{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,14]],"date-time":"2026-03-14T17:55:07Z","timestamp":1773510907409,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":67,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,10,25]],"date-time":"2021-10-25T00:00:00Z","timestamp":1635120000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1910150 and CNS-2008026"],"award-info":[{"award-number":["CNS-1910150 and CNS-2008026"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,10,25]]},"DOI":"10.1145\/3447993.3483254","type":"proceedings-article","created":{"date-parts":[[2021,10,26]],"date-time":"2021-10-26T09:00:31Z","timestamp":1635238831000},"page":"451-464","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":15,"title":["SecureSIM"],"prefix":"10.1145","author":[{"given":"Jinghao","family":"Zhao","sequence":"first","affiliation":[{"name":"University of California"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Boyan","family":"Ding","sequence":"additional","affiliation":[{"name":"University of California"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunqi","family":"Guo","sequence":"additional","affiliation":[{"name":"University of California"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhaowei","family":"Tan","sequence":"additional","affiliation":[{"name":"University of California"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Songwu","family":"Lu","sequence":"additional","affiliation":[{"name":"University of California"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,10,25]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS)","year":"2013","unstructured":"3GPP. TS24.301 : Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS) ; Stage 3, Jun. 2013 . 3GPP. TS24.301: Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS); Stage 3, Jun. 2013."},{"key":"e_1_3_2_1_2_1","volume-title":"Evolved Universal Terrestrial Radio Access (E-UTRA)","year":"2019","unstructured":"3GPP. TS36.213 : Evolved Universal Terrestrial Radio Access (E-UTRA) ; Physical layer procedures, Sep. 2019 . 3GPP. TS36.213: Evolved Universal Terrestrial Radio Access (E-UTRA); Physical layer procedures, Sep. 2019."},{"key":"e_1_3_2_1_3_1","volume-title":"Dec.","year":"2020","unstructured":"3GPP. TS31.102 : Characteristics of the Universal Subscriber Identity Module (USIM) application , Dec. 2020 . 3GPP. TS31.102: Characteristics of the Universal Subscriber Identity Module (USIM) application, Dec. 2020."},{"key":"e_1_3_2_1_4_1","volume-title":"3GPP System Architecture Evolution (SAE)","year":"2020","unstructured":"3GPP. TS33.401 : 3GPP System Architecture Evolution (SAE) ; Security architecture, Jul. 2020 . 3GPP. TS33.401: 3GPP System Architecture Evolution (SAE); Security architecture, Jul. 2020."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2017.37"},{"key":"e_1_3_2_1_6_1","unstructured":"Android application id. https:\/\/developer.android.com\/studio\/build\/application-id.  Android application id. https:\/\/developer.android.com\/studio\/build\/application-id."},{"key":"e_1_3_2_1_7_1","unstructured":"Apple bundle id. https:\/\/developer.apple.com\/documentation\/appstoreconnectapi\/bundle_ids.  Apple bundle id. https:\/\/developer.apple.com\/documentation\/appstoreconnectapi\/bundle_ids."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMSWA.2007.382592"},{"key":"e_1_3_2_1_9_1","unstructured":"At&t pin setting. https:\/\/www.att.com\/support\/article\/wireless\/KM1000485\/.  At&t pin setting. https:\/\/www.att.com\/support\/article\/wireless\/KM1000485\/."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382222"},{"key":"e_1_3_2_1_11_1","first-page":"131","volume-title":"22nd USENIX Security Symposium (USENIX Security 13)","author":"Bugiel S.","year":"2013","unstructured":"Bugiel , S. , Heuser , S. , and Sadeghi , A . -R. Flexible and fine-grained mandatory access control on android for diverse security and privacy policies . In 22nd USENIX Security Symposium (USENIX Security 13) ( 2013 ), pp. 131 -- 146 . Bugiel, S., Heuser, S., and Sadeghi, A.-R. Flexible and fine-grained mandatory access control on android for diverse security and privacy policies. In 22nd USENIX Security Symposium (USENIX Security 13) (2013), pp. 131--146."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2018.10.027"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2018.03.050"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/EECS.2018.00098"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00023"},{"key":"e_1_3_2_1_17_1","volume-title":"Jul.","author":"ETSI.","year":"2019","unstructured":"ETSI. TS 102 223: Smart Cards;Card Application Toolkit (CAT) , Jul. 2019 . ETSI. TS 102 223: Smart Cards;Card Application Toolkit (CAT), Jul. 2019."