TWC: Small: Collaborative: Cellular Network Services in Peril: A Perspective on Control-Plane and Data-Plane Design

TWC：小型：协作：危险中的蜂窝网络服务：控制平面和数据平面设计的视角

• 批准号: 1749045
• 负责人: Chunyi Peng
• 金额: $ 23.5万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-08-25 至 2020-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1749045&HistoricalAwards=false
• 关键词: TWC; Small; Collaborative; Cellular; Network

The cellular network is the largest wireless infrastructure deployed today. It offers users mobile Internet access and carrier-grade voice service. Each such service (e.g., data or voice) typically involves operations on both data and control planes. The former transfers service content to users, whereas the latter performs control functions of service instantiation, maintenance, update, and termination. Securing control and data planes is thus critical to mobile network service. Different from the Internet built upon the single best-effort delivery, the fourth-generation (4G) mobile network supports diversified service models. It not only provides multiple priorities within the network (e.g., voice has higher priority than data), but also carries control and data over different radio channels. Consequently, given a service (e.g., voice, video, or messaging), its control-plane and data-plane operations open new venues for security research. This project aims to study both planes in 4G networks from the security perspective. The success of this research will not only protect the trillion-dollar market of mobile voice for billions of smartphone users, but also safeguard the mobile Internet access from attacks initiated by malicious calls. The proposed activity may influence the upcoming 5G technology standardization and train a new generation of engineers and students.The proposed research has two main thrusts. One is the insecurity analysis of 4G network services. This project examines the control and data planes and their coordination. It conducts thorough theoretical analysis to uncover all potential vulnerabilities, explores novel attacks, and empirically validates those practical threats. The other is to propose defenses to secure both planes from such threats. The solution calls for concerted efforts between the network and the user, and between hardware and software. This project seeks to make three contributions: (1) Systematic disclosure of insecurity on the control-plane and data-plane operations: Both incur new breaches that current defense measures fail to protect; (2) Identification of diverse root causes: Mobile standards stipulate loose regulations, whereas device software and hardware assume protection from each other. As both planes become more accessible to smartphones, no new protection mechanisms are in place. (3) Solution that secures both control-plane and data-plane operations: It adds protection at both hardware and software at mobile devices, and inside the network infrastructure. It further leverages device capabilities while preserving flexible network services.

蜂窝网络是当今部署的最大无线基础架构。它为用户提供移动互联网访问和运营商级的语音服务。每个这样的服务（例如，数据或语音）通常涉及对数据和控制平面的操作。前者将服务内容转移给用户，而后者则执行服务实例化，维护，更新和终止的控制功能。因此，确保控制和数据平面对于移动网络服务至关重要。与单一最佳富度交付的互联网不同，第四代（4G）移动网络支持多元化的服务模型。它不仅提供了网络中的多个优先级（例如，语音比数据具有更高的优先级），而且在不同的无线电通道上具有控制和数据。因此，给定服务（例如语音，视频或消息传递），其控制平面和数据平面操作为安全研究开放了新的场所。该项目旨在从安全角度研究4G网络中的这两个飞机。这项研究的成功不仅将为数十亿个智能手机用户保护数万亿美元的移动语音市场，而且还保护移动互联网访问权限免受恶意电话发起的攻击。拟议的活动可能会影响即将到来的5G技术标准化，并培训新一代的工程师和学生。拟议的研究有两个主要推力。一个是对4G网络服务的不安全感分析。该项目检查了控制和数据平面及其协调。它进行了彻底的理论分析，以发现所有潜在的脆弱性，探索新颖的攻击并经验验证这些实际威胁。另一个是提出防御措施，以保护这两个飞机免受此类威胁。该解决方案要求网络与用户之间以及硬件和软件之间进行一致的努力。该项目旨在做出三个贡献：（1）系统地披露对控制平面和数据平面操作的不安全感：两者都遇到了当前国防措施无法保护的新违规行为； （2）识别各种根本原因：移动标准规定了宽松的法规，而设备软件和硬件则相互保护。随着智能手机越来越易于​​使用，没有新的保护机制。 （3）可以确保控制平面和数据平面操作的解决方案：它在移动设备以及网络基础架构内的硬件和软件上都添加了保护。它进一步利用设备功能，同时保留灵活的网络服务。

项目成果

CEIVE: Combating Caller ID Spoofing on 4G Mobile Phones Via Callee-Only Inference and Verification

• DOI: 10.1145/3241539.3241573
• 发表时间: 2018-10
• 期刊: Proceedings of the 24th Annual International Conference on Mobile Computing and Networking
• 作者: Haotian Deng;Weicheng Wang;Chunyi Peng