Security Threats to Voice Services in 5G Standalone Networks

Cui, Zhiwei; Cui, Baojiang; Fu, Junsong; Dong, Renhai

doi:10.1155/2022/7395128

Cited by 7 publications

(1 citation statement)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Zheng et al [23] find one vulnerability in Circuit Switched Fallback (CSFB) where the authentication step is missing, which allows an attacker to impersonate a victim. Cui et al [24] point out that the attacker can impersonate victims to register to IP Multimedia Subsystem (IMS) by exploiting the 3GPP protocol flaws and unsecure practices of operators. Most relevant to our research is the impersonation attack based on the security context stored in the USIM card [8].…”

Section: Related Workmentioning

confidence: 99%

Attacks Against Security Context in 5G Network

Cui¹,

Cui²,

Li³

et al. 2023

Preprint

View full text Add to dashboard Cite

The security context used in 5G authentication is generated during the Authentication and Key Agreement (AKA) procedure and stored in both the user equipment (UE) and the network sides for the subsequent fast registration procedure. Given its importance, it is imperative to formally analyze the security mechanism of the security context. The security context in the UE can be stored in the Universal Subscriber Identity Module (USIM) card or in the baseband chip. In this work, we present a comprehensive and formal verification of the fast registration procedure based on the security context under the two scenarios in ProVerif. Our analysis identifies two vulnerabilities, including one that has not been reported before. Specifically, the security context stored in the USIM card can be read illegally, and the validity checking mechanism of the security context in the baseband chip can be bypassed. Moreover, these vulnerabilities also apply to 4G networks. As a consequence, an attacker can exploit these vulnerabilities to register to the network with the victim's identity and then launch other attacks, including one-tap authentication bypass leading to privacy disclosure, location spoofing, etc. To ensure that these attacks are indeed realizable in practice, we have responsibly confirmed them through experimentation in three operators. Our analysis reveals that these vulnerabilities stem from design flaws of the standard and unsafe practices by operators. We finally propose several potential countermeasures to prevent these attacks. We have reported our findings to the GSMA and received a coordinated vulnerability disclosure (CVD) number CVD-2022-0057.

show abstract

Section: Related Workmentioning

confidence: 99%

Attacks Against Security Context in 5G Network

Cui¹,

Cui²,

Li³

et al. 2023

Preprint

View full text Add to dashboard Cite

show abstract

Survey on Joint Paradigm of 5G and SDN Emerging Mobile Technologies: Architecture, Security, Challenges and Research Directions

Kazmi

Qamar

Hassan

et al. 2023

Wireless Pers Commun

View full text Add to dashboard Cite

Modern communication systems are probable to surface new challenges while introducing innovative fronts concerning context consciousness in wireless networks. The main outcome behind this expected technological jump will be a whole novel set of intuiting aptitudes forecasted for Fifth Generation (5G) enabled devices. In line with 5G, Software De ned Networking (SDN) is also rising as an intrinsically novel phenomenon.SDN is an unconventional methodology and key technology in modern communication. SDN maintains favorable novelty about network programmability, where network administration is permitted with extraordinary intellections. SDN architecture has the prospective to allow, simplify or augment security implementations in network through instantly reprogrammable centralized view of the data plane. In the near future, 5G and SDN will ripe mobile communication through the development of state-of-the-art implementations such as a smart city, advanced military security, modern national defense, intelligent tra c, etc.; thereby, these emerging mobile communication concepts invoke various signi cant topics, where security is a paramount implication. Therefore, we initiate our focus from basic architecture of 5G and SDN. Next, we analyze security requirements, solutions and challenges in joint paradigm of 5G and SDN. Further, considering the modern communication technological shift, we discuss future trends and research directions in the joint era of 5G and SDN technologies. IntroductionThe unremitting growth in the capacity and aspects of data apprehended by technological advancements has shaped diversi ed ow of data in either organized or unorganized format such as the rise of social media, Internet of Things (IoTs) for Healthcare [1] and huge multimedia communications. Indeed, the rapid expansion of the Internet industry is considerably dependent on communication system speed, which has emerged as a critical steering factor for the advancement in computer networks [2]. Scienti c advancements are rapidly changing the information technology; thereby computer networks are expanding towards incorporation, dissemination, modi cation and intelligence [3]. The pillar behind this anticipated technological hop will be an entire novel set of aptitudes forecasted for Fifth Generation (5G) communication [4]. 5G is encapsulating all advanced emerging technologies like Arti cial Intelligence (AI) [5]. Within the near future, 5G will reap portable communication organized through the advancement of inventive executions such as smart city, smart grid system, advanced military security etc. So, it is considered fundamental to boost the organized engineering of 5G technology. Likewise, Software De ned Networking (SDN) technology is expanding eminently everywhere globally due to its programmable [6], economical, agile, robust and consolidated networking. 5G is more complex and harder to manage as compared to conventional computer telecommunications and satellite communication systems. SDN is a potential organized design that abridge...

show abstract