On the Security Verification of a Short Message Service Protocol

توضیحات

ABSTRACT

Short Message Service (SMS) is a text messaging service component of smart phones, web, or mobile communication systems which requires a high level of security to provide user authentication and data confidentiality. To provide such security features, a high security communication protocol for SMS, called Message Security Communication Protocol (MSCP) was proposed. In this paper, MSCP is formally analyzed using an automated logic-based verification tool with attack detection capabilities. The performed formal verification reveals that the proposed protocol is susceptible to parallel session and denial-ofservice (DoS) attacks. The reasoning why these attacks are possible is detailed and an amended protocol is proposed to counter the identified attacks. Formal verification of the amended protocol provides confidence regarding the correctness and effectiveness of the proposed modifications.

INTRODUCTION

Short Message Service (SMS) is playing a major role in present-day mobile networks. SMS services are widely used in many online services such as mobile banking, marketing, sales delivery and many more . Since SMS can deliver lots of vital information, SMS systems are becoming vulnerable to more and more attacks, such as deception, eavesdropping, messages tampering, spoofing and forgery .
In the technical specifications for SMS, the confidentiality and integrity mechanisms are only specified as optional security measures that can be made available, but they are not mandatory requirements for SMS system implementation. Hence, without these SMS security options, the SMS messages transmitted on a network are only protected by the communication network itself such as GSM network, shown to be prone to many errors . Therefore, it is required to design a security mechanism that can provide user authentication, data
confidentiality and integrity. To offer such security features,Wu and Tan proposed a high security SMS communication protocol called Message Security Communication Protocol (MSCP)

Year: ۲۰۱۸

Publisher : IEEE

 By : Anca Delia Jurcut, Madhusanka Liyanagey, Jinyong Chenz, Cornelia Gyorodix, Jingsha He

File Information: English Language/ 6 Page / size: 159 KB

Download

سال : ۱۳۹۶

ناشر : IEEE

کاری از : Anca Delia Jurcut، Madhusanka Liyanagey، Jinyong Chenz، Cornelia Gyorodix، Jingsha He

اطلاعات فایل : زبان انگلیسی / 6 صفحه / حجم : KB 159

لینک دانلود