Exploiting open functionality in SMS-capable cellular networks

Cellular networks are a critical component of the economic and social infrastructures in which we live. In addition to voice services, these networks deliver alphanumeric text messages to the vast majority of wireless subscribers. To encourage the expansion of this new service, telecommunications companies offer connections between their networks and the Internet. The ramifications of such connections, however, have not been fully recognized. In this paper, we evaluate the security impact of the SMS interface on the availability of the cellular phone network. Specifically, we demonstrate the ability to deny voice service to cities the size of Washington D.C. and Manhattan with little more than a cable modem. Moreover, attacks targeting the entire United States are feasible with resources available to medium-sized zombie networks. This analysis begins with an exploration of the structure of cellular networks. We then characterize network behavior and explore a number of reconnaissanc...

• Type: Conference
• Year: 2005
• Where: CCS
• Authors: William Enck, Patrick Traynor, Patrick McDaniel, Thomas F. La Porta
• Keywords: CCS 2005, Cellular Networks, Medium-sized Zombie Networks, Security Privacy, Voice Service