User location tracking attacks for LTE networks using the interworking functionality

Silke Holtmanns, Siddharth Prakash Rao, Ian Oliver

Tutkimustuotos: Artikkeli kirjassa/konferenssijulkaisussaConference contributionScientificvertaisarvioitu

11 Sitaatiot (Scopus)

Abstrakti

User location tracking attacks using cellular networks have been known since 2008. In 2014, several Signalling System No 7 (SS7) protocol based location tracking attacks were demonstrated, which particularly targeted the cellular roaming in GSM networks. Currently, the mobile network operators are in a gradual process of upgrading to Long Term Evolution (LTE) networks, in addition to replacing SS7 by its successor-Diameter protocol. Though Diameter seems to be an improvement over SS7 in terms of security with the use of IPsec/TLS and certificate based authentication, they still need to communicate with their roaming partners who use less secure SS7. In this paper, we will briefly present the translation of existing SS7 attacks into Diameter-based attacks in LTE networks (under certain assumptions) using Interworking Functions(IWF)-which allows communication between networks that use different protocols. The key contribution of this paper is the the detailed explanation of novel attack vectors to obtain the user location information using IWF and hence, the proof that even new LTE network can be vulnerable to legacy attacks. Furthermore, we will outline some of the potential protection approaches for the attacks that we discuss.

AlkuperäiskieliEnglanti
Otsikko2016 IFIP Networking Conference (IFIP Networking) and Workshops, IFIP Networking 2016
KustantajaIEEE
Sivut315-322
Sivumäärä8
ISBN (elektroninen)978-3-9018-8283-8
DOI - pysyväislinkit
TilaJulkaistu - 21 kesäkuuta 2016
OKM-julkaisutyyppiA4 Artikkeli konferenssijulkaisuussa
TapahtumaIFIP Networking Conference and Workshops - Vienna, Itävalta
Kesto: 17 toukokuuta 201619 toukokuuta 2016

Conference

ConferenceIFIP Networking Conference and Workshops
MaaItävalta
KaupunkiVienna
Ajanjakso17/05/201619/05/2016

Sormenjälki

Sukella tutkimusaiheisiin 'User location tracking attacks for LTE networks using the interworking functionality'. Ne muodostavat yhdessä ainutlaatuisen sormenjäljen.

Siteeraa tätä