summaryrefslogtreecommitdiffstats
path: root/Tex
diff options
context:
space:
mode:
authorTom2012-05-11 17:12:48 +0200
committerTom2012-05-11 17:12:48 +0200
commit9bfa449c9998c94b9fde3bc0e0dcc7bd6e97566d (patch)
tree7ad46e21541572397a220f415ca10af29f433304 /Tex
parentfinished few experiments with documentation (diff)
downloadimsi-catcher-detection-9bfa449c9998c94b9fde3bc0e0dcc7bd6e97566d.tar.gz
imsi-catcher-detection-9bfa449c9998c94b9fde3bc0e0dcc7bd6e97566d.tar.xz
imsi-catcher-detection-9bfa449c9998c94b9fde3bc0e0dcc7bd6e97566d.zip
finished experiments seciton apart from tables where data is needed and appendix
Diffstat (limited to 'Tex')
-rw-r--r--Tex/Content/Appendix.tex194
-rw-r--r--Tex/Content/Detection.tex7
-rw-r--r--Tex/Content/Evaluation.tex171
-rw-r--r--Tex/Content/Motivation.tex8
-rw-r--r--Tex/Master/Master.acn133
-rw-r--r--Tex/Master/Master.aux197
-rw-r--r--Tex/Master/Master.ist2
-rw-r--r--Tex/Master/Master.log148
-rw-r--r--Tex/Master/Master.pdfbin13533667 -> 13560498 bytes
-rw-r--r--Tex/Master/Master.synctex.gzbin533747 -> 627324 bytes
-rw-r--r--Tex/Master/Master.toc65
11 files changed, 596 insertions, 329 deletions
diff --git a/Tex/Content/Appendix.tex b/Tex/Content/Appendix.tex
index 5813207..65c6fdf 100644
--- a/Tex/Content/Appendix.tex
+++ b/Tex/Content/Appendix.tex
@@ -1,4 +1,5 @@
\chapter{OsmocomBB}
+This section contains general information about how to operate and setup the OsmocomBB framework and the Motorola C123.
\section{Installation}
\label{sec:osmo_install}
The environment used for this project was a Thinkpad X220 Tablet running Xubuntu Linux 11.10.
@@ -50,28 +51,154 @@ After \texttt{osmocon} is started and running any application can be started wit
cd ../layer23/src/misc/
sudo catcher
\end{lstlisting}
-
+\newpage
\section{Serial Cable Schematics}
\label{sec:osmo_serial_schematics}
A T191 unlock cable used to connect the Motorola C123 can either be obtained by ordering it from one of the mentioned stores or by building it from scratch.
-The schematics can be seen in Figure \ref{fig:schematics}.
-
-\begin{figure}
-\centering
+These are the schematics required for building the unlock cable.
+\vfill
+\begin{center}
\includegraphics[width=.9\textwidth]{../Images/t191cable}
-\caption{Schematics for the T191 unlock cable.}
-\label{fig:schematics}
-\end{figure}
-
+\end{center}
+\vfill
\chapter{IMSI Catcher Detection System}
+This section will cover some code related topics of the ICDS.
\section{Extextions}
\label{sec:extensions}
+Rules, evaluators and filters are implemented in a way that new modules can be added quickly by way of inheritance and instantiating them in the constructor of the controller so they are known to the system.
+The following example shows how to implement a new rule and add it to the system.
+This exemplary process is nearly the same for filters and evaluators.
+
+At first this base class has to be derived.
+\begin{lstlisting}
+class Rule:
+ #set whether the rule should be used by the
+ #controller
+ is_active = False
+ #string that will identify the rule in the report
+ identifier = 'Rule'
+
+ #the logic of the rule, will be called by controller
+ def check(self, arfcn, base_station_list):
+ return RuleResult.CRITICAL
+\end{lstlisting}
+
+The new rule class needs to override the check method to do something meaningful.
+The identifier should also be set to a proper value.