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335360"},{"key":"e_1_3_2_1_19_1","volume-title":"Proposed nist standard for role-based access control. ACM Transactions on Information and System Security (TISSEC) 4, 3","author":"Ferraiolo D. F.","year":"2001","unstructured":"Ferraiolo , D. F. , Sandhu , R. , Gavrila , S. , Kuhn , D. R. , and Chandramouli , R . Proposed nist standard for role-based access control. ACM Transactions on Information and System Security (TISSEC) 4, 3 ( 2001 ), 224--274. Ferraiolo, D. F., Sandhu, R., Gavrila, S., Kuhn, D. R., and Chandramouli, R. Proposed nist standard for role-based access control. ACM Transactions on Information and System Security (TISSEC) 4, 3 (2001), 224--274."},{"key":"e_1_3_2_1_20_1","unstructured":"Flora esim applet. https:\/\/github.com\/Project-Flora\/Flora-eSIM.  Flora esim applet. https:\/\/github.com\/Project-Flora\/Flora-eSIM."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2980159.2980163"},{"key":"e_1_3_2_1_22_1","unstructured":"Google play app signing. https:\/\/developer.android.com\/studio\/publish\/app-signing#generate-key.  Google play app signing. https:\/\/developer.android.com\/studio\/publish\/app-signing#generate-key."},{"key":"e_1_3_2_1_23_1","unstructured":"Gsma. https:\/\/www.gsma.com\/esim\/gsma-root-ci\/.  Gsma. https:\/\/www.gsma.com\/esim\/gsma-root-ci\/."},{"key":"e_1_3_2_1_24_1","unstructured":"GSMA. SGP.22 Technical Specification v2.2.2 Jul. 2020.  GSMA. SGP.22 Technical Specification v2.2.2 Jul. 2020."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354193"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2792534"},{"key":"e_1_3_2_1_27_1","volume-title":"Seminar Work","author":"He S.","year":"2007","unstructured":"He , S. , and Paar , I. C . Sim card security . In Seminar Work , Ruhr-University of Bochum ( 2007 ). He, S., and Paar, I. C. Sim card security. In Seminar Work, Ruhr-University of Bochum (2007)."},{"key":"e_1_3_2_1_28_1","unstructured":"Heicard sim. https:\/\/www.heicard.com\/en\/.  Heicard sim. https:\/\/www.heicard.com\/en\/."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/11767480_16"},{"key":"e_1_3_2_1_30_1","first-page":"1","article-title":"Survey of the protection mechanisms to the ssl-based session hijacking attacks","volume":"10","author":"Hossain M. S.","year":"2018","unstructured":"Hossain , M. S. , Paul , A. , Islam , M. H. , and Atiqzzaman , M . Survey of the protection mechanisms to the ssl-based session hijacking attacks . Netw. Protoc. Algorithms 10 , 1 ( 2018 ), 83--108. Hossain, M. S., Paul, A., Islam, M. H., and Atiqzzaman, M. Survey of the protection mechanisms to the ssl-based session hijacking attacks. Netw. Protoc. Algorithms 10, 1 (2018), 83--108.","journal-title":"Netw. Protoc. Algorithms"},{"key":"e_1_3_2_1_31_1","unstructured":"IoTNow. Why 98% of iot traffic is unencrypted. https:\/\/www.iot-now.com\/2020\/06\/04\/103245-why-98-of-iot-traffic-is-unencrypted\/.  IoTNow. Why 98% of iot traffic is unencrypted. https:\/\/www.iot-now.com\/2020\/06\/04\/103245-why-98-of-iot-traffic-is-unencrypted\/."},{"key":"e_1_3_2_1_32_1","volume-title":"Identification cards - integrated circuit cards - part 5: Registration of application providers","author":"IEC.","year":"2004","unstructured":"ISO\/ IEC. Identification cards - integrated circuit cards - part 5: Registration of application providers . International Organization for Standardization\/International Electrotechnical Commission . ISO\/IEC 7816-5 ( 2004 ). ISO\/IEC. Identification cards - integrated circuit cards - part 5: Registration of application providers. International Organization for Standardization\/International Electrotechnical Commission. ISO\/IEC 7816-5 (2004)."},{"key":"e_1_3_2_1_33_1","volume-title":"Identification cards---integrated circuit cards---part 4: Organization, security and commands for interchange","author":"IEC.","year":"2013","unstructured":"ISO\/ IEC. Identification cards---integrated circuit cards---part 4: Organization, security and commands for interchange . International Organization for Standardization\/International Electrotechnical Commission . ISO\/IEC 7816-4 ( 2013 ). ISO\/IEC. Identification cards---integrated circuit cards---part 4: Organization, security and commands for interchange. International Organization for Standardization\/International Electrotechnical Commission. ISO\/IEC 7816-4 (2013)."