GSM security testing: where the action is [LWN.net]

GSM security testing: where the action is

Posted Sep 27, 2010 8:21 UTC (Mon) by freddyh (guest, #21133)
In reply to: GSM security testing: where the action is by Cyberax
Parent article: GSM security testing: where the action is

You might be surprised. If Harald succeeds, you might see increased competition (as mentioned in the original article: there are only few companies who make hardware and software). Increased competition is always good, not only for features but also for security and price.

to post comments

GSM security testing: where the action is

Posted Sep 27, 2010 8:37 UTC (Mon) by Cyberax (✭ supporter ✭, #52523) [Link] (8 responses)

Cynically speaking, obscurity in this case is good for security. Because not much companies can afford to reverse-engineer the whole stack and create malicious GSM software/hardware.

As for competition, there's enough of it in the hardware cell-tower market. They are produced in millions, and basic GSM cell phone infrastructure (i.e. no GPRS, EVDO, etc.) is now VERY cheap on per-subscriber basis. Use of non-carrier-grade hardware is quite likely to _increase_ costs because of increased maintenance overhead.

No, the next battlefield will be 4G technologies. They have the potential to uproot established telecoms. 4G phones will be simple IPv6 nodes, and calls between them are going to be simple VoIP streams over data network which can be (by design) transmitted over the WiFi and public Internet.

PS: I worked as a network architect in a small cell-phone company.

Viability of open GSM stacks and equipment

Posted Sep 27, 2010 12:39 UTC (Mon) by sladen (guest, #27402) [Link] (6 responses)

Yes, going forward, the number of modems/radio interfaces available for backhaul on a device is seemingly always increasing (GSM/GPRS/EDGE, Bluetooth, W-CDMA/HSDPA, 802.11b/g, LTE...), but on a phone the GSM Um is going to be present for a very long time virtually anywhere in the world (except in Japan).

Instead of thinking about the costs of initial hardware certification, consider instead every business case that you may have encountered (in designing networks) where a mast had been planned but wasn't economically viable based on the threshold of subscribers in that area. Imagine re-evaluating those business cases with potentially 1/10th of the equipment running costs (power, cooling) and 1/10th of the capital equipment costs.

For a small telco such as Telecom Niue (or perhaps yourself) the turning-over-the-tables of current build-out viability is probably quite attractive, and potentially as disruptive as COTS/open-source has been in the rest of the electronics industry. There are people open to the possibility out there name a recent smartphone on the market that isn't now running a BSD/GPL Unixy kernel inside it and then project that same degree of confluence onto the infrastructure side.

Viability of open GSM stacks and equipment

Posted Sep 27, 2010 13:10 UTC (Mon) by Cyberax (✭ supporter ✭, #52523) [Link] (5 responses)

>Yes, going forward, the number of modems/radio interfaces available for backhaul on a device is seemingly always increasing (GSM/GPRS/EDGE, Bluetooth, W-CDMA/HSDPA, 802.11b/g, LTE...), but on a phone the GSM Um is going to be present for a very long time virtually anywhere in the world (except in Japan).

Not likely. AMPS/DAMPS died quickly with the advent of GSM/CDMA, for example (oh, sure there were few holdouts). Once we have viable 4G standards, they're going to spread quickly. There are just too many advantages: cheaper roaming, better data integration, more bandwidth, less power consumption, etc.

>Instead of thinking about the costs of initial hardware certification, consider instead every business case that you may have encountered (in designing networks) where a mast had been planned but wasn't economically viable based on the threshold of subscribers in that area.

Almost never happens. Even at $1 ARPU per month it's economically viable to install a tower even with 50 subscribers. You don't really get lower than that. And if you DO get lower, than most of your investment will be spent on getting uplink anyway (usually a microwave link, which requires, you guessed it, a tower for line-of-sight).

