Re: GPRS Security

[Johan Mellberg <johan.mellberg () gmail com>]

On 7/15/05, dinckan () uekae tubitak gov tr <dinckan () uekae tubitak gov tr> wrote:
> Hi,
>
> Does anybody knows well known threats and vulnerabilities in the GPRS
> system? We are working on a master thesis named how to deploy secure GPRS
> network. we searched google but couldn't get enough information. We need
> something new about GPRS threats.
If you want something new it's not well-known, is it? Sorry, just
nitpicking... ;-)

Anyway, why not take a look at the papers by Ulrike Meyer and Susanne
Wetzel (one of them being "ON THE IMPACT OF GSM ENCRYPTION AND
MAN-IN-THE-MIDDLE ATTACKS ON THE SECURITY OF INTEROPERATING GSM/UMTS
NETWORKS"), from late 2004 IIRC. The issues were discussed in 3gpp and
there is an analysis available from www.3gpp.org, can't readily find
the link though.

In general you might want to take a look at the contributions to the
SA3 meetings, as SA3 is responsible for security issues in GSM and
UMTS. Quick googling turned up for instance
http://www.3gpp.org/ftp/tsg_sa/WG3_Security/TSGS3_37_Sophia/Docs/PDF/S3-050068.pdf,
which contains several interesting references.

/Johan