},{"key":"e_1_3_2_1_34_1","first-page":"129","volume-title":"International Workshop on Cryptographic Hardware and Embedded Systems","author":"Itoh K.","year":"2002","unstructured":"Itoh , K. , Izu , T. , and Takenaka , M . Address-bit differential power analysis of cryptographic schemes ok-ecdh and ok-ecdsa . In International Workshop on Cryptographic Hardware and Embedded Systems ( 2002 ), Springer , pp. 129 -- 143 . Itoh, K., Izu, T., and Takenaka, M. Address-bit differential power analysis of cryptographic schemes ok-ecdh and ok-ecdsa. In International Workshop on Cryptographic Hardware and Embedded Systems (2002), Springer, pp. 129--143."},{"key":"e_1_3_2_1_35_1","first-page":"2017","article-title":"Phishing detection: analysis of visual similarity based approaches","author":"Jain A. K.","year":"2017","unstructured":"Jain , A. K. , and Gupta , B. B . Phishing detection: analysis of visual similarity based approaches . Security and Communication Networks 2017 ( 2017 ). Jain, A. K., and Gupta, B. B. Phishing detection: analysis of visual similarity based approaches. Security and Communication Networks 2017 (2017).","journal-title":"Security and Communication Networks"},{"key":"e_1_3_2_1_36_1","unstructured":"Java card platform classic edition 3.0.5. https:\/\/docs.oracle.com\/javacard\/3.0.5\/.  Java card platform classic edition 3.0.5. https:\/\/docs.oracle.com\/javacard\/3.0.5\/."},{"key":"e_1_3_2_1_37_1","unstructured":"Knowroaming travel sim sticker. https:\/\/nakedsecurity.sophos.com\/2019\/02\/19\/thousands-of-android-apps-bypass-advertising-id-to-track-users\/.  Knowroaming travel sim sticker. https:\/\/nakedsecurity.sophos.com\/2019\/02\/19\/thousands-of-android-apps-bypass-advertising-id-to-track-users\/."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3317549.3323416"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813618"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2656460"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2973750.2973751"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24174-6_24"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372224.3380885"},{"key":"e_1_3_2_1_44_1","unstructured":"M2m applets. https:\/\/1ot.mobi\/resources\/blog\/iot-hacking-series-6-what-is-a-sim-applet-and-why-is-it-important-for-iot-m2m.  M2m applets. https:\/\/1ot.mobi\/resources\/blog\/iot-hacking-series-6-what-is-a-sim-applet-and-why-is-it-important-for-iot-m2m."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1007\/0-306-46998-7_6"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-58387-6_13"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/1755688.1755732"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2016.02.108"},{"key":"e_1_3_2_1_49_1","unstructured":"Qualcomm modem id. https:\/\/thingspace.verizon.com\/documentation\/apis\/qualcomm-cat-m1-lte-modem-device-api.html.  Qualcomm modem id. https:\/\/thingspace.verizon.com\/documentation\/apis\/qualcomm-cat-m1-lte-modem-device-api.html."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004360"},{"key":"e_1_3_2_1_51_1","first-page":"2","article-title":"How the smrtcard makes the certification verification easy","volume":"83","author":"Rao L. J.","year":"2016","unstructured":"Rao , L. J. , Rao , M. V. , and Saradhi , T. V . How the smrtcard makes the certification verification easy . Journal of Theoretical and Applied Information Technology 83 , 2 ( 2016 ), 180. Rao, L. J., Rao, M. V., and Saradhi, T. V. How the smrtcard makes the certification verification easy. Journal of Theoretical and Applied Information Technology 83, 2 (2016), 180.","journal-title":"Journal of Theoretical and Applied Information Technology"},{"key":"e_1_3_2_1_52_1","first-page":"603","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Reardon J.","year":"2019","unstructured":"Reardon , J. , Feal , \u00c1., Wijesekera , P. , On , A. E. B. , Vallina-Rodriguez , N. , and Egelman , S . 50 ways to leak your data: An exploration of apps' circumvention of the android permissions system . In 28th USENIX Security Symposium (USENIX Security 19) ( 2019 ), pp. 603 -- 620 . Reardon, J., Feal, \u00c1., Wijesekera, P., On, A. E. B., Vallina-Rodriguez, N., and Egelman, S. 50 ways to leak your data: An exploration of apps' circumvention of the android permissions system. In 28th USENIX Security Symposium (USENIX Security 19) (2019), pp. 603--620."