming 5G cellular technology in its standardization. It will also train a new generation of engineers and students in this field. The PIs will interact closely with industry for possible technology transfer.