Electronic fraud base station communication

Can user equipment evade a fake base station attack after detection?

We also implemented and validated link routing to show that the user equipment can evade a fake base station attack after detection. In the implementation, we showed that our scheme reduces the fake base station availability threat impact from an infinite time duration (without our scheme defense) to only 2.93 s (with our scheme defense).

Can a 4G network detect a false base station?

The setup, shown in Figure 3, uses base stations of two network generations, 2G base stations called BTS, and 4G base stations called eNB. The purpose is to verify that a 4G network can be used to detect both 4G and 2G false base stations.

What is a false base station?

Therefore, any base station broadcasting a foreign mobile country code is also a false base station. Similarly, deployment information of its legitimate base stations could be utilized by the network to detect inconsistencies in the measurement reports from devices. One example is to detect invalid identifiers broadcasted by false base stations.

Can a network identify false base stations?

For instance, it is common for false base stations to lure devices by transmitting high power radio signals. Therefore, the network could correlate the received-signal strengths from multiple neighboring base stations reported by devices and potentially identify false base stations.

How accurate is a fake base station?

Our scheme correctly decides the legitimate base station and the fake base station with 100% accuracy, i.e., our scheme yields 0 (no fake base station) for all of the legitimate base station experiments, and it yields 1 (yes base station) for all of the fake base stations.

Can a fake base station exploit randomized selection?

The fake base station cannot exploit the randomized selection to make the user equipment connect to it with 100% probability. An attacker can attempt to launch a threat beyond just availability and disrupting the connectivity, such as attempting to make the victim user equipment connect to a fake server.