Abstract:Mobile Internet is becoming the norm. With more personalized mobile devices in hand, many services choose to offer alternative, usually more convenient, approaches to authenticating and delivering the content between mobile users and service providers. One main option is to use SMS (i.e., short messaging service). Such carrier-grade text service has been widely used to assist versatile mobile services, including social networking, banking, to name a few. Though the text service can be spoofed via certain Internet text service providers which cooperated with carriers, such attacks haven well studied and defended by industry due to the efforts of research community. However, as cellular network technology advances to the latest IP-based 4G LTE, we find that these mobile services are somehow exposed to new threats raised by this change, particularly on 4G LTE Text service (via brand-new distributed Mobile-Initiated Spoofed SMS attack which is not available in legacy 2G/3G systems). The reason is that messaging service over LTE shifts from the circuit-switched (CS) design to the packet-switched (PS) paradigm as 4G LTE supports PS only. Due to this change, 4G LTE Text Service becomes open to access. However, its shields to messaging integrity and user authentication are not in place. As a consequence, such weaknesses can be exploited to launch attacks (e.g., hijack Facebook accounts) against a targeted individual, a large scale of mobile users and even service providers, from mobile devices. Current defenses for Internet-Initiated Spoofed SMS attacks cannot defend the unprecedented attack. Our study shows that 53 of 64 mobile services over 27 industries are vulnerable to at least one threat. We validate these proof-of-concept attacks in one major US carrier which supports more than 100 million users. We finally propose quick fixes and discuss security insights and lessons we have learnt.

Automatic Detection of SIP-Aware Attacks on VoLTE Device

A Traffic Based Lightweight Attack Detection Scheme for VoLTE

Detect Sip Flooding Attacks In Volte By Utilizing And Compressing Counting Bloom Filter

Detect and Prevent SIP Flooding Attacks in VoLTE by Utilizing a Two-Tier PFilter Design.

Insecurity of Voice Solution VoLTE in LTE Mobile Networks

Watching your call: Breaking VoLTE Privacy in LTE/5G Networks

Governance framework for voice spam detection and interception of telecom network

On Sliding Window Based Change Point Detection for Hybrid SIP DoS Attack

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

A VoLTE Covert Channel with Intelligent Confrontation

An Adaptive Security Data Collection and Composition Recognition Method for Security Measurement over LTE/LTE-A Networks

Security Threats to Voice Services in 5G Standalone Networks

New Security Threats Caused by IMS-based SMS Service in 4G LTE Networks

Design and Experimental Assessment of Detection Schemes for Air Interface Attacks in Adverse Scenarios

Detect Telecommunication DoS Attacks at Network Convergence Boundary

The Untold Secrets of Operational Wi-Fi Calling Services: Vulnerabilities, Attacks, and Countermeasures

New Threats to SMS-Assisted Mobile Internet Services from 4G LTE: Lessons Learnt from Distributed Mobile-Initiated Attacks towards Facebook and Other Services

Detection of LTE Protocol Based on Format Fuzz.

A Machine Learning Based Intrusion Detection System for Software Defined 5 G Network

An Integrative System for Deep Packet Inspection and Network Anomaly Detection & Defense

Emulation-Instrumented Fuzz Testing of 4G/LTE Android Mobile Devices Guided by Reinforcement Learning