+\begin{lstlisting}
+class MyRule (Rule):
+ identifier = 'My own Rule'
+ def check(self,arfcn, base_station_list):
+ result = RuleResult.CRITICAL
+ #do some logic here and set result
+ return result
+\end{lstlisting}
+\texttt{arfcn} and \texttt{base\_station\_list} are given to the check method by the controller.
+The first parameter is the ARFCN of the base station to which the evaluation will be applied.
+The second one is a list of all the base stations with complete information as far as it has been
+obtained by the ICDS.
+
+After it has been implemented it can be instatiated and added to the list of active rules in the
+constructor of the controller.
+\begin{lstlisting}
+class PyCatcherController:
+ ...
+ def __init__ (self):
+ ...
+ self.my_rule = MyRule()
+ self.my_rule.is_active = True
+ self._rules.add(self._my_rule)
+ ...
+\end{lstlisting}
\section{Example Configuration}
\label{sec:example_config}
+This example configuration has been used for the evaluation in the Freiburg area.
+\begin{lstlisting}
+#Core Configuration ---------------------------------------
+
+#Settings for the Motorola C123 .
+Device_settings = { 'mobile_device' : '/dev/ttyUSB0',
+ 'xor_type' : 'c123xor',
+ 'firmware' : 'compal_e88',
+ }
+
+#Location of the osmocom library.
+Osmocon_lib = '''/home/tom/imsi-catcher-detection/Src/
+osmolib/src'''
+
+#Generates commands from location and device settings.
+#Does normally not have to be edited.
+Commands = {'osmocon_command' : [Osmocon_lib +
+ '/host/osmocon/osmocon',
+ '-p', Device_settings['mobile_device'],
+ '-m', Device_settings['xor_type'],
+ Osmocon_lib + '/target/firmware/board/'
+ + Device_settings['firmware']
+ + '/layer1.compalram.bin'],
+ 'scan_command' : [Osmocon_lib
+ + '/host/layer23/src/misc/catcher'],
+}
+
+#Rules Configuration --------------------------------------
+
+#A list of providers that should be taken as legitimate.
+Provider_list = ['T-Mobile', 'O2', 'Vodafone', 'E-Plus']
+
+#Countries where the given providers have presence.
+Provider_Country_list = {
+ 'T-Mobile':'Germany',
+ 'O2':'Germany',
+ 'Vodafone':'Germany',
+ 'E-Plus':'Germany'
+}
+
+#Comma separated list of LACs that can be observed in the
+#given area.
+LAC_mapping = {
+ 'T-Mobile' : [21014,21015],
+ 'O2' : [50945],
+ 'Vodafone' : [793],
+ 'E-Plus' : [138,588]
+}
+
+#Frequency intervals that are registered to the
+#given providers.
+ARFCN_mapping = {
+ 'T-Mobile' : [(13,39),(81, 102),(122,124),(587,611)],
+ 'O2' : [(0,0),(1000,1023),(637,723)],
+ 'Vodafone' : [(1,12),(50,80),(103,121),(725,751)],
+ 'E-Plus' : [(975,999),(777,863)]
+}
+
+#How much % the LAC of a base station can deviate from the
+#median before throwing an error (range 0 to 1 where 0
+#means no tolerance).
+LAC_threshold = 0
+
+#How much % the rx level is allowed to be away from the
+#interval located in the Location Area Database
+DB_RX_threshold = 0.05
+
+#How much % the rx is allowed to change during the course
+#of a scan.
+CH_RX_threshold = 0.02
+
+#Database Configuration -----------------------------------
+
+#The API key for OpenCellID.
+#Can be freely obtained by registering on the web site.
+Open_Cell_ID_Key = 'd7a5bc3f21b44d4bf93d1ec2b3f83dc4'
+
+#Path to the folder where databases should be saved to or
+#loaded from. The ICDS will look in this folder if databa-
+#ses are available.
