{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,18]],"date-time":"2025-12-18T13:56:06Z","timestamp":1766066166296,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2011,11,14]],"date-time":"2011-11-14T00:00:00Z","timestamp":1321228800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2011,11,14]]},"DOI":"10.1145\/2070425.2070442","type":"proceedings-article","created":{"date-parts":[[2011,11,21]],"date-time":"2011-11-21T19:55:03Z","timestamp":1321905303000},"page":"95-102","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":19,"title":["Security analysis of a femtocell device"],"prefix":"10.1145","author":[{"given":"Ravishankar","family":"Borgaonkar","sequence":"first","affiliation":[{"name":"Technical University of Berlin & Deutsche Telekom Laboratories, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kevin","family":"Redon","sequence":"additional","affiliation":[{"name":"Technical University of Berlin & Deutsche Telekom Laboratories, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jean-Pierre","family":"Seifert","sequence":"additional","affiliation":[{"name":"Technical University of Berlin & Deutsche Telekom Laboratories, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2011,11,14]]},"reference":[{"volume-title":"June","year":"2011","key":"e_1_3_2_1_1_1","unstructured":"OpenSS7 Project. http:\/\/www.openss7.org , June 2011 . OpenSS7 Project. http:\/\/www.openss7.org, June 2011."},{"key":"e_1_3_2_1_2_1","volume-title":"June","author":"The Network Protocol Analyzer Wireshark","year":"2011","unstructured":"Wireshark - The Network Protocol Analyzer Tool. http:\/\/www.wireshark.org\/ , June 2011 . Wireshark - The Network Protocol Analyzer Tool. http:\/\/www.wireshark.org\/, June 2011."},{"key":"e_1_3_2_1_3_1","volume-title":"Technical Report TS 32.401 V5.5.0","author":"Performance GPP.","year":"2005","unstructured":"3 GPP. Telecommunication management; Performance Management (PM); Concept and requirements. Technical Report TS 32.401 V5.5.0 , March 2005 . 3GPP. Telecommunication management; Performance Management (PM); Concept and requirements. Technical Report TS 32.401 V5.5.0, March 2005."},{"key":"e_1_3_2_1_4_1","volume-title":"Technical Report TR 33.820 v8.3.0, 3G Partnership Project","author":"GPP.","year":"2009","unstructured":"3 GPP. Security of H(e)NB. Technical Report TR 33.820 v8.3.0, 3G Partnership Project , Dec 2009 . 3GPP. Security of H(e)NB. Technical Report TR 33.820 v8.3.0, 3G Partnership Project, Dec 2009."},{"key":"e_1_3_2_1_5_1","volume-title":"Feb","author":"Generic Access GPP.","year":"2010","unstructured":"3 GPP. Generic Access Network (GAN); Stage 2. Technical Specification TS 43.318 v9.0.0, 3G Partnership Project , Feb 2010 . 3GPP. Generic Access Network (GAN); Stage 2. Technical Specification TS 43.318 v9.0.0, 3G Partnership Project, Feb 2010."},{"key":"e_1_3_2_1_6_1","volume-title":"April","author":"Home GPP.","year":"2011","unstructured":"3 GPP. 3GPP TS 33.320 - Security of Home Node B (HNB). Technical report , April 2011 . 3GPP. 3GPP TS 33.320 - Security of Home Node B (HNB). Technical report, April 2011."},{"key":"e_1_3_2_1_7_1","unstructured":"ABI Research. Ubiquisys Tops 2010 ABI Research Femto Vendor Matrix Ranking. http:\/\/www.abiresearch.com\/press\/3488-ubiquisys+Tops+2010\\\\+ABI+Research+Femto+Vendor+Matrix+Ranking Feb 2011.  ABI Research. Ubiquisys Tops 2010 ABI Research Femto Vendor Matrix Ranking. http:\/\/www.abiresearch.com\/press\/3488-ubiquisys+Tops+2010\\\\+ABI+Research+Femto+Vendor+Matrix+Ranking Feb 2011."