MobileAtlas: Geographically Decoupled Measurements in Cellular Networks for Security and Privacy Research

• URL: http://arxiv.org/abs/2403.08507v1
• Date: Wed, 13 Mar 2024 13:15:13 GMT
• Title: MobileAtlas: Geographically Decoupled Measurements in Cellular Networks for Security and Privacy Research
• Abstract summary: We build a framework that geographically decouples the SIM from the cellular modem by connecting both remotely. This allows testing any subscriber with any operator at any modem location within minutes without moving parts. Using the framework, our international experiments in commercial networks revealed exploitable inconsistencies in traffic metering.
• Score: 3.4367774917927596
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Cellular networks are not merely data access networks to the Internet. Their distinct services and ability to form large complex compounds for roaming purposes make them an attractive research target in their own right. Their promise of providing a consistent service with comparable privacy and security across roaming partners falls apart at close inspection. Thus, there is a need for controlled testbeds and measurement tools for cellular access networks doing justice to the technology's unique structure and global scope. Particularly, such measurements suffer from a combinatorial explosion of operators, mobile plans, and services. To cope with these challenges, we built a framework that geographically decouples the SIM from the cellular modem by selectively connecting both remotely. This allows testing any subscriber with any operator at any modem location within minutes without moving parts. The resulting GSM/UMTS/LTE measurement and testbed platform offers a controlled experimentation environment, which is scalable and cost-effective. The platform is extensible and fully open-sourced, allowing other researchers to contribute locations, SIM cards, and measurement scripts. Using the above framework, our international experiments in commercial networks revealed exploitable inconsistencies in traffic metering, leading to multiple phreaking opportunities, i.e., fare-dodging. We also expose problematic IPv6 firewall configurations, hidden SIM card communication to the home network, and fingerprint dial progress tones to track victims across different roaming networks and countries with voice calls.

