Piers O'Hanlon and Ravishankar Borgaonkar from Cyber Security at Oxford University are presenting their research on Wifi-based IMSI Catcher at Black Hat Europe, 3-4 November 2016 in London.
A new type of IMSI catcher which operates over WiFi. Whilst existing Stingray type IMSI catchers exploit 2-4G radio protocols to track movements of mobile subscribers, this talk introduces two new approaches to track mobile devices which exploit authentication protocols that operate over WiFi. These protocols are now widely implemented in most modern mobile OSes, allowing for the creation of a low cost IMSI catcher.
A demonstration of how users may be tracked on range of smartphones and tablets including those running iOS, Android and other mobile OSs. This tracking can be performed silently and automatically without any interaction from the tracked user. Cyber Security Oxford has developed a proof of concept system that demonstrates their IMSI catcher employing passive and active techniques.
Guidelines for vendors and cellular network operators to mitigate the user privacy issues that arise.
Find out more about this and other top papers on research advances. Find out more about Black Hat Europe 2016.