},{"key":"e_1_3_2_1_8_1","volume-title":"Internet Engineering Task Force","author":"Arkko J.","year":"2006","unstructured":"J. Arkko and H. Haverinen . Extensible authentication protocol method for 3rd generation authentication and key agreement (eap-aka). RFC 4187 , Internet Engineering Task Force , Jan. 2006 . http:\/\/tools.ietf.org\/html\/rfc4187. J. Arkko and H. Haverinen. Extensible authentication protocol method for 3rd generation authentication and key agreement (eap-aka). RFC 4187, Internet Engineering Task Force, Jan. 2006. http:\/\/tools.ietf.org\/html\/rfc4187."},{"key":"e_1_3_2_1_9_1","volume-title":"Internet Engineering Task Force","author":"Kaufman E. C.","year":"2006","unstructured":"E. C. Kaufman . Internet key exchange (ikev2) protocol. RFC 4306 , Internet Engineering Task Force , 2006 . http:\/\/tools.ietf.org\/html\/rfc4306. E. C. Kaufman. Internet key exchange (ikev2) protocol. RFC 4306, Internet Engineering Task Force, 2006. http:\/\/tools.ietf.org\/html\/rfc4306."},{"key":"e_1_3_2_1_10_1","volume-title":"Signalling System No. 7 (SS7\/C7): Protocol, Architecture, and Services","author":"Dryburgh L.","year":"2004","unstructured":"L. Dryburgh and J. Hewitt . Signalling System No. 7 (SS7\/C7): Protocol, Architecture, and Services . Cisco Press , 2004 . L. Dryburgh and J. Hewitt. Signalling System No. 7 (SS7\/C7): Protocol, Architecture, and Services. Cisco Press, 2004."},{"key":"e_1_3_2_1_11_1","volume-title":"Secrets of Reverse Engineering","author":"Eilam E.","year":"2005","unstructured":"E. Eilam . Reversing : Secrets of Reverse Engineering . Wiley Publishing, Inc , 2005 . E. Eilam. Reversing: Secrets of Reverse Engineering. Wiley Publishing, Inc, 2005."},{"key":"e_1_3_2_1_12_1","volume-title":"ETSI TS 151 011 V4.9.0. Specification of the Subscriber Identity Module","author":"ETSI.","year":"2005","unstructured":"ETSI. ETSI TS 151 011 V4.9.0. Specification of the Subscriber Identity Module ; Mobile Equipment (SIM-ME) interface. Technical report, March 2005 . ETSI. ETSI TS 151 011 V4.9.0. Specification of the Subscriber Identity Module; Mobile Equipment (SIM-ME) interface. Technical report, March 2005."},{"key":"e_1_3_2_1_13_1","volume-title":"Technical Report ETSI TS 132 583 V9.2.0","author":"Home ETSI.","year":"2010","unstructured":"ETSI. Home Node B (HNB) Operations , Administration , Maintenance and Provisioning (OAMP); Procedure flows for Type 1 interface HNB to HNB Management System (HMS). Technical Report ETSI TS 132 583 V9.2.0 , January 2010 . ETSI. Home Node B (HNB) Operations, Administration, Maintenance and Provisioning (OAMP); Procedure flows for Type 1 interface HNB to HNB Management System (HMS). Technical Report ETSI TS 132 583 V9.2.0, January 2010."},{"key":"e_1_3_2_1_14_1","volume-title":"Technical Report ETSI TS 133 210 V9.1.0, 3G Partnership Project","author":"Network Domain ETSI.","year":"2010","unstructured":"ETSI. Network Domain Security (NDS); IP network layer security (IP). Technical Report ETSI TS 133 210 V9.1.0, 3G Partnership Project , August 2010 . ETSI. Network Domain Security (NDS); IP network layer security (IP). Technical Report ETSI TS 133 210 V9.1.0, 3G Partnership Project, August 2010."},{"key":"e_1_3_2_1_15_1","volume-title":"Technical Report ETSI TS 155 205 V9.0.0, 3G Partnership Project","author":"Authentication ETSI.","year":"2010","unstructured":"ETSI. Specification of the GSM-MILENAGE algorithms:An example algorithm set for the GSM Authentication and Key Generation Functions A3 and A8. Technical Report ETSI TS 155 205 V9.0.0, 3G Partnership Project , February 2010 . ETSI. Specification of the GSM-MILENAGE algorithms:An example algorithm set for the GSM Authentication and Key Generation Functions A3 and A8. Technical Report ETSI TS 155 205 V9.0.0, 3G Partnership Project, February 2010."