Unauthorized access to the communication base station

What is ecurity threat by impersonating legitimate base stations (BSES)?

ecurity threat by impersonating legitimate base stations (BSes). Though efforts have been made to defeat this threat, up to this day, the presence of FBSes and the multi-step attacks (MSAs) stemming from them can lead to unauthorized surveillance, intercepti

What happens if user equipment connects to a fake base station?

Once the benign user equipment connects to the fake base station at the RRC layer, the adversary can launch a protocol downgrade from 5G/4G to 2G (i.e., bidding down) attack ; user equipment device identification attack ; SMS phishing attack [10, 11]; or an attack that drains the user equipment battery [9, 12].

Can user equipment evade a fake base station attack after detection?

We also implemented and validated link routing to show that the user equipment can evade a fake base station attack after detection. In the implementation, we showed that our scheme reduces the fake base station availability threat impact from an infinite time duration (without our scheme defense) to only 2.93 s (with our scheme defense).

When does the user equipment connect to the base station?

In this experiment, the user equipment connects to the base station only when the base station transmission power is greater than or equal to 80 dBm. Figure 6. Faulty but legitimate base station experimentation measurements at the user equipment level while varying transmission power at the base station.

Why do fake base station attacks not detect MSAs?

cause they work only in the data plane, they cannot detect MSAs. Recently, researchers have used simulation models to analyze fake base station attacks on a large sca e , but they fail to capture different real-world scenarios. Previous works have shown that information related to the connection between a UE and a BS can be used

Why are broadcasting messages not protected?

Mobile devices or user equipment (UE) listen to these broadcasting messages, select an appropriate cellular cell and connect to the cell and the mobile network. Because of practical challenges, broadcasting messages aren’t protected for confidentiality, authenticity or integrity.