TWC: Small: Collaborative: Secure Data Charging Architecture for Mobile Devices in 3G/4G Cellular Networks: Vulnerabilities and Solutions

无线蜂窝网络是移动用户必不可少的网络基础设施。与互联网不同，蜂窝网络采用了基于使用情况的收费，而不是简单的固定费率收费。数据套餐用户必须根据在3G/4G网络中消耗的流量来支付数据账单。虽然这种计量收费系统已经运行多年，并且总体上是成功的，但这种系统的安全研究在很大程度上仍然没有得到解决。本研究的目的是调查大规模蜂窝网络基础设施的不安全方面，识别其安全漏洞，概述利用此类漏洞的新颖攻击，设计防御此类攻击的防御措施，并通过在运营运营商中的真实实验验证攻击和防御措施。这项研究有助于我们更好地理解蜂窝系统中各种形式的漏洞是如何表现出来的，为安全系统设计和操作开辟了新的场所，并改进了网络设计，使基础设施和用户设备更能抵御恶意威胁。通过解决移动数据收费的关键安全问题，拟议的研究有助于保护数万亿美元的网络运营。它不仅确保了全球移动运营商的收入，也保护了数十亿移动用户的货币权利。拟议的解决方案将有助于更新现有的网络基础设施，并在其标准化中塑造即将到来的5G蜂窝技术。它还将培养该领域的新一代工程师和学生。pi将与工业界密切互动，以进行可能的技术转让。

Wireless cellular networks serve as an essential cyber-infrastructure for mobile users. Unlike the Internet, cellular networks have adopted usage-based charging, rather than the simpler flat-rate charging. Data-plan subscribers have to pay their data bills based on the consumed traffic volume in 3G/4G networks. Although this metered charging system has been operational and generally successful for years, the security study of such a system remains largely unaddressed. The objective of this research is to investigate the insecurity aspects of large-scale cellular network infrastructures, identify their security loopholes, sketch novel attacks that exploit such loopholes, devise defenses that protect from such attacks, and validate the attacks and the defenses via real experiments in operational carriers. The proposed study helps us to better understand how various forms of vulnerabilities exhibit in the cellular system, open new venue for secure system design and operations, and refine the networking design that makes both the infrastructure and the user devices more resilient against malicious threats.By addressing the key security issues of mobile data charging, the proposed research helps to protect the multi-trillion dollar network operations. It not only secures revenues of global cellular operators, but also protects the monetary rights of billions of mobile users. The proposed solutions will help to renovate the existing network infrastructure, and shape the upcoming 5G cellular technology in its standardization. It will also train a new generation of engineers and students in this field. The PIs will interact closely with industry for possible technology transfer.