},{"key":"e_1_3_2_1_17_1","volume-title":"ETSI TS 131 101 V9.1.1. UICC-terminal interface","author":"ETSI.","year":"2011","unstructured":"ETSI. ETSI TS 131 101 V9.1.1. UICC-terminal interface ; Physical and logical characteristics. Technical report, January 2011 . ETSI. ETSI TS 131 101 V9.1.1. UICC-terminal interface; Physical and logical characteristics. Technical report, January 2011."},{"key":"e_1_3_2_1_18_1","unstructured":"Femto Forum. Femtocell market status. http:\/\/www.femtoforum.org\/femto\/pdfs01.php Jun 2011.  Femto Forum. Femtocell market status. http:\/\/www.femtoforum.org\/femto\/pdfs01.php Jun 2011."},{"key":"e_1_3_2_1_19_1","volume-title":"July","author":"GSM Association","year":"2008","unstructured":"GSM Association . Security Issues in HNB Deployment. Technical report , July 2008 . GSM Association. Security Issues in HNB Deployment. Technical report, July 2008."},{"key":"e_1_3_2_1_20_1","volume-title":"Internet Engineering Task Force","author":"Haverinen J. S. H.","year":"2006","unstructured":"J. S. H. Haverinen . Extensible authentication protocol method for global system for mobile communications (gsm) subscriber identity modules (eap-sim). RFC 4186 , Internet Engineering Task Force , Jan. 2006 . http:\/\/tools.ietf.org\/html\/rfc4186. J. S. H. Haverinen. Extensible authentication protocol method for global system for mobile communications (gsm) subscriber identity modules (eap-sim). RFC 4186, Internet Engineering Task Force, Jan. 2006. http:\/\/tools.ietf.org\/html\/rfc4186."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.5555\/1811982.1812426"},{"key":"e_1_3_2_1_22_1","unstructured":"Igor Bilogrevic and Murtuza Jadliwala and Jean-pierre Hubaux. Security Issues in Next Generation Mobile Networks: LTE and Femtocells.  Igor Bilogrevic and Murtuza Jadliwala and Jean-pierre Hubaux. Security Issues in Next Generation Mobile Networks: LTE and Femtocells."},{"key":"e_1_3_2_1_23_1","volume-title":"Interindustry command for interchange. Technical report","author":"IEC","year":"2006","unstructured":"ISO\/ IEC . ISO\/IEC 7816 Part 4 : Interindustry command for interchange. Technical report , 2006 . ISO\/IEC . ISO\/IEC 7816 Part 4: Interindustry command for interchange. Technical report, 2006."},{"key":"e_1_3_2_1_24_1","volume-title":"Part 3: Cards with contacts-Electrical interface and transmission protocols. Technical report","author":"IEC","year":"2006","unstructured":"ISO\/ IEC 7816. Part 3: Cards with contacts-Electrical interface and transmission protocols. Technical report , 2006 . ISO\/IEC 7816. Part 3: Cards with contacts-Electrical interface and transmission protocols. Technical report, 2006."},{"volume-title":"Whitepaper","year":"2007","key":"e_1_3_2_1_25_1","unstructured":"Kineto. Uma : The 3gpp standard for femtocell-to-core network connectivity . Whitepaper , August 2007 . Kineto. Uma: The 3gpp standard for femtocell-to-core network connectivity. Whitepaper, August 2007."},{"key":"e_1_3_2_1_26_1","volume-title":"June","author":"Scanner Network Sim APDU","year":"2011","unstructured":"Network Sim APDU Scanner . http:\/\/rebelmicrosimcutter.com\/network-sim-apdu-scanner.html , June 2011 . Network Sim APDU Scanner. http:\/\/rebelmicrosimcutter.com\/network-sim-apdu-scanner.html, June 2011."},{"key":"e_1_3_2_1_27_1","unstructured":"Openwall. John the rippe: Password cracking tool. http:\/\/www.openwall.com\/john\/.  