This document provides a review and analysis of GSM security. It begins with an abstract that surveys security for mobile devices and the different connectivity and applications they provide. The document then outlines topics that will be covered, including security analyses of satellite phones, cellular text messaging services, a self-powered GPS tracking system, and location privacy in mobile networks. It reviews relevant literature on these topics and describes the various connectivity options provided by mobile devices. It discusses how security is important for mobile devices due to malware and attacks. It then covers specific topics like how SMS-based malware infections can be throttled by wireless links, security issues with satellite phone standards, a self-powered GPS tracking system for vehicle security, and maintaining location privacy in mobile

1. GSM SECURITY : REVIEW &
ANALYSIS
Presented By : Guided By:
Ankit Mulani Prof. Pratik Patel
Nirali Borad

2. ABSTRACT
 Survey on security for mobile devices.
 Different kind of connectivity and applications provided
by mobile devices.
 There will be security analysis on satellite phones &
cellular text messaging services, self-powered gps
tracking system for vehicle security, location privacy in
mobile telephony networks, etc.

3. Outlines
 Introduction
 Literature review
 Connectivity provided by mobile devices
 Security is must for mobile devices
 SMS-based malware infection
 Security analysis of two satphone standards
 Self-powered GPS tracking system
 Location privacy in mobile telephony networks
 EAS over cellular text messaging services

4. Introduction
 Connectivity Provided by Mobile Devices
 Security is must for Mobile Devices
 SMS-Based Malware Infection Will Get Throttled by the
Wireless Link
 Security Analysis Required for two Satphones
 Self-Powered GPS Tracking System
 Location Privacy in Mobile Telephony Networks
 EAS Over Cellular Text Messaging Services

5. Literature Review
Name Research Name Journal
Mariantonietta La Polla
Fabio Martinelli
Daniele Sgandurra
A Survey on Security for
Mobile Devices
Communications surveys
& tutorials
Benedikt Driessen
Ralf Hund
Carsten Willems
Christof Paar
Thorsten Holz
A Security Analysis of
Two Satphone Standards
IEEE Symposium on
Security and Privacy
Ilona Murynets
Roger Piqueras Jover
How an SMS-Based
Malware Infection Will
Get Throttled by the
Wireless Link
Communication and
Information Systems
Security Symposium

6. Connectivity Provided by Mobile Devices
 Current Mobile Devices offer a Large Selection of Connectivity
Options
 Global System for Mobile communications (GSM)
 General Packet Radio Service (GPRS)
 The Universal Mobile Telecommunications System (UMTS)
 Bluetooth is a Standard that Enables Devices to Exchange Data over
a Small area through short Wavelength Radio Transmissions.

7. Security is must for mobile devices
 By the use of Mobile Devices there are Availability of different kind
of Malwares
 The main Goals of Malware targeted at Smartphones include Theft
of Personal data stored in the Phone or the User’s Credit
 Note that there are different kind of OSes
 There are different methodologies of Attacks in Mobile Devices
 The Main Goals of Attacks are Privacy, Sniffing, Denial of service,
Overbilling
 There are Several kinds of Security Applications who Provides
Security Features

8. SMS-Based Malware Infection Will Get
Throttled by the Wireless Link
 The Short Messaging Service
Centre (SMSC) is the central
node that handles all SMS
traffic in a network
 A query to a data base node
known as Home Location
Registry (HLR) provides the
address of the Mobile Station
Controller (MSC) to which the
phone is attached and the
message is forwarded
 RNC is one type of node which
controls the multiple Base
Stations

9. Continue…

10. Continue…
 The results shows that spreading rate in mobility networks is much
lower than in a regular wired topology.
 The number of transmitted messages is bound to the capacity of the
control channels used to transport SMSs over the wireless link.
 In the case of GSM, the 8 SDCCH channels in each cell will start
clogging when the rate of SMS exceeds 8 transmitted messages
every 5 seconds.

11. Security Analysis of Two Satphone Standards
Problem :
 Satphones do not use the Intel x86 instruction set architecture
 Security aspects of two Satphone Standards are Poorly Documented &
Proprietary
Solution :
 We perform reverse-engineering of firmware images to understand the
inner working of the phones, developing our own disassembler and tools
to analyze the code, and extending prior work on binary analysis to
efficiently identify cryptographic code.
 We perform a formal cryptanalysis of the extracted algorithms and extend
a known attack on GSM for GMR-1 and introduce an entirely new attack
for GMR-2.

12. Self-Powered GPS Tracking System for Vehicle
Security
 The work Presented Addresses the issue of the Vulnerability of
Vehicle Security Systems Especially during Power Sabotage
 Methodology of Self Powered GPS Tracking System
 Vehicle Vibration Profile
 Piezoelectric Generators
 Harvester Architecture
 Energy Storage Unit

13. Shown in Figure the frequency spectrum and the power spectrum both
have 2 peaks at 60Hz and 85Hz respectively. The vibration profile was
replicated in a laboratory environment by using a 300W woofer speaker

14.  In Continues Tracking
mode where data is sent
successively, the system
requires some value to get
a GPS lock and send the
first data and value for
successive transmissions.
 Primary Storage is fully
charged and that data is
being sent every 10s, the
system will be able to
transmit some data for
some duration before the
primary storage is fully
depleted

15. Reclaiming location privacy in mobile telephony
networks
Problem :
 Lack of Transparency in Mobile Telephone Network
eg : Location disclosure
Solution:
 Utility based Opponent Model to formalize the conflict between
mobile telephony infrastructure
 User controllable GSM software stack

16. Locating Mobile Phones
 To cope with subscriber
mobility, the location update
(LU) procedure was introduced
 However, LU procedures
require network resources
 Thus, there is a trade-off for the
service provider between search
costs for signalling and network
load
 Figure Shows, The time lapse
between periodic location
updates is defined by the
network and varies between
infrastructure providers

17. Network Interaction From a Subscriber’s
Perspective
 Figure Shows resulting
frequently visited places
extracted from the recorded
GPS and GSM (24 LU /
day) data
 While the results show some
minor differences, both
methods reveal the same
general pattern. Especially,
the proportions and ranking
of the most significant
places were preserved.

18. EAS Over Cellular Text Messaging Services
Problem:
 Not work as a advertised due to limitation of cellular infrastructure
Solution:
 Targeted messaging mechanism as a means of efficiently using currently
deployed infrastructure and third-party EAS
Limitation:
 Increasingly deployed security infrastructure does not achieve its stated
requirement for large populations

19. Thank You