+Database_path = '''/home/tom/imsi-catcher-detection/Src
+/PyCatcher/Databases/'''
+\end{lstlisting}
+
\chapter{System Information}
\label{sec:system_infos}
The following pages contain parsed System Information Messages of type 1-4 for reference.
-
\begin{figure}
\centering
\includegraphics[width=.9\textwidth]{../Images/sysinfo1}
@@ -94,4 +221,49 @@ The following pages contain parsed System Information Messages of type 1-4 for
\end{figure}
\chapter{Evaluation Data}
\section{IMSI Catcher Configurations}
-\section{ICDS Scans} \ No newline at end of file
+\label{sec:config_data}
+The folliwing tables contain the configurations that have been used throughout the long term test period.
+The configurations have been used in the order they appear in the tables.
+\begin{center}
+\begin{tabular}{lllll}
+\toprule
+ &Conf. 1 &Conf. 2 &Conf. 3 &Conf. 4\\
+\midrule
+ARFCN &50 &2 &978 &695 \\
+ShortName &T-Mobile &Vodafone &E-Plus &O2 \\
+MCC &262 &262 &262 &505 \\
+MNC &01 &02 &03 &07 \\
+LAC &21010 &793 &588 &50945 \\
+Cell ID &1 &2 &3 &4 \\
+Neighbours &- &1,2,3 &695, 20 &10, 20, 30\\
+\bottomrule
+\end{tabular}\\
+\vspace{1cm}
+\begin{tabular}{lllll}
+\toprule
+ &Conf. 5 &Conf. 6 &Conf. 7 &Conf. 8\\
+\midrule
+ARFCN &50 &2 &978 &695 \\
+ShortName &T-Mobile &Vodafone &E-Plus &O2 \\
+MCC &262 &262 &262 &505 \\
+MNC &01 &02 &03 &07 \\
+LAC &21010 &793 &588 &50945 \\
+Cell ID &1 &2 &3 &4 \\
+Neighbours &- &1,2,3 &695, 20 &10, 20, 30\\
+\bottomrule
+\end{tabular}\\
+\vspace{1cm}
+\begin{tabular}{lllll}
+\toprule
+ &Conf. 9 &Conf. 10 &Conf. 11 &Conf. 12\\
+\midrule
+ARFCN &50 &2 &978 &695 \\
+ShortName &T-Mobile &Vodafone &E-Plus &O2 \\
+MCC &262 &262 &262 &505 \\
+MNC &01 &02 &03 &07 \\
+LAC &21010 &793 &588 &50945 \\
+Cell ID &1 &2 &3 &4 \\
+Neighbours &- &1,2,3 &695, 20 &10, 20, 30\\
+\bottomrule
+\end{tabular}
+\end{center} \ No newline at end of file
diff --git a/Tex/Content/Detection.tex b/Tex/Content/Detection.tex
index 6b5e175..2838959 100644
--- a/Tex/Content/Detection.tex
+++ b/Tex/Content/Detection.tex
@@ -165,6 +165,13 @@ Afterwards \texttt{catcher} tunes the phone to those specific frequencies where
At each such frequency it waits until all the System Information Messages are gathered and extracts parameters where possible.
The parameters along with the raw data are forwarded to the main \gls{icds} application for further evaluation.
+An example of a fully parsed System Information Type 1 can be seen in Figure \ref{fig:si1} \cite{protocols1999}.
+\begin{figure}
+\centering
+\includegraphics[width=.9\textwidth]{../Images/sysinfo1}
+\caption{System Information 1 Message \cite{protocols1999}.}
+\label{fig:si1}
+\end{figure}
Examples for all the System Information Messages used, along with an interpretation are located in Appendix \ref{sec:system_infos}.
As long as scanning mode is active all the available stations are scanned repeatedly and changes in the \glspl{bts} will continuously update the data model inside the \gls{icds} software.
