Table of Contents
Fetching ...

Scalable and Robust Mobile Activity Fingerprinting via Over-the-Air Control Channel in 5G Networks

Gunwoo Yoon, Byeongdo Hong

TL;DR

An efficient deep learning-based mobile traffic classification method that eliminates the need for manual feature extraction, enabling scalability across various applications while maintaining high performance even in scenarios with data loss is proposed.

Abstract

5G has undergone significant changes in its over-the-air control channel architecture compared to legacy networks, aimed at enhancing performance. These changes have unintentionally strengthened the security of control channels, reducing vulnerabilities in radio channels for attackers. However, based on our experimental results, less than 10% of Physical Downlink Control Channel (PDCCH) messages could be decoded using sniffers. We demonstrate that even with this limited data, cell scanning and targeted user mobile activity tracking are feasible. This privacy attack exposes the number of active communication channels and reveals the mobile applications and their usage time. We propose an efficient deep learning-based mobile traffic classification method that eliminates the need for manual feature extraction, enabling scalability across various applications while maintaining high performance even in scenarios with data loss. We evaluated the effectiveness of our approach using both an open-source testbed and a commercial 5G testbed, demonstrating the feasibility of mobile activity fingerprinting and targeted attacks. To the best of our knowledge, this is the first study to track mobile activity over-the-air using PDCCH messages.

Scalable and Robust Mobile Activity Fingerprinting via Over-the-Air Control Channel in 5G Networks

TL;DR

An efficient deep learning-based mobile traffic classification method that eliminates the need for manual feature extraction, enabling scalability across various applications while maintaining high performance even in scenarios with data loss is proposed.

Abstract

5G has undergone significant changes in its over-the-air control channel architecture compared to legacy networks, aimed at enhancing performance. These changes have unintentionally strengthened the security of control channels, reducing vulnerabilities in radio channels for attackers. However, based on our experimental results, less than 10% of Physical Downlink Control Channel (PDCCH) messages could be decoded using sniffers. We demonstrate that even with this limited data, cell scanning and targeted user mobile activity tracking are feasible. This privacy attack exposes the number of active communication channels and reveals the mobile applications and their usage time. We propose an efficient deep learning-based mobile traffic classification method that eliminates the need for manual feature extraction, enabling scalability across various applications while maintaining high performance even in scenarios with data loss. We evaluated the effectiveness of our approach using both an open-source testbed and a commercial 5G testbed, demonstrating the feasibility of mobile activity fingerprinting and targeted attacks. To the best of our knowledge, this is the first study to track mobile activity over-the-air using PDCCH messages.
Paper Structure (31 sections, 7 figures, 4 tables)

This paper contains 31 sections, 7 figures, 4 tables.

Figures (7)

  • Figure 1: Procedure for Obtaining DCI through PDCCH
  • Figure 2: Classification Model Used in This Paper
  • Figure 3: Time to Application Classification in srsRAN 5G Testbed with the 5G sniffer
  • Figure 4: Confusion Matrix with DCI Instance Window Size of 40 in srsRAN 5G Testbed
  • Figure 5: Confusion Matrix with DCI Instance Window Size of 100 in srsRAN 5G Testbed
  • ...and 2 more figures