期刊
IEEE COMMUNICATIONS SURVEYS AND TUTORIALS
卷 22, 期 2, 页码 1337-1371出版社
IEEE-INST ELECTRICAL ELECTRONICS ENGINEERS INC
DOI: 10.1109/COMST.2020.2971757
关键词
SS7 vulnerabilities; SS7 attacks; tracking mobile subscribers; call interception; SMS interception; SMS fraud; machine learning; rule based filtering
资金
- Higher Education Commission (HEC), Pakistan, through its initiative of National Center for Cyber Security for the affiliated lab National Cyber Security Auditing and Evaluation Lab [2(1078)/HEC/ME/2018/707]
The Signalling System No. 7 (SS7) is used in GSM/UMTS telecommunication technologies for signalling and management of communication. It was designed on the concept of private boundary walled technology having mutual trust between few national/multinational operators with no inherent security controls in 1970s. Deregulation, expansion, and merger of telecommunication technology with data networks have vanquished the concept of boundary walls hence increasing the number of service providers, entry points, and interfaces to the SS7 network, which made it vulnerable to serious attacks. The SS7 exploits can be used by attackers to intercept messages, track a subscriber's location, tape/redirect calls, adversely affect disaster relief operations, drain funds of individuals from banks in combination with other methods and send billions of spam messages. This paper provides a comprehensive review of the SS7 attacks with detailed methods to execute attacks, methods to enter the SS7 core network, and recommends safeguards against the SS7 attacks. It also provides a machine learning based framework to detect anomalies in the SS7 network which is compared with rule based filtering. It further presents a conceptual model for the defense of network.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据