Clik here to view.
Updates on “Security and Protocol Exploit Analysis of the 5G Specifications”
We recently released a pre-print of our paper analyzing the 5G security specifications. The idea of releasing the pre-print while the paper is under submission was to get it out there soon and start...
View ArticleThe current state of affairs in 5G security
The first version of the LTE specifications (3GPP Release 8) was published in 2007. For obvious reasons, I am unaware of the state of R&D in LTE security in 3-letter agencies. In the research...
View ArticleA reflection on the history of cellular security research and the security...
(Originally published as a LinkedIn article – Reposted on this blog) About 10 years ago, I started working on mobile and cellular security research. While most of my work in the early days leveraged...
View ArticleClik here to view.
Testing Sniffle, a new sniffing tool for Bluetooth 5 and 4.X LE
A few days ago I read about NCC Group’s Sniffle tool, a BLE sniffer for Bluetooth 4.X and 5. Given my interest and previous track record at looking into the security of BLE devices, I could not stop...
View ArticleClik here to view.
Leveraging Digital Certificates to secure cellular communication networks
For over 10 years I have been identifying and testing a number of exploits in cellular protocols that leverage what I refer to as “pre-authentication message”. In parallel, I have been witnessing the...
View ArticleComments on 3GPP TSG-SA3 proposal S3-202161 – Leveraging digital certificates...
I finally had some time, once I finished reading Do What You Want (highly recommended! Especially if you are a fan of the band like myself), to write a few notes on the first proposal I have ever seen...
View ArticleClik here to view.
Security analysis of 5G traffic
A few months ago, before the world as we knew it changed entirely into this “new normal” we live in, I rode the Acela to DC for a couple of days to give a talk in 5G security at SchmooCon. During the...
View ArticleClik here to view.
Update, and contribution, to to leveraging Digital Certificates to enhance 5G...
A few weeks ago I wrote a blog post about a 3GPP SA3 proposal to leverage Digital Certificates in cellular networks. Despite some aspects in the proposal being far from ideal (as I discussed in the...
View ArticleClik here to view.
Leveraging digital certificates to protect commercial 5G mobile networks
(Cross-post from LinkedIn: https://www.linkedin.com/pulse/leveraging-digital-certificates-protect-commercial-5g-piqueras-jover) Introduction For years, a number of academic teams (TU Berlin, Ruhr...
View ArticleClik here to view.
The different reactions of different phones to IMSI catchers
Over the weekend I stumbled upon this paper: The diverse and variegated reactions of different cellular devices to IMSI catching attacks. I have no idea how this paper fell under my radar, but I...
View Article
