PHOENIX：使用GPRS验证的设备中心蜂窝网络协议监控
PHOENIX: Device-Centric Cellular Network Protocol Monitoring using Runtime Verification
摘要：
当前蜂窝生态系统中的终端用户设备容易在不同代和协议层中存在许多不同的漏洞。回顾性地修复这些漏洞可能是昂贵的，具有挑战性的，或者根本不可行。处理这样一组不同的漏洞的实用方法是在设备端的运行时识别攻击尝试，并通过缓解和纠正措施阻止它们。为了实现这一目标，在本文中，我们提出了一种通用的和可扩展的方法，称为凤凰识别n天的蜂窝网络控制平面的漏洞，以及危险的做法，网络运营商从设备的有利位置。Phoenix通过轻量级运行时验证技术监控设备端蜂窝网络流量，以执行基于签名的意外行为检测。Phoenix中的签名可以由蜂窝网络安全专家手动制作，也可以使用Phoenix的可选组件自动合成，这将签名合成问题简化为从线人问题中学习语言。基于检测到不良行为时Phoenix可用的纠正措施，Phoenix的不同实例是可能的：部署在基带处理器内的全面防御;部署为移动应用程序时的用户警告系统;用于识别野外攻击的探测器。Phoenix的一个这样的实例能够识别我们评估中考虑的4G LTE网络的所有15个代表性n天漏洞和不安全做法，具有高数据包处理速度（约68000个数据包/秒），同时仅引起中等量的能量开销（约4 mW）。
英文摘要：
End-user-devices in the current cellular ecosystem are prone to many different vulnerabilities across different generations and protocol layers. Fixing these vulnerabilities retrospectively can be expensive, challenging, or just infeasible. A pragmatic approach for dealing with such a diverse set of vulnerabilities would be to identify attack attempts at runtime on the device side, and thwart them with mitigating and corrective actions. Towards this goal, in the paper we propose a general and extendable approach called Phoenix for identifying n-day cellular network control-plane vulnerabilities as well as dangerous practices of network operators from the device vantage point. Phoenix monitors the device-side cellular network traffic for performing signature-based unexpected behavior detection through lightweight runtime verification techniques. Signatures in Phoenix can be manually-crafted by a cellular network security expert or can be automatically synthesized using an optional component of Phoenix, which reduces the signature synthesis problem to the language learning from the informant problem. Based on the corrective actions that are available to Phoenix when an undesired behavior is detected, different instantiations of Phoenix are possible: a full-fledged defense when deployed inside a baseband processor; a user warning system when deployed as a mobile application; a probe for identifying attacks in the wild. One such instantiation of Phoenix was able to identify all 15 representative n-day vulnerabilities and unsafe practices of 4G LTE networks considered in our evaluation with a high packet processing speed (~68000 packets/second) while inducing only a moderate amount of energy overhead (~4mW).
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