The parameters harvested are:
diff --git a/Tex/Content/Evaluation.tex b/Tex/Content/Evaluation.tex
index 93b4f77..84426a2 100644
--- a/Tex/Content/Evaluation.tex
+++ b/Tex/Content/Evaluation.tex
@@ -109,9 +109,14 @@ What can be said though is that a base station that has been found may only be s
\subsection{Encryption Detection Speed}
\section{IMSI Catcher Detection}
+Before using an IMSI catcher for testing purpose or a launching an OpenBTS base station it should be ensured that licenses for the specific frequencies that are used, have been obtained.
+This way it can be ensured that the operation does not interfere with regular radio communication.
+Extra care should be taken when configuring the IMSI catcher to simulate a real base station to reject incoming connections when the experiments are done within a radio sealed room.
+Otherwise subscribers might get caught by the catcher and might not be able to initiate calls.
+How this can be done for the Open Source IMSI Catcher that is used to test the \gls{icds} is explained in the next section.
\subsection{Open Source IMSI Catcher}
-The remainder of the rules cannot be tested without an active IMSI catcher.
+The rules themselves cannot be tested without an active IMSI catcher.
For this purpose the Open Source IMSI Catcher \cite{dennis} is used.
This project builds up an IMSI catcher using only Open Source systems and freely available hardware so it can basically be used by anybody.
@@ -119,12 +124,12 @@ On the hardware side a computer running a Linux operating system is used, as wel
The \gls{usrp} allows the signal processing for radio transmissions to be done in software, therefore it can be used for a multitude of purposes and protocols.
Some hardware modifications have to be done to the device to empower it to send and receive data on the frequency bands used for \gls{gsm} communication.
An external clock needs to be used since \gls{gsm} operations are very time critical.
+Figure \ref{fig:setup} shows the Open Source IMSI Catcher and the \gls{icds} side by side.
On the software side GNU Radio\footnote{GNU Radio Project Wiki, \url{http://gnuradio.org/redmine/projects/gnuradio/wiki} [Online; Accessed 05.2012]}, OpenBTS\footnote{OpenBTS Project Wiki, \url{http://wush.net/trac/rangepublic} [Online; Accessed 05.2012]} and Asterisk\footnote{Asterisk, \url{http://www.asterisk.org} [Online; Accessed 05.2012]} are used to achieve the functionality provided by a IMSI catcher.
-Figure \ref{fig:osic} shows how these components are chained and used together.
\begin{figure}
-\caption{Open Source IMSI Catcher.}
-\label{fig:osic}
+\caption{Open Source IMSI Catcher (left) with USRP (black) and external clock (blue) and the ICDS (right) with the Motorola C123 connected.}
+\label{fig:setup}
\end{figure}
The raw data that is received by the \gls{usrp} is sent to the GNU Radio component which works as a software side interface to the \gls{usrp}.
This data is taken by the OpenBTS software that emulates base station behaviour and has an integrated module simulating a \gls{vlr} and handing out \glspl{tmsi}.
@@ -160,74 +165,140 @@ GSM.T3212 1
\end{figure}
\texttt{Control.OpenRegistration} is explicitly set to 0 which prevents anyone from connecting to the IMSI catcher since connections are not part of the test and we do not want to interfere with other peoples' communications in the area.
-
\subsection{Rule Evaluation}
-
-\subsection{Attack Scenarios}
-Since all the rules have been tested we assume from this point on the IMSI catcher is configured correctly, meaning that parameters like the \gls{arfcn}, \gls{lac} or provider have been set up in correct and consistent way so the respective rules will not show an alarm.
-Consistent parameters for the four providers in Germany can be found in Tables \ref{tab:consistent_parameters} (a)-(d).
+With the environment set up we will now evaluate the individual rules.