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00006"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24283"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295140"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243817"},{"key":"e_1_3_2_1_57_1","volume-title":"-P. Practical attacks against privacy and availability in 4G\/LTE mobile communication systems. NDSS","author":"Shaik A.","year":"2015","unstructured":"Shaik , A. , Borgaonkar , R. , Asokan , N. , Niemi , V. , and Seifert , J . -P. Practical attacks against privacy and availability in 4G\/LTE mobile communication systems. NDSS ( 2015 ). Shaik, A., Borgaonkar, R., Asokan, N., Niemi, V., and Seifert, J.-P. Practical attacks against privacy and availability in 4G\/LTE mobile communication systems. NDSS (2015)."},{"key":"e_1_3_2_1_58_1","unstructured":"Rebelsim. http:\/\/osmocom.org\/projects\/simtrace\/wiki\/RebelSIM.  Rebelsim. http:\/\/osmocom.org\/projects\/simtrace\/wiki\/RebelSIM."},{"key":"e_1_3_2_1_59_1","unstructured":"Simjacker technical paper. https:\/\/simjacker.com\/.  Simjacker technical paper. https:\/\/simjacker.com\/."},{"key":"e_1_3_2_1_60_1","unstructured":"Simtrace 2. https:\/\/osmocom.org\/projects\/simtrace2\/wiki.  Simtrace 2. https:\/\/osmocom.org\/projects\/simtrace2\/wiki."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/SocialCom.2013.161"},{"key":"e_1_3_2_1_62_1","first-page":"14","article-title":"Imsi catcher. Chair for Communication Security","author":"Strobel D","year":"2007","unstructured":"Strobel , D . Imsi catcher. Chair for Communication Security , Ruhr-Universit\u00e4t Bochum 14 ( 2007 ). Strobel, D. Imsi catcher. Chair for Communication Security, Ruhr-Universit\u00e4t Bochum 14 (2007).","journal-title":"Ruhr-Universit\u00e4t Bochum"},{"key":"e_1_3_2_1_63_1","unstructured":"T-mobile pin setting. https:\/\/www.t-mobile.com\/support\/devices\/android\/t-mobile-revvlry-plus\/sim-pin-t-mobile-revvlry-plus.  T-mobile pin setting. https:\/\/www.t-mobile.com\/support\/devices\/android\/t-mobile-revvlry-plus\/sim-pin-t-mobile-revvlry-plus."},{"key":"e_1_3_2_1_64_1","unstructured":"Uicc carrier privileges. https:\/\/source.android.com\/devices\/tech\/config\/uicc.  Uicc carrier privileges. https:\/\/source.android.com\/devices\/tech\/config\/uicc."},{"key":"e_1_3_2_1_65_1","unstructured":"Verizon pin setting. https:\/\/www.verizon.com\/support\/knowledge-base-206865\/.  Verizon pin setting. https:\/\/www.verizon.com\/support\/knowledge-base-206865\/."},{"key":"e_1_3_2_1_66_1","article-title":"How can iot services pose new security threats in operational cellular networks?","author":"Xie T.","year":"2020","unstructured":"Xie , T. , Tu , G.-H. , Li , C.-Y. , and Peng , C . How can iot services pose new security threats in operational cellular networks? IEEE Transactions on Mobile Computing ( 2020 ). Xie, T., Tu, G.-H., Li, C.-Y., and Peng, C. How can iot services pose new security threats in operational cellular networks? IEEE Transactions on Mobile Computing (2020).","journal-title":"IEEE Transactions on Mobile Computing ("},{"key":"e_1_3_2_1_67_1","first-page":"55","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Yang H.","year":"2019","unstructured":"Yang , H. , Bae , S. , Son , M. , Kim , H. , Kim , S. M. , and Kim , Y . Hiding in plain signal: Physical signal overshadowing attack on LTE . In 28th USENIX Security Symposium (USENIX Security 19) ( 2019 ), pp. 55 -- 72 . Yang, H., Bae, S., Son, M., Kim, H., Kim, S. M., and Kim, Y. Hiding in plain signal: Physical signal overshadowing attack on LTE. In 28th USENIX Security Symposium (USENIX Security 19) (2019), pp. 55--72."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243820"}],"event":{"name":"ACM MobiCom '21: The 27th Annual International Conference on Mobile Computing and Networking","location":"New Orleans Louisiana","acronym":"ACM MobiCom '21","sponsor":["SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 27th Annual International Conference on Mobile Computing and Networking"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3447993.3483254","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3447993.3483254","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3447993.3483254","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:49:11Z","timestamp":1750193351000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3447993.3483254"}},"subtitle":["rethinking authentication and access control for SIM\/eSIM"],"short-title":[],"issued":{"date-parts":[[2021,10,25]]},"references-count":67,"alternative-id":["10.1145\/3447993.3483254","10.1145\/3447993"],"URL":"https:\/\/doi.org\/10.1145\/3447993.3483254","relation":{},"subject":[],"published":{"date-parts":[[2021,10,25]]},"assertion":[{"value":"2021-10-25","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}