Abstract:Mobile Internet is becoming the norm. With more personalized mobile devices in hand, many services choose to offer alternative, usually more convenient, approaches to authenticating and delivering the content between mobile users and service providers. One main option is to use SMS (i.e., short messaging service). Such carrier-grade text service has been widely used to assist versatile mobile services, including social networking, banking, to name a few. Though the text service can be spoofed via certain Internet text service providers which cooperated with carriers, such attacks haven well studied and defended by industry due to the efforts of research community. However, as cellular network technology advances to the latest IP-based 4G LTE, we find that these mobile services are somehow exposed to new threats raised by this change, particularly on 4G LTE Text service (via brand-new distributed Mobile-Initiated Spoofed SMS attack which is not available in legacy 2G/3G systems). The reason is that messaging service over LTE shifts from the circuit-switched (CS) design to the packet-switched (PS) paradigm as 4G LTE supports PS only. Due to this change, 4G LTE Text Service becomes open to access. However, its shields to messaging integrity and user authentication are not in place. As a consequence, such weaknesses can be exploited to launch attacks (e.g., hijack Facebook accounts) against a targeted individual, a large scale of mobile users and even service providers, from mobile devices. Current defenses for Internet-Initiated Spoofed SMS attacks cannot defend the unprecedented attack. Our study shows that 53 of 64 mobile services over 27 industries are vulnerable to at least one threat. We validate these proof-of-concept attacks in one major US carrier which supports more than 100 million users. We finally propose quick fixes and discuss security insights and lessons we have learnt.

Real threats using GTP protocol and countermeasures on a 4G mobile grid computing environment

Unprotected 4G/5G Control Procedures at Low Layers Considered Dangerous

New Security Threats Caused by IMS-based SMS Service in 4G LTE Networks

Survey on 5G Physical Layer Security Threats and Countermeasures

New Threats to SMS-Assisted Mobile Internet Services from 4G LTE: Lessons Learnt from Distributed Mobile-Initiated Attacks towards Facebook and Other Services

Towards Securing Availability in 5G: Analyzing the Injection Attack Impact on Core Network

Fifth Generation Mobile Communication Technology Network Attack Defense Based on Software Defined network Technology in Power Internet of Things

Machine Learning Assisted Security Analysis of 5G-Network-Connected Systems

Uncovering Security Vulnerabilities in Real-world Implementation and Deployment of 5G Messaging Services

4G Mobile Communication Network System Security Faced with Threat Question Research

5G System Security Analysis

Multi-Layer Attack Graph Analysis in the 5G Edge Network Using a Dynamic Hexagonal Fuzzy Method

Security Vulnerabilities in 5G Non-Stand-Alone Networks: A Systematic Analysis and Attack Taxonomy

Cyber Attacks in Cyber-Physical Power Systems: A Case Study with GPRS-based SCADA Systems

PROV5GC: Hardening 5G Core Network Security with Attack Detection and Attribution Based on Provenance Graphs

Automated Attack and Defense Framework for 5G Security on Physical and Logical Layers

Towards the Detection of Mobile DDoS Attacks in 5G Multi-Tenant Networks

MONDEO-Tactics5G: Multistage Botnet Detection and Tactics for 5G/6G networks

IMS is Not That Secure on Your 5G/4G Phones

Intrusion detection techniques for mobile cloud computing in heterogeneous 5G

A formal security analysis of the fast authentication procedure based on the security context in 5G networks