+The IMSI catcher was launched with the four different configurations shown in Table \ref{tab:err_configs}.
\begin{table}
\centering
-\subtable[T-Mobile]{
-\begin{tabular}{ll}
+\begin{tabular}{lllll}
\toprule
-Parameter &Range\\
+ &Conf. 1 &Conf. 2 &Conf. 3 &Conf. 4\\
\midrule
-Name &T-Mobile\\
-ARFCN &13-49, 81-102,\\
- &122-124, 587-611\\
-LAC &21014 / 21015\\
-MCC &262\\
-MNC &01\\
+ARFCN &50 &2 &978 &695 \\
+ShortName &T-Mobile &Vodafone &E-Plus &O2 \\
+MCC &262 &262 &262 &505 \\
+MNC &01 &02 &03 &07 \\
+LAC &21010 &793 &588 &50945 \\
+Cell ID &1 &2 &3 &4 \\
+Neighbours &- &1,2,3 &695, 20 &10, 20, 30\\
\bottomrule
\end{tabular}
-}
-\subtable[Vodafone]{
-\begin{tabular}{ll}
+\caption{Erroneous configurations for the IMSI catcher.}
+\label{tab:err_configs}
+\end{table}
+With each of these configurations the \gls{icds} detected the catcher for various reasons:
+%TODO: fill in the missing rules
+\begin{itemize}
+ \item Config 1: For this configuration the \gls{icds} detected that \gls{arfcn} 50 is not in the range registered to the provider T-Mobile.
+ Apart from that the \gls{lac} differed from the ones found in the Freiburg area.
+ The neighbouring cell list was also empty which is a strong indication for an IMSI catcher.\\
+ Rules triggered:
+ \item Config 2: The detected errors within this configuration are that none of the neighbours mentioned was in range to be detected, which is very unlikely for a normal base station.\\
+ Rules triggered:
+ \item Config 3: In this configuration one of the neighbours, namely 695 is not consistent with the set provider.
+ The base stations breaks up the isolated subgraph for E-Plus and is thus detected.\\
+ Rules triggered:
+ \item Config 4: The \gls{mcc} is not consistent with the chosen provider.
+ Additionally another warning is thrown since the neighbourhood list only contained nodes that were only found indirectly.\\
+ Rules triggered:
+\end{itemize}
+The \emph{LAC Change} and the \emph{rx Change} rules remain to be tested.
+For this purpose the procedure was as follows.
+At first the \gls{icds} was turned on an scanning commenced.
+Afterwards the IMSI catcher was turned on, operating on the same frequency as a base station that was previously discovered.
+This was repeated several times with the IMSI catcher replacing another node each time.
+Table \ref{tab:par_change} summarises the findings.
+The configurations used can be found in Appendix \ref{sec:config_data}.
+In all cases the \gls{icds} was able to detect the IMSI catcher after about 2 minutes.
+These times can vary however depending on the timing of the catcher being turned on and the time it takes for rescanning a base stations as described in the beginning of this chapter.
+\begin{table}
+\centering
+\begin{tabular}{lrrcrrrllr}
\toprule
-Parameter &Range\\
+ & &\multicolumn{2}{c}{rx} &\phantom{a} &\multicolumn{2}{c}{LAC} & & & \\
+ \cmidrule{3-4} \cmidrule{6-7}
+Config &Cell &Old &New & &Old &New &rx det. &LAC det. &Time\\
\midrule
-Name &Vodafone\\
-ARFCN &1-12, 50-80,\\
- &103-121, 725-751\\
-LAC &793\\
-MCC &262\\
-MNC &02\\
+Conf1 &877 &-94 dB &-55dB & &138 &139 &Yes &Yes &42 s\\
+Conf1 &877 &-94 dB &-55dB & &138 &139 &Yes &Yes &42 s\\
+Conf1 &877 &-94 dB &-55dB & &138 &139 &Yes &Yes &42 s\\
+Conf1 &877 &-94 dB &-55dB & &138 &139 &Yes &Yes &42 s\\
\bottomrule
\end{tabular}
-}
-\subtable[E-Plus]{
-\begin{tabular}{ll}
+\caption{failzor}
+\label{tab:par_change}
+\end{table}
+
+\subsection{Long Term Test}
+To evaluate the \emph{Location Area Database} rule a long term test has been carried out.
+This has been done to find out whether base stations in the surrounding area change on a regular basis or stay the same (including their respective configurations and reception levels).
+This is essential for a Location Area Database to be usable over a longer period of time.
+
+The database itself has been built over the course of one week in Freiburg, Thuner Weg.
+%TODO: flil in exact values here
+During this period no parameter changes were detected and the reception of base stations only varied inside a very small interval.
+After that each day for another week, two scans per day were done.
+One of them while the IMSI catcher was operating, the other without the device present.
+This was done to evaluate if false positives or negatives occurred using the database and all the methods mentioned above over a larger period of time.
+The results on a per day basis are summarised in Table \ref{tab:longterm_test}.
+\begin{table}
+\centering
+\begin{tabular}{lllllrr}
\toprule
-Parameter &Range\\
+Date &Time &Catcher &Detected &Detected by &False positives &False negatives\\
\midrule
-Name &E-Plus\\
-ARFCN &975-999,\\
- &777-863\\
-LAC &588 / 138\\
-MCC &262\\
-MNC &03\\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
+ & & & & & & \\
\bottomrule
\end{tabular}
-}
-\subtable[O2]{
-\begin{tabular}{ll}
+\caption{Results of the long term evaluation.}
+\label{tab:longterm_test}
+\end{table}
+
+\subsection{Attack Scenarios}
+Since all the configuration rules have been tested we assume from this point on that the IMSI catcher is configured correctly, meaning that parameters like the \gls{arfcn}, \gls{lac} or provider have been set up in correct and consistent way so the respective rules will not show an alarm.
+Consistent parameters for the four providers in Germany can be found in Table \ref{tab:consistent_parameters}.
+\begin{table}
+\centering
+\begin{tabular}{lllll}
\toprule
-Parameter &Range\\
+Parameter &T-Mobile &Vodafone &E-Plus &O2\\
\midrule
-Name &O2\\
-ARFCN &0, 1000-1023,\\
- &637-723\\
-LAC &50945\\
-MCC &262\\
-MNC &07\\
+ARFCN &13-49, 81-102, &1-12, 50-80, &975-999, &0, 1000-1023,\\
+ &122-124, 587-611 &103-121, 725-751 &777-863 &637-723\\
+LAC &21014/21015 &793 &588/138 &50945\\
+MCC &262 &262 &262 &262\\
+MNC &01 &02 &03 &07\\
\bottomrule
\end{tabular}
-}
\caption{Consistent parameter configurations in the Freiburg area for the four German providers.}
\label{tab:consistent_parameters}
\end{table}
Note that the Cell ID can be a arbitrary value as long as it is unique in the area of reception.
Cell IDs measured from different base stations do not follow any particular schema.
+The scenarios are built after the attacks described in Section \ref{sec:attacks}.
+
+The first scenario will simulate the case where the catcher opened up a new cell with a good reception and forced the \gls{ms} into normal cell selection mode by disconnecting it from the current base station via a jammer.
-\subsection{Long Term Test} \ No newline at end of file
+The second scenario simulates the attack where the IMSI catcher replaces a base station with a bad reception in the neighbourhood of the cell the \gls{ms} is connected to.
+This way the reception drastically improves on that particular frequency suggesting to the \gls{ms} that the subscriber moved to the close perimeter of that \gls{bts} and initiating a handover.
+Figure \ref{fig:takeover_attack} illustrates this particular attack.
+\begin{figure}
+\centering
+\caption{Takeover attack of an IMSI catcher on a base station.}
+\label{fig:takeover_attack}
+\end{figure} \ No newline at end of file
diff --git a/Tex/Content/Motivation.tex b/Tex/Content/Motivation.tex
index 6ef734d..3aee29a 100644
--- a/Tex/Content/Motivation.tex
+++ b/Tex/Content/Motivation.tex
@@ -6,14 +6,6 @@ Since the advent of portable radio equipment and portable microprocessors, mobil
From this point on,
\section{Structure}
-The remainder of this thesis is structured as follows:
-Chapter \ref{ch:gsm} will give an overview of how the \gls{gsm} network is structured as well as describe the different components needed for operation and how they work together.
-The second part of this chapter will discuss how the $U_m$ interface, or air interface works and what kind of information can be drawn off this interface.
-The last part shows how an IMSI-Catcher works and where is it situated in the network shown before.
-Possible attacks of how an IMSI-Catcher can be introduced in such a network are listed as well.
-Finally there will be a discussion about the judicial situation in Germany concerning means of electronic surveillance for crime prevention and how this affects privacy and the basic rights of citizens.
-
-The next chapter outlines the frameworks and the hardware that was used for this project.
\section{Disclaimer}
%senden im eigenen netz mit catcher
diff --git a/Tex/Master/Master.acn b/Tex/Master/Master.acn
index 53f5349..fe939b5 100644
--- a/Tex/Master/Master.acn
+++ b/Tex/Master/Master.acn
@@ -496,83 +496,83 @@
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{44}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{44}
\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{44}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{BSIC?\glossaryentryfield{bsic}{\glsnamefont{BSIC}}{Base Station Identification Code}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{NCC?\glossaryentryfield{ncc}{\glsnamefont{NCC}}{Network Color Code}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{BCC?\glossaryentryfield{bcc}{\glsnamefont{BCC}}{Base Station Color Code}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{MCC?\glossaryentryfield{mcc}{\glsnamefont{MCC}}{Mobile Country Code}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{MNC?\glossaryentryfield{mnc}{\glsnamefont{MNC}}{Mobile Network Code}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{45}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{46}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{46}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{BSIC?\glossaryentryfield{bsic}{\glsnamefont{BSIC}}{Base Station Identification Code}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{NCC?\glossaryentryfield{ncc}{\glsnamefont{NCC}}{Network Color Code}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{BCC?\glossaryentryfield{bcc}{\glsnamefont{BCC}}{Base Station Color Code}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{MCC?\glossaryentryfield{mcc}{\glsnamefont{MCC}}{Mobile Country Code}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{MNC?\glossaryentryfield{mnc}{\glsnamefont{MNC}}{Mobile Network Code}{\relax }|setentrycounter{page}\glsnumberformat}{46}
\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{46}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{46}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{46}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{47}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{46}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{47}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{47}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{48}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{47}
+\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{47}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{47}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{47}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{48}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{48}
-\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{48}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{48}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{48}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{48}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{48}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{50}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{49}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{49}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{49}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{49}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{49}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{49}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{49}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
-\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{51}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{51}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{51}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{51}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{51}
+\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{51}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{51}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{52}
-\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{52}
-\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{52}
-\glossaryentry{MVC?\glossaryentryfield{mvc}{\glsnamefont{MVC}}{Model View Controller}{\relax }|setentrycounter{page}\glsnumberformat}{52}
-\glossaryentry{MVC?\glossaryentryfield{mvc}{\glsnamefont{MVC}}{Model View Controller}{\relax }|setentrycounter{page}\glsnumberformat}{52}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{52}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{52}
+\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{52}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{52}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{52}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{53}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{53}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{53}
+\glossaryentry{MVC?\glossaryentryfield{mvc}{\glsnamefont{MVC}}{Model View Controller}{\relax }|setentrycounter{page}\glsnumberformat}{53}
+\glossaryentry{MVC?\glossaryentryfield{mvc}{\glsnamefont{MVC}}{Model View Controller}{\relax }|setentrycounter{page}\glsnumberformat}{53}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{54}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{54}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{54}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{CSV?\glossaryentryfield{csv}{\glsnamefont{CSV}}{Comma Separated Value}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{56}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{55}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{55}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{55}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{57}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{57}
+\glossaryentry{CSV?\glossaryentryfield{csv}{\glsnamefont{CSV}}{Comma Separated Value}{\relax }|setentrycounter{page}\glsnumberformat}{57}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{57}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{57}
-\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{57}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{59}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{57}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{57}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{58}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{58}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{58}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{58}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{58}
+\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{58}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{60}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{61}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{61}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{61}
@@ -582,10 +582,12 @@
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{62}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{62}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{63}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{64}
\glossaryentry{USRP?\glossaryentryfield{usrp}{\glsnamefont{USRP}}{Universal Software Radio Peripheral}{\relax }|setentrycounter{page}\glsnumberformat}{64}
\glossaryentry{USRP?\glossaryentryfield{usrp}{\glsnamefont{USRP}}{Universal Software Radio Peripheral}{\relax }|setentrycounter{page}\glsnumberformat}{64}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{64}
\glossaryentry{USRP?\glossaryentryfield{usrp}{\glsnamefont{USRP}}{Universal Software Radio Peripheral}{\relax }|setentrycounter{page}\glsnumberformat}{64}
\glossaryentry{USRP?\glossaryentryfield{usrp}{\glsnamefont{USRP}}{Universal Software Radio Peripheral}{\relax }|setentrycounter{page}\glsnumberformat}{64}
\glossaryentry{VLR?\glossaryentryfield{vlr}{\glsnamefont{VLR}}{Visitor Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{64}
@@ -597,5 +599,16 @@
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
\glossaryentry{VoIP?\glossaryentryfield{voip}{\glsnamefont{VoIP}}{Voice over IP}{\relax }|setentrycounter{page}\glsnumberformat}{64}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{65}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{65}
\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{65}
\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{65}
+\glossaryentry{MCC?\glossaryentryfield{mcc}{\glsnamefont{MCC}}{Mobile Country Code}{\relax }|setentrycounter{page}\glsnumberformat}{66}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{66}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{66}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{67}
+\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{67}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{67}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{67}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{67}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{67}
diff --git a/Tex/Master/Master.aux b/Tex/Master/Master.aux
index 7e500b9..28872c7 100644
--- a/Tex/Master/Master.aux
+++ b/Tex/Master/Master.aux
@@ -244,62 +244,67 @@
\newlabel{sec:info_gathering}{{3.2.1}{43}}
\citation{GSM2009}
\citation{GSM2009}
+\citation{protocols1999}
+\citation{protocols1999}
+\citation{protocols1999}
\@writefile{lot}{\contentsline {table}{\numberline {3.2}{\ignorespaces Type Codes and the corresponding System Information Types \cite {GSM2009}.}}{44}}
\newlabel{tab:tc_mapping}{{3.2}{44}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.2}Information Evaluation}{45}}
-\newlabel{sec:info_evaluation}{{3.2.2}{45}}
-\@writefile{lot}{\contentsline {table}{\numberline {3.3}{\ignorespaces Configuration Rules implemented inside the ICDS.}}{46}}
-\newlabel{tab:config_rules}{{3.3}{46}}
-\@writefile{lot}{\contentsline {table}{\numberline {3.4}{\ignorespaces Context Rules implemented inside the ICDS.}}{47}}
-\newlabel{tab:context_rules}{{3.4}{47}}
-\FN@pp@footnote@aux{11}{47}
-\@writefile{toc}{\contentsline {subsubsection}{Neighbourhood Structure}{47}}
-\FN@pp@footnote@aux{12}{48}
-\@writefile{toc}{\contentsline {subsubsection}{Base Station Evaluation}{48}}
-\@writefile{lof}{\contentsline {figure}{\numberline {3.3}{\ignorespaces Base stations and their neighbourhood connections at the Technische Fakult\"at.}}{49}}
-\newlabel{fig:neighbourhood_example}{{3