Dice Question Streamline Icon: https://streamlinehq.com

Operator deployment of IMSI catcher detection frameworks

Determine whether any mobile network operator has deployed an IMSI catcher detection framework based on network abnormalities—such as anomalous cell frequencies, unusual cell locations and IDs, elevated signal noise, and atypical network parameters—as proposed by Dabrowski et al., in operational mobile networks.

Information Square Streamline Icon: https://streamlinehq.com

Background

IMSI catching leverages fake base stations to coerce user equipment into revealing their permanent subscriber identity. Prior work proposed practical detection strategies based on recognizing anomalies indicative of the presence of IMSI catchers, including unusual frequency usage and cell configuration inconsistencies. While 5G introduces SUCI to conceal the permanent identity, many networks still operate in NSA modes or may face transitional risks, making detection frameworks relevant.

The paper notes a gap between proposed academic detection methods and industry practice, explicitly stating uncertainty about whether operators have adopted such anomaly-based IMSI catcher detection frameworks in their real deployments.

References

Finally, Dabrowski et all. proposed an IMSI Catcher detection framework based on possible network abnormalities (e.g.,~strange Cell frequencies, unusual Cell locations and Cell IDs, signal noise level, unusual network parameters) that could have been created by the existence of an IMSI Catcher. It is unclear if such a detection framework has been implemented by any operator.

Demystifying Privacy in 5G Stand Alone Networks (2409.17700 - Eleftherakis et al., 26 Sep 2024) in Section 4.1.1 (IMSI Catching)