Playing with the GSM RF Interface - CCC Event Weblog

More documents

Recommendations

Info

DoS Attack - Theory known for quite some time - However no practical demonstration or implementation ? - Attack possible because of the way an idle phone has to access the GSM network (details later) - Affects one cell - Very early stage, no authentication of the phone yet - No information of the phone has been transferred yet (anonymous attack) - Not much can be done against it, try to locate the attacking mobile
GSM TDMA (Time division multiple access) Diagram derived from Wikipedia (http://en.wikipedia.org/wiki/File:Tdma-frame-structure.png), GNU Free Documentation License applies to this diagram
Page 1 and 2: Playing with the GSM RF Interface 2
Page 3 and 4: Motivation - GSM system and protoco
Page 5 and 6: OpenBTS - Hardware based on the USR
Page 7 and 8: nanoBTS versus BS11
Page 9 and 10: What about an „open“ phone ? -
Page 11: Sniffing the air traffic - (Very) s
Page 15 and 16: Message flow Channel Request If the
Page 17 and 18: Lab results, BTS with 2 TRX Note: A
Page 19 and 20: DoS Attack demonstration setup
Page 21: Questions ?

Playing with the GSM RF Interface - CCC Event Weblog

Create successful ePaper yourself

Delete template?

Save as template?