Monday, January 08, 2007

Exploiting Open Functionality in SMS-Capable Cellular Networks

Accepted at the 12th ACM Conference on Computer and Communications Security (CCS'05)November 7-11, 2005, Alexandria, VA, USA

Cellular networks are a critical component of the economic and social infrastructures in which we live. In addition to voice services, these networks deliver alphanumeric text messages to the vast majority of wireless subscribers. To encourage the expansion of this new service, telecommunications companies offer connections between their networks and the Internet. The ramifications of such connections, however, have not been fully recognized.

This research evaluates the security impact of the Short Messaging Service (SMS) interface on the availability of the cellular phone network. Specifically, we demonstrate the ability to deny voice service to large metropolitan areas with little more than a cable modem. Moreover, attacks targeting the entire United States are feasible with resources available to medium-sized zombie networks.

We characterize network behavior and explore a number of reconnaissance techniques aimed at effectively targeting attacks on these systems. We also discuss a number of countermeasures that mitigate or eliminate the threats introduced by these attacks that must be implemented by cellular service providers in the near future.
for more information follow this link-http://www.smsanalysis.org/

No comments: