Conference item
White-Stingray: Evaluating IMSI Catchers Detection Applications
- Abstract:
-
IMSI catchers, also known as fake base station threats, have recently become a real concern. There are currently a few freely available tools to detect such threats, most of which are Android apps that warn users when they are connected to the fake cellular base station.
In this paper, we evaluate these Android apps and test how resistant they are against various attacking techniques. Such an evaluation is important for not only measuring the available defense against IMSI catchers attacks but also identifying gaps to build effective solutions. We developed White-Stingray, a systematic framework with various attacking capabilities in 2G and 3G networks, and used it for our study. Our results of five popular Android apps are worrisome: none of these apps are resistant to basic privacy identifier catching techniques. Based on our results, we identify limitation of these apps and propose remedies for improving the current state of IMSI catchers detection on mobile devices.
- Publication status:
- Published
- Peer review status:
- Peer reviewed
Actions
Authors
- Publisher:
- USENIX
- Host title:
- WOOT 17: 11th USENIX Workshop on Offensive Technologies
- Journal:
- WOOT17: 11th USENIX Workshop on Offensive Technologies More from this journal
- Publication date:
- 2017-08-16
- Acceptance date:
- 2017-06-27
- Pubs id:
-
pubs:707780
- UUID:
-
uuid:15738ed0-c144-49e9-a4fa-466362cf7754
- Local pid:
-
pubs:707780
- Source identifiers:
-
707780
- Deposit date:
-
2017-07-31
Terms of use
- Copyright holder:
- Borgaonkar et al
- Copyright date:
- 2017
- Notes:
- Copyright remains with the owner/author(s). Open Access. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Available online at [https://www.usenix.org/conference/woot17/workshop-program/presentation/park].
If you are the owner of this record, you can report an update to it here: Report update to this record