Openwall. John the rippe: Password cracking tool. http:\/\/www.openwall.com\/john\/."},{"key":"e_1_3_2_1_28_1","unstructured":"Philippe Langlois. SCCP hacking attacking the SS7 and SIGTRAN applications one step further and mapping the phone system. http:\/\/www.p1sec.com\/corp\/news\/ November 2010.  Philippe Langlois. SCCP hacking attacking the SS7 and SIGTRAN applications one step further and mapping the phone system. http:\/\/www.p1sec.com\/corp\/news\/ November 2010."},{"key":"e_1_3_2_1_29_1","unstructured":"Philippe Langlois. SCTPscan: SCTP network and port scanner. http:\/\/www.p1sec.com\/corp\/research\/tools\/sctpscan\/ June 2011.  Philippe Langlois. SCTPscan: SCTP network and port scanner. http:\/\/www.p1sec.com\/corp\/research\/tools\/sctpscan\/ June 2011."},{"key":"e_1_3_2_1_30_1","first-page":"471","volume-title":"Towards security architecture for home (evolved) nodeb: challenges, requirements and solutions","author":"Rajavelsamy R.","year":"2011","unstructured":"R. Rajavelsamy , J. Lee , and S. Choi . Towards security architecture for home (evolved) nodeb: challenges, requirements and solutions . volume 4 , pages 471 -- 481 . John Wiley & Sons Ltd ., 2011 . R. Rajavelsamy, J. Lee, and S. Choi. Towards security architecture for home (evolved) nodeb: challenges, requirements and solutions. volume 4, pages 471--481. John Wiley & Sons Ltd., 2011."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-27937-9_4"},{"key":"e_1_3_2_1_32_1","unstructured":"Sarvar Patel. Analysis of EAP-SIM Session Key Agreement. http:\/\/www.ietf.org\/proceedings\/57\/slides\/eap-11.pdf May 2003.  Sarvar Patel. Analysis of EAP-SIM Session Key Agreement. http:\/\/www.ietf.org\/proceedings\/57\/slides\/eap-11.pdf May 2003."},{"key":"e_1_3_2_1_33_1","volume-title":"November","author":"The Broadband","year":"2010","unstructured":"The Broadband Forum TR-069. CPE WAN Management Protocol. Technical report , November 2010 . The Broadband Forum TR-069. CPE WAN Management Protocol. Technical report, November 2010."},{"key":"e_1_3_2_1_34_1","volume-title":"Signaling System #7","author":"Travis R.","year":"2002","unstructured":"R. Travis . Signaling System #7 . McGraw-Hill Professional , 2002 . R. Travis. Signaling System #7. McGraw-Hill Professional, 2002."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/11426639_2"}],"event":{"name":"SIN 2011: The 4th International Conference on Security of Information and Networks","sponsor":["SDU Suleyman Demirel University","AOARD Asian Office of Aerospace Research and Development","RDECOM U.S. Army Research, Development and Engineering Command","US Army ITC-PAC Asian Research Office","AFOSR AFOSR","ONRGlobal U.S. Office of Naval Research Global","Macquarie University-Sydney"],"location":"Sydney Australia","acronym":"SIN 2011"},"container-title":["Proceedings of the 4th international conference on Security of information and networks"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2070425.2070442","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2070425.2070442","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:54:53Z","timestamp":1750240493000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2070425.2070442"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,11,14]]},"references-count":34,"alternative-id":["10.1145\/2070425.2070442","10.1145\/2070425"],"URL":"https:\/\/doi.org\/10.1145\/2070425.2070442","relation":{},"subject":[],"published":{"date-parts":[[2011,11,14]]},"assertion":[{"value":"2011-11-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}