Related papers

• Democratizing Measurement of Critical Mobile Infrastructure: Security and Privacy in an Increasingly Centralized Communication Ecosystem [1.1168121941015015]
  This dissertation introduces new approaches for independent, scalable, and reproducible measurements of mobile communication systems.<n>We design, implement, and open-source measurement platforms that enable controlled experiments across cellular radio networks, operator-provided services, and OTT messaging applications.
  arXiv  Detail & Related papers  (2026-05-11T16:33:11Z)
• SLEI3D: Simultaneous Exploration and Inspection via Heterogeneous Fleets under Limited Communication [10.496161804810473]
  This work proposes a novel planning and coordination framework (SLEI3D) that integrates the online strategies for collaborative 3D exploration, adaptive inspection and timely communication.<n>The proposed framework is validated extensively via high-fidelity simulations of numerous large-scale missions with up to 48 robots and 384 thousand cubic meters.
  arXiv  Detail & Related papers  (2026-01-01T02:06:35Z)
• Improving Outdoor Multi-cell Fingerprinting-based Positioning via Mobile Data Augmentation [2.0065923589074735]
  This paper introduces a lightweight, modular mobile data augmentation framework designed to enhance multi-cell fingerprinting-based positioning.<n>The framework offers a practical, low-complexity path to enhance operator positioning services using existing mobile data traces.
  arXiv  Detail & Related papers  (2025-09-23T09:09:45Z)
• SIMulator: SIM Tracing on a (Pico-)Budget [3.754432513371976]
  SIM tracing has become a significant technique in cellular network research.<n>This work aims to make SIM tracing accessible to a broader community of researchers and hobbyists.
  arXiv  Detail & Related papers  (2025-06-25T19:44:18Z)
• Smooth Handovers via Smoothed Online Learning [48.953313950521746]
  We first analyze an extensive dataset from a commercial mobile network operator (MNO) in Europe with more than 40M users, to understand and reveal important features and performance impacts on HOs. Our findings highlight a correlation between HO failures/delays, and the characteristics of radio cells and end-user devices. We propose a realistic system model for smooth and accurate HOs that extends existing approaches by incorporating device and cell features on HO optimization.
  arXiv  Detail & Related papers  (2025-01-14T13:16:33Z)
• Toward Mixture-of-Experts Enabled Trustworthy Semantic Communication for 6G Networks [82.3753728955968]
  We introduce a novel Mixture-of-Experts (MoE)-based SemCom system. This system comprises a gating network and multiple experts, each specializing in different security challenges. The gating network adaptively selects suitable experts to counter heterogeneous attacks based on user-defined security requirements. A case study in vehicular networks demonstrates the efficacy of the MoE-based SemCom system.
  arXiv  Detail & Related papers  (2024-09-24T03:17:51Z)
• CellularLint: A Systematic Approach to Identify Inconsistent Behavior in Cellular Network Specifications [12.370608043864944]
  We introduce a semi-automatic framework for inconsistency detection within the standards of 4G and 5G. Our proposed method uses a revamped few-shot learning mechanism on domain-adapted large language models. In our investigation, we focused on the Non-Access Stratum (NAS) and the security specifications of 4G and 5G networks, ultimately uncovering 157 inconsistencies with 82.67% accuracy.
  arXiv  Detail & Related papers  (2024-07-18T17:48:46Z)
• Why E.T. Can't Phone Home: A Global View on IP-based Geoblocking at VoWiFi [0.0]
  Many operators use VoWiFi as an alternative network access technology to complement their cellular coverage in areas where no radio signal is available. To not lose this revenue stream, some operators block access to the IMS for customers staying abroad. This work evaluates the current deployment status of VoWiFi among worldwide operators and analyzes existing geoblocking measures on the IP layer.
  arXiv  Detail & Related papers  (2024-03-18T13:12:56Z)
• A Prototype on the Feasibility of Learning Spatial Provenance in XBee and LoRa Networks [0.732582506267845]
  In Vehicle-to-Everything (V2X) networks, Road Side Units (RSUs) typically desire to gather the location information of the participating vehicles to provide security and network-diagnostics features. We propose a new spatial-provenance framework wherein the vehicles agree to compromise their privacy to a certain extent and share a low-precision variant of its coordinates in agreement with the demands of the RSU. Our demonstrations reveal that low-to-moderate precision localization can be achieved in fewer packets, thus making an appealing case for next-generation vehicular networks to include our methods for providing real-time security and network-
  arXiv  Detail & Related papers  (2024-01-12T15:36:28Z)
• Physical-Layer Semantic-Aware Network for Zero-Shot Wireless Sensing [74.12670841657038]
  Device-free wireless sensing has recently attracted significant interest due to its potential to support a wide range of immersive human-machine interactive applications. Data heterogeneity in wireless signals and data privacy regulation of distributed sensing have been considered as the major challenges that hinder the wide applications of wireless sensing in large area networking systems. We propose a novel zero-shot wireless sensing solution that allows models constructed in one or a limited number of locations to be directly transferred to other locations without any labeled data.
  arXiv  Detail & Related papers  (2023-12-08T13:50:30Z)
• Enabling Decision-Support Systems through Automated Cell Tower Detection [0.0]
  Cell phone coverage and high-speed service gaps persist in sub-Saharan Africa. Deep neural networks, paired with remote sensing images, can be used for object detection of cell towers. In this study, we demonstrate a partially automated workflow to train an object detection model to locate cell towers.
  arXiv  Detail & Related papers  (2023-11-14T01:40:08Z)
• Multi-Base Station Cooperative Sensing with AI-Aided Tracking [10.400855135405251]
  We investigate a joint sensing and communication network consisting of multiple base stations (BSs) that cooperate through a fusion center (FC) We show that our framework could provide remarkable sensing performance, achieving an optimal sub-pattern assignment (OSPA) less than 60 cm.
  arXiv  Detail & Related papers  (2023-10-31T12:27:48Z)
• Berlin V2X: A Machine Learning Dataset from Multiple Vehicles and Radio Access Technologies [56.77079930521082]
  We have conducted a detailed measurement campaign that paves the way to a plethora of diverse ML-based studies. The resulting datasets offer GPS-located wireless measurements across diverse urban environments for both cellular (with two different operators) and sidelink radio access technologies. We provide an initial analysis of the data showing some of the challenges that ML needs to overcome and the features that ML can leverage.
  arXiv  Detail & Related papers  (2022-12-20T15:26:39Z)
• Mobile Behavioral Biometrics for Passive Authentication [65.94403066225384]
  This work carries out a comparative analysis of unimodal and multimodal behavioral biometric traits. Experiments are performed over HuMIdb, one of the largest and most comprehensive freely available mobile user interaction databases. In our experiments, the most discriminative background sensor is the magnetometer, whereas among touch tasks the best results are achieved with keystroke.
  arXiv  Detail & Related papers  (2022-03-14T17:05:59Z)
• Unsatisfied Today, Satisfied Tomorrow: a simulation framework for performance evaluation of crowdsourcing-based network monitoring [68.8204255655161]
  We propose an empirical framework tailored to assess the quality of the detection of under-performing cells. The framework simulates both the processes of satisfaction surveys delivery and users satisfaction prediction. We use the simulation framework to test empirically the performance of under-performing sites detection in general scenarios.
  arXiv  Detail & Related papers  (2020-10-30T10:03:48Z)
• A Comprehensive Overview on 5G-and-Beyond Networks with UAVs: From Communications to Sensing and Intelligence [152.89360859658296]
  5G networks need to support three typical usage scenarios, namely, enhanced mobile broadband (eMBB), ultra-reliable low-latency communications (URLLC) and massive machine-type communications (mMTC) On the one hand, UAVs can be leveraged as cost-effective aerial platforms to provide ground users with enhanced communication services by exploiting their high cruising altitude and controllable maneuverability in 3D space. On the other hand, providing such communication services simultaneously for both UAV and ground users poses new challenges due to the need for ubiquitous 3D signal coverage as well as the strong air-ground network interference.
  arXiv  Detail & Related papers  (2020-10-19T08:56:04Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.