Skip to Content - Skip to Navigation

Abstract: Vulnerabilities and Opportunities in SMS-Capable Cellular Networks

Title: Vulnerabilities and Opportunities in SMS-Capable Cellular Networks

Abstract:
Cellular networks are a critical component of the economic and social infrastructures in which we live. In addition to voice services, these networks deliver alphanumeric text messages to the vast majority of wireless subscribers. To encourage the expansion of this new service, telecommunications companies offer connections between their networks and the Internet. The ramifications of such connections, however, have not been fully recognized.

In this talk, we evaluate the security impact of the SMS interface on the availability of the cellular phone network. Specifically, we demonstrate the ability to deny voice service to cities the size of Washington, D.C., and Manhattan with little more than a cable modem. Moreover, attacks targeting the entire United States are feasible with resources available to medium-sized zombie networks. This analysis begins with an exploration of the structure of cellular networks. We then characterize network behavior and explore a number of reconnaissance techniques aimed at effectively targeting attacks on these systems. We conclude by discussing counter-measures that mitigate or eliminate the threats introduced by these attacks, and identify opportunities and requirements for the security infrastructure of the next generation cellular networks. This work was reported in CCN, MSNBC, New York Times, Reuters, The Associated Press, and many other venues of the popular press.

For more detail: SMS Analysis

2014 Information Assurance Day

The Institute for Information Assurance at IUP, in collaboration with the IT Support Center and the Computer Science Department, will host the seventh annual Information Assurance Day on October 30.

Posted on 9/25/2014 2:41:17 PM

NSA Opportunities for Cyber Professionals

The National Security Agency has a number of openings for full-time positions in all of its mission areas. Students receiving degrees in computer science, computer engineering, electrical engineering, software engineering, systems engineering, or other information security and cyber-related disciplines are encouraged to apply.

Posted on 9/25/2014 3:10:30 PM

  • Computer Science Department
  • Stright Hall, Room 319
    210 South Tenth Street
    Indiana, PA 15705
  • Phone: 724-357-2524
  • Fax: 724-357-2724
  • Office Hours
  • Monday through Friday
  • 7:30 a.m. – 12:00 p.m.
  • 1:00 p.m. – 4:00 p.m.