{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T22:30:45Z","timestamp":1780353045221,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":46,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,5,27]],"date-time":"2024-05-27T00:00:00Z","timestamp":1716768000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,5,27]]},"DOI":"10.1145\/3643833.3656131","type":"proceedings-article","created":{"date-parts":[[2024,5,20]],"date-time":"2024-05-20T19:25:07Z","timestamp":1716233107000},"page":"265-276","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Uncovering Security Vulnerabilities in Real-world Implementation and Deployment of 5G Messaging Services"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-7410-3225","authenticated-orcid":false,"given":"Yaru","family":"Yang","sequence":"first","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6774-5299","authenticated-orcid":false,"given":"Yiming","family":"Zhang","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7732-8774","authenticated-orcid":false,"given":"Tao","family":"Wan","sequence":"additional","affiliation":[{"name":"CableLabs & Carleton University, Louisville, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4715-4667","authenticated-orcid":false,"given":"Chuhan","family":"Wang","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0083-733X","authenticated-orcid":false,"given":"Haixin","family":"Duan","sequence":"additional","affiliation":[{"name":"Tsinghua University & Quancheng Laboratory, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7511-1117","authenticated-orcid":false,"given":"Jianjun","family":"Chen","sequence":"additional","affiliation":[{"name":"Tsinghua University & Zhongguancun Laboratory, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-9898-190X","authenticated-orcid":false,"given":"Yishen","family":"Li","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,5,27]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"002","article-title":"Network architecture","volume":"23","author":"GPP.","year":"2021","unstructured":"3GPP. 2021. Network architecture. Technical Standard (TS) 23.002. 3rd Generation Partnership Project (3GPP). Version 17.0.0.","journal-title":"Technical Standard (TS)"},{"key":"e_1_3_2_1_2_1","first-page":"228","article-title":"IP Multimedia Subsystem (IMS)","volume":"23","author":"GPP.","year":"2022","unstructured":"3GPP. 2022a. IP Multimedia Subsystem (IMS). Technical Standard (TS) 23.228. 3rd Generation Partnership Project (3GPP). Version 17.3.0.","journal-title":"Technical Standard (TS)"},{"key":"e_1_3_2_1_3_1","first-page":"33","volume-title":"3G security","author":"GPP.","unstructured":"3GPP. 2022b. TS 33.203. 3G security; Access security for IP-based services. https:\/\/www.3gpp.org\/ftp\/Specs\/archive\/33_series\/33.203\/33203-h10.zip"},{"key":"e_1_3_2_1_4_1","unstructured":"3GPP. 2024. S3--240894. LS on GSMA CVD-2023-0075 -- Certificate validation on IMS access interface. https:\/\/www.3gpp.org\/ftp\/tsg_sa\/WG3_Security\/TSGS3_115_Athens\/docs\/S3--240894.zip"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC5630"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.52"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243846"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0039"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM46510.2021.9685173"},{"key":"e_1_3_2_1_10_1","unstructured":"GSMA. [n. d.] a. Global forecast for RCS growth. https:\/\/www.gsma.com\/futurenetworks\/rcs\/global-launches\/. Accessed on May 7 2023."},{"key":"e_1_3_2_1_11_1","unstructured":"GSMA. [n. d.] b. GSMA RCS - Future Networks. https:\/\/www.gsma.com\/futurenetworks\/rcs\/. Accessed on May 7 2023."},{"key":"e_1_3_2_1_12_1","unstructured":"GSMA. 2019. RCS Universal Profile Service Definition Document Version 2.4. https:\/\/www.gsma.com\/futurenetworks\/wp-content\/uploads\/2019\/10\/RCC.71-v2.4.pdf"},{"key":"e_1_3_2_1_13_1","unstructured":"GSMA. 2020. Chinese operators make major RCS commitment: Whitepaper. https:\/\/www.gsma.com\/futurenetworks\/latest-news\/china-operators-make-major-rcs-commitment-whitepaper\/. Accessed on May 7 2023."},{"key":"e_1_3_2_1_14_1","unstructured":"GSMA. 2022a. Rich Communication Suite Endorsement of OMA CPM 2.2 Conversation Functions. https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/RCC.11-v11.0--2.pdf"},{"key":"e_1_3_2_1_15_1","unstructured":"GSMA. 2022b. Rich Communication Suite -- Advanced Communications Services and Client Specification v13.0. https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/RCC.07-v13.0--1.pdf"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23442"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354263"},{"key":"e_1_3_2_1_18_1","unstructured":"Pijus Jauniskis. [n. d.]. VPN statistics: Users markets and legality. https:\/\/surfshark.com\/blog\/vpn-users. Accessed on Mar 7 2022."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","unstructured":"Cullen Fluffy Jennings Ben Campbell and Rohan Mahy. 2007. The Message Session Relay Protocol (MSRP). RFC 4975. https:\/\/doi.org\/10.17487\/RFC4975","DOI":"10.17487\/RFC4975"},{"key":"e_1_3_2_1_20_1","volume-title":"Proceedings of the 22th USENIX Security Symposium","author":"Jiang Nan","year":"2013","unstructured":"Nan Jiang, Yu Jin, Ann Skudlark, and Zhi-Li Zhang. 2013. Greystar: Fast and Accurate Detection of SMS Spam Numbers in Large Cellular Networks Using Gray Phone Space. In Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14--16, 2013, Samuel T. King (Ed.). USENIX Association, 1--16. https:\/\/www.usenix.org\/conference\/usenixsecurity13\/technical-sessions\/presentation\/jiang"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23098"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978--3-031--28486--1_2"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3517421"},{"key":"e_1_3_2_1_24_1","volume-title":"20th USENIX Security Symposium","author":"Mulliner Collin","year":"2011","unstructured":"Collin Mulliner, Nico Golde, and Jean-Pierre Seifert. 2011. SMS of Death: From Analyzing to Attacking Mobile Phones on a Large Scale. In 20th USENIX Security Symposium, San Francisco, CA, USA, August 8--12, 2011, Proceedings. USENIX Association. http:\/\/static.usenix.org\/events\/sec11\/tech\/full_papers\/Mulliner.pdf"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2398776.2398822"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2516760.2516772"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472923"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3507657.3528559"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC0768"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC0793"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939918.2939937"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.28"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00006"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC3261"},{"key":"e_1_3_2_1_35_1","volume-title":"Evaluating the Security of Smartphone Messaging Applications. In 19th Annual Network and Distributed System Security Symposium, NDSS 2012","author":"Schrittwieser Sebastian","year":"2012","unstructured":"Sebastian Schrittwieser, Peter Fr\u00fc hwirt, Peter Kieseberg, Manuel Leithner, Martin Mulazzani, Markus Huber, and Edgar R. Weippl. 2012. Guess Who's Texting You? Evaluating the Security of Smartphone Messaging Applications. In 19th Annual Network and Distributed System Security Symposium, NDSS 2012, San Diego, California, USA, February 5--8, 2012. The Internet Society. https:\/\/www.ndss-symposium.org\/ndss2012\/guess-whos-texting-you-evaluating-security-smartphone-messaging-applications"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3317549.3319728"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8760"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC7616"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453082"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","unstructured":"Christian Spanring and Alexander Mayrhofer. 2010. A Uniform Resource Identifier for Geographic Locations ('geo' URI). RFC 5870. https:\/\/doi.org\/10.17487\/RFC5870","DOI":"10.17487\/RFC5870"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC2960"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978393"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","unstructured":"Dongzhu Xu Anfu Zhou Xinyu Zhang Guixian Wang Xi Liu Congkai An Yiming Shi Liang Liu and Huadong Ma. 2020. Understanding Operational 5G: A First Measurement Study on Its Coverage Performance and Energy Consumption. In SIGCOMM '20: Proceedings of the 2020 Annual conference of the ACM Special Interest Group on Data Communication on the applications technologies architectures and protocols for computer communication Virtual Event USA August 10--14 2020 Henning Schulzrinne and Vishal Misra (Eds.). ACM 479--494. https:\/\/doi.org\/10.1145\/3387514.3405882","DOI":"10.1145\/3387514.3405882"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2969474"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417257"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/CNS56114.2022.9947238"}],"event":{"name":"WiSec '24: 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks","location":"Seoul Republic of Korea","acronym":"WiSec '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643833.3656131","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3643833.3656131","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T23:59:21Z","timestamp":1755907161000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643833.3656131"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,27]]},"references-count":46,"alternative-id":["10.1145\/3643833.3656131","10.1145\/3643833"],"URL":"https:\/\/doi.org\/10.1145\/3643833.3656131","relation":{},"subject":[],"published":{"date-parts":[[2024,5,27]]},"assertion":[{"value":"2024-05-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}