{"id":995,"date":"2019-10-11T14:15:10","date_gmt":"2019-10-11T14:15:10","guid":{"rendered":"https:\/\/ctlj-dev.cu.law\/?p=995"},"modified":"2019-10-11T20:17:19","modified_gmt":"2019-10-11T20:17:19","slug":"saving-our-spectrum-handling-radio-layer-vulnerabilities-in-wireless-systems","status":"publish","type":"post","link":"https:\/\/ctlj-dev.cu.law\/?p=995","title":{"rendered":"Saving Our Spectrum: Handling Radio Layer Vulnerabilities in Wireless Systems"},"content":{"rendered":"\n
\"\"
Via the Electronic Frontier Foundation<\/a><\/figcaption><\/figure><\/div>\n\n\n\n

Two of the greatest challenges of the modern technological age are security and privacy. Spectrum, specifically at the radio layer, is particularly vulnerable to attack. How can we better protect our devices and infrastructure? Speakers and panelists at the Silicon Flatirons Center\u2019s Saving Our Spectrum: Handling Radio Layer Vulnerabilities in Wireless Systems<\/a><\/em> Conference came as close as one can to answering this complex question.<\/p>\n\n\n\n

A key development in the telecommunications industry is\nmarked by the shift away from the use of wires and fiber to transmit signals to\nwireless. And while wireless networks reduce capital expenditures, and have\ngreat potential in tough to reach places, the world\u2019s increased dependence on\nradio comes at a cost. Radio receivers, unlike wired connections, cannot be\nphysically protected from attack. This is because in order to function, they\nmust be open to signals. <\/p>\n\n\n\n

Professors Hatfield and Gremban led off the conference\u2019s\nprimer with a discussion of three common types of attacks on these systems: sniffing<\/em>\n(listening to wireless transmissions for unencrypted signals), spoofing<\/em>\n(one user masquerading as another), and jamming<\/em> (blocking signals to\nspecific or several devices). One of the difficulties in addressing the radio\nlayer vulnerabilities of 4G and 5G networks is that attacks can occur at any\nlayer, meaning both our devices and the network are potentially vulnerable to\nattack. <\/p>\n\n\n\n

Consumers can protect their devices but are limited in their\nability to do so. Certainly, one can download any number of applications from\nthe app store that assure consumers of the app\u2019s ability to detect IMSI catchers\n(or stingray) devices, which helps combat sniffing, but those applications are\nknown to produce false positives, meaning they alert customers to nonexistent\nthreats, and they are not as effective at stopping bad actors as one would hope.\nThis raises the question \u2013 if end users can do little to protect themselves, can,\nand should, companies being doing more to protect devices by securing the\nnetwork and improving the hardware of our devices?<\/p>\n\n\n\n

For the mobile communications companies selling devices and\ntelecommunications equipment, that possess advanced technology and the know-how\nto address the aforementioned vulnerabilities, there is little incentive for\nthem to make improvements that would secure devices. Adding hardware that would\naddress vulnerabilities in the devices would be expensive, but probably not\nimpossible according to some panelists. <\/p>\n\n\n\n

Though it may be some time before we see security features in our devices, more and more companies, advocacy groups, and regulators are attempting to address the vulnerability issue by experimenting with new systems and methods. One way this is being done is by using artificial intelligence and machine learning to detect and respond to attacks on devices and at other layers. AI is particularly useful because of its ability to quickly isolate atypical interactions on the network. Additionally, DARPA\u2019s Spectrum Collaboration Challenge (SC2)<\/a> is \u201cusing AI to unlock the true potential of the RF spectrum,\u201d and promises to deliver some viable solutions as well, so the outcome of that competition will be worth following. <\/p>\n\n\n\n

Finally, the 3GPP (Third Generation Partnership Project)<\/a> has used sophisticated technology to address vulnerabilities to improve user authentication process. This helps networks determine whether users are who they say they are, which helps in instances of spoofing. With each generation of cellular network technologies improving on the last, we have been able to improve our ability to authenticate users \u2013 and this trend has held true for 5G.  <\/p>\n\n\n\n

Despite the high number of attacks, the situation is not as dismal\nas it once appeared. In fact, there are already several viable ways to secure\nradio layer vulnerabilities. These include requiring device manufacturers to\ninclude protective features, such as advanced hardware and encryption\ntechnology,  before delivering the devices\nto customers, increasing uses for AI applications, and doing what we have done\nin the past: hoping that new cellular network generations will lead to\nimprovements in authentication processes. <\/p>\n\n\n\n

Though the hope is always that something will be done to totally secure our devices and networks, we must recognize our own technological constraints, as well as the capabilities of bad actors. That said, the three examples outlined above seem to be viable solutions and demonstrate stakeholders\u2019 increased awareness of the issue at hand<\/p>\n\n\n\n

Freddy is Managing Editor of CTLJ, Volume 18 and a Research Assistant for the University of Colorado\u2019s Silicon Flatirons Center for Law, Technology, Entrepreneurship. His study and research focus on identifying legal solutions for the issues that arise out of emerging technologies and increasing access to critical technology infrastructure in under-served communities. <\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Two of the greatest challenges of the modern technological age are security and privacy. Spectrum, specifically at the radio layer, is particularly vulnerable to attack. How can we better protect […]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-995","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=\/wp\/v2\/posts\/995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=995"}],"version-history":[{"count":7,"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=\/wp\/v2\/posts\/995\/revisions"}],"predecessor-version":[{"id":1004,"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=\/wp\/v2\/posts\/995\/revisions\/1004"}],"wp:attachment":[{"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ctlj-dev.cu.law\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}