Attestation of mobile baseband stacks

  • Authors:
  • Steffen Wagner;Sascha Wessel;Frederic Stumpf

  • Affiliations:
  • Fraunhofer Research Institution AISEC, Garching, Germany;Fraunhofer Research Institution AISEC, Garching, Germany;Fraunhofer Research Institution AISEC, Garching, Germany

  • Venue:
  • NSS'12 Proceedings of the 6th international conference on Network and System Security
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Distributed denial of service (DDoS) attacks from a large number of compromised mobile devices are a major threat to mobile networks. In this paper, we present a concept, an architecture, and a protocol for a hardware-based attestation which enables mobile devices to efficiently prove that their baseband stack is still trustworthy. Our attestation mechanism enables verification of the baseband stack without using expensive asymmetric cryptographic operations, maintains the ability to update (or recover) the baseband binary, and allows the network to enforce a certain version, state, or configuration of the baseband at network connect. Our approach represents an efficient method to block devices with a compromised baseband stack and thus prevents distributed denial of service attacks to mobile networks.