Viability of open GSM stacks and equipment

Posted Sep 30, 2010 7:13 UTC (Thu) by Cato (guest, #7643) [Link] (4 responses)

I doubt GSM is going to go away on the handset for at least 10 years, simply because there is so much GSM deployed world-wide and it will be convenient to be able to make voice calls even when visiting the most rural parts of the developing world. Given software radio and DSP technologies, there is very little extra cost to supporting GSM alongside UMTS and LTE.

GSM also has good coverage for rural areas, as a GSM cell can reach up to 35 km (http://en.wikipedia.org/wiki/GSM#Cellular_radio_network ) vs. "over 10km" in theory for UMTS (http://books.google.co.uk/books?id=7m-MnwW_o7AC&lpg=P... ). Even today in a Western European country, the only way I can get UMTS 3G coverage at home is via femtocell, and I'm only 5 km from the nearest 3G base station. The economics of deploying a UMTS or LTE base station closer to me will only stack up if there's a very cheap wireless backhaul technology that can handle the required throughput for multiple 3G/4G subscribers.

Viability of open GSM stacks and equipment

Posted Sep 30, 2010 12:54 UTC (Thu) by Cyberax (✭ supporter ✭, #52523) [Link] (2 responses)

Range of coverage can actually be better in 4G technologies. First, they are going to use more robust and efficient radio modulation technologies. I know that it's being specifically worked on.

For GSM maximum distance is limited to about 40km (by lightspeed so you can't do anything about it). It's quite feasible that 4G technologies will allow 50-70km maximum distance to tower.

UMTS is quite far from ideal here. We've learned a lot since it was first designed.

Viability of open GSM stacks and equipment

Posted Sep 30, 2010 19:42 UTC (Thu) by Jan_Zerebecki (guest, #70319) [Link] (1 responses)

> For GSM maximum distance is limited to about 40km (by lightspeed so you can't do anything about it).

Usually the range is limited to the distance the signal can travel in one timeslot, but it seems you can do something about it if your BTS is modified to allow the signal to arrive in the next timeslot.

Viability of open GSM stacks and equipment

Posted Sep 30, 2010 19:50 UTC (Thu) by Cyberax (✭ supporter ✭, #52523) [Link]

Yes, it's sometimes used. But not all devices will work in this case, and GSM you can get issues with interference.

Viability of open GSM stacks and equipment

Posted Oct 4, 2010 2:24 UTC (Mon) by showell (guest, #2929) [Link]

We have had our GSM cells working out to 121 kms using an Ericsson feature called extended range.

GSM will be with us for along time because the GSM chipsets are still 1/2 the price of the 3G / 4G ones (due mainly to IP payments). GSM handsets sell in poorer markets in massive quantities over 3G.

LTE and VoIP

Posted Sep 30, 2010 6:57 UTC (Thu) by Cato (guest, #7643) [Link]

It's not quite true to say that all 4G calls will be VoIP - true for WiMAX if you count that as 4G, but with LTE (successor to UMTS/GSM), it's still not clear exactly how voice will be handled. Some LTE operators will use "circuit switch fall back" to 3G for voice, some will use VoLGA ( http://findarticles.com/p/articles/mi_m0FGI/is_6_20/ai_n3... ), and others will go IMS (VoLTE), implying VoIP calls - http://www.pcworld.com/businesscenter/article/189339/mobi... and http://www.networkworld.com/news/2010/021510-gsma-one-voi... have some discussion, but IMS is notoriously complex to deploy (it's been the "next thing" for about 10 years now).

Basically, 3G voice fallback has issues with the time to switch networks, while VoLTE is the long term solution (but has had to add SMS support to IMS), while VoLGA is the interim solution using GAN (Generic Access Network, aka UMA) - essentially circuit switch calls over an IP infrastructure, also used today by mobile phones that switch between GSM/3G and WiFi while on the same call (e.g. Blackberry and some Nokias), bypassing the need for femtocells in some cases.

Ultimately it looks like everyone will use VoIP with LTE, but it will take a few years given that some of the VoLTE standards aren't yet finalised.