NDLI: A man-in-the-middle attack on UMTS

Please wait, while we are loading the content...

Trust evaluation in ad-hoc networks

RFID: security and privacy for five-cent wireless devices (abstract only)

Security considerations for IEEE 802.15.4 networks

Visualization of wormholes in sensor networks

A framework for wireless LAN monitoring and its applications

JANUS: towards robust and malicious resilient routing in hybrid wireless networks

Analysis of the 802.11i 4-way handshake

Mobility-based anomaly detection in cellular mobile networks

Channel surfing and spatial retreats: defenses against wireless denial of service

SeRLoc: secure range-independent localization for wireless sensor networks

A man-in-the-middle attack on UMTS

A man-in-the-middle attack on UMTS

Content Provider	ACM Digital Library
Author	Meyer, Ulrike Wetzel, Susanne
Abstract	In this paper we present a man-in-the-middle attack on the Universal Mobile Telecommunication Standard (UMTS), one of the newly emerging 3G mobile technologies. The attack allows an intruder to impersonate a valid GSM base station to a UMTS subscriber regardless of the fact that UMTS authentication and key agreement are used. As a result, an intruder can eavesdrop on all mobile-station-initiated traffic.Since the UMTS standard requires mutual authentication between the mobile station and the network, so far UMTS networks were considered to be secure against man-in-the-middle attacks. The network authentication defined in the UMTS standard depends on both the validity of the authentication token and the integrity protection of the subsequent security mode command.We show that both of these mechanisms are necessary in order to prevent a man-in-the middle attack. As a consequence we show that an attacker can mount an impersonation attack since GSM base stations do not support integrity protection. Possible victims to our attack are all mobile stations that support the UTRAN and the GSM air interface simultaneously. In particular, this is the case for most of the equipment used during the transition phase from 2G (GSM) to 3G (UMTS) technology.
Starting Page	90
Ending Page	97
Page Count	8
File Format	PDF
ISBN	158113925X
DOI	10.1145/1023646.1023662
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2004-10-01
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Gsm Authentication Mobile communication Man-in-the-middle attack Umts
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in