{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,14]],"date-time":"2025-05-14T02:44:59Z","timestamp":1747190699608,"version":"3.40.5"},"reference-count":33,"publisher":"Wiley","license":[{"start":{"date-parts":[[2021,1,28]],"date-time":"2021-01-28T00:00:00Z","timestamp":1611792000000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"ParsaSharif Research Institute, Iran"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2021,1,28]]},"abstract":"<jats:p>In GSM, the network is not authenticated which allows for man-in-the-middle (MITM) attacks. Attackers can track traffic and trace users of cellular networks by creating a rogue base transceiver station (BTS). Such a defect in addition to the need for backward compatibility of mobile networks makes all GSM, UMTS, and LTE networks susceptible to MITMs. These attacks are conducted using IMSI-Catchers (ICs). Most of the solutions proposed for detecting ICs in the literature are based on using specific mobile devices with root access. Also, they cannot identify ICs to which users are not connected. In this paper, we propose an approach called YAICD for detecting ICs in the GSM network. YAICD consists of a sensor that can be installed on Android mobile devices. It detects ICs by extracting 15 parameters from signals received from BTSs. We also established a lab-scale testbed to evaluate YAICD for various detection parameters and for comparing it against existing solutions in the literature. The experimental results show that YAICD not only successfully detects ICs using the parameters but also identifies ICs to which users are not yet connected to the network.<\/jats:p>","DOI":"10.1155\/2021\/8847803","type":"journal-article","created":{"date-parts":[[2021,1,29]],"date-time":"2021-01-29T19:20:10Z","timestamp":1611948010000},"page":"1-13","source":"Crossref","is-referenced-by-count":3,"title":["YAICD: Yet Another IMSI Catcher Detector in GSM"],"prefix":"10.1155","volume":"2021","author":[{"given":"Parimah","family":"Ziayi","sequence":"first","affiliation":[{"name":"Science and Research Branch, Islamic Azad University, Tehran, Iran"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Seyed Mostafa","family":"Farmanbar","sequence":"additional","affiliation":[{"name":"Faculty of Computer Engineering, Shahrood University of Technology, Shahrood, Iran"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1172-1941","authenticated-orcid":true,"given":"Mohsen","family":"Rezvani","sequence":"additional","affiliation":[{"name":"Faculty of Computer Engineering, Shahrood University of Technology, Shahrood, Iran"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"1","doi-asserted-by":"crossref","DOI":"10.1007\/978-0-85729-139-4","volume-title":"Introduction to Discrete Event Simulation and Agent-Based Modeling: Voting Systems, Health Care, Military, and Manufacturing","author":"T. T. Allen","year":"2011"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23098"},{"volume-title":"The GSM System for Mobile Communications","year":"1992","author":"M. Mouly","key":"3"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1109\/cc.2014.6911088"},{"article-title":"Practical attacks against privacy and availability in 4G\/LTE mobile communication systems","year":"2015","author":"A. Shaik","key":"5"},{"author":"S. Park","key":"6","article-title":"White-stingray: evaluating {IMSI} catchers detection applications"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1080\/13600869.2019.1569872"},{"first-page":"246","article-title":"IMSI-catch me if you can: IMSI-catcher-catchers","author":"A. Dabrowski","key":"8"},{"author":"U. Meyer","key":"9","article-title":"A man-in-the-middle attack on UMTS"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.23919\/ITC.2017.8064342"},{"author":"G. Bovenzi","key":"11","article-title":"H2ID: hierarchical hybrid intrusion detection approach in IoT scenarios"},{"article-title":"Defeating IMSI catchers","author":"F. Van Den Broek","key":"12","doi-asserted-by":"crossref","DOI":"10.1145\/2810103.2813615"},{"article-title":"Mobile equipment identity privacy, network node and methods thereof","year":"2019","author":"P. Ginzboorg","key":"13"},{"key":"14"},{"article-title":"Protecting IMSI and user privacy in 5G networks","author":"K. Norrman","key":"15","doi-asserted-by":"crossref","DOI":"10.4108\/eai.18-6-2016.2264114"},{"author":"S. R. Hussain","key":"16","article-title":"Privacy attacks to the 4G and 5G cellular paging protocols using side channel information"},{"author":"M. Khan","key":"17","article-title":"IMSI-based routing and identity privacy in 5G"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2017-0027"},{"key":"19"},{"key":"20"},{"key":"21"},{"key":"22"},{"article-title":"Breaking LTE on layer two","author":"D. Rupprecht","key":"23","doi-asserted-by":"crossref","DOI":"10.1109\/SP.2019.00006"},{"article-title":"Signaling security in LTE roaming","year":"2019","author":"I. Singh","key":"24"},{"first-page":"202","article-title":"Mobileinsight: extracting and analyzing cellular network information on smartphones","author":"Y. Li","key":"25"},{"article-title":"The messenger shoots back: network operator based IMSI catcher detection","author":"A. Dabrowski","key":"26","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-319-45719-2_13"},{"article-title":"IMSI catcher detection method for cellular networks","author":"H. Alrashede","key":"27","doi-asserted-by":"crossref","DOI":"10.1109\/CAIS.2019.8769507"},{"key":"28"},{"key":"29"},{"article-title":"Detecting IMSI-catcher using soft computing","author":"T. van Do","key":"30","doi-asserted-by":"crossref","DOI":"10.1007\/978-981-287-936-3_13"},{"first-page":"74","article-title":"Anatomy of commercial IMSI catchers and detectors","author":"S. Park","key":"31"},{"author":"A. Wilson","key":"32","article-title":"SITCH: situational information from telemetry and correlated heuristics"},{"first-page":"1","article-title":"A network based imsi catcher detection","author":"S. Steig","key":"33"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/8847803.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/8847803.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/8847803.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,1,29]],"date-time":"2021-01-29T19:20:13Z","timestamp":1611948013000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2021\/8847803\/"}},"subtitle":[],"editor":[{"given":"Stelvio","family":"Cimato","sequence":"additional","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2021,1,28]]},"references-count":33,"alternative-id":["8847803","8847803"],"URL":"https:\/\/doi.org\/10.1155\/2021\/8847803","relation":{},"ISSN":["1939-0122","1939-0114"],"issn-type":[{"type":"electronic","value":"1939-0122"},{"type":"print","value":"1939-0114"}],"subject":[],"published":{"date-parts":[[2021,1,28]]}}}