A Denial of Service Attack to GSM Networks via Attach Procedure

  • Nicola Gobbo
  • Alessio Merlo
  • Mauro Migliardi
Conference paper

DOI: 10.1007/978-3-642-40588-4_25

Part of the Lecture Notes in Computer Science book series (LNCS, volume 8128)
Cite this paper as:
Gobbo N., Merlo A., Migliardi M. (2013) A Denial of Service Attack to GSM Networks via Attach Procedure. In: Cuzzocrea A., Kittl C., Simos D.E., Weippl E., Xu L. (eds) Security Engineering and Intelligence Informatics. CD-ARES 2013. Lecture Notes in Computer Science, vol 8128. Springer, Berlin, Heidelberg

Abstract

Mobile Network Operators (MNOs) keep a strict control over users accessing the networks by means of the Subscriber Identity Module (SIM). This module grants the user access to the network, by performing the registration and authentication of the user’s device. Without a valid Subscribe IdentityModule (SIM) module and a successful authentication, mobile devices are not granted access and, hence, they are not allowed to inject any traffic in the mobile infrastructure. Nevertheless, in this paper we describe an attack to the security of a mobile network allowing an unauthenticated malicious mobile device to inject traffic in the mobile operator’s infrastructure. We show that even with devices without any SIM module it is possible to inject high levels of signaling traffic in the mobile infrastructure, causing significant service degradation up to a full-fledged Denial of Service (DoS) attack.

Keywords

Mobile Security GSM cellular networks security DoS attack 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© IFIP International Federation for Information Processing 2013

Authors and Affiliations

  • Nicola Gobbo
    • 1
  • Alessio Merlo
    • 2
  • Mauro Migliardi
    • 1
  1. 1.Università degli Studi di PadovaItaly
  2. 2.Università degli Studi E-CampusItaly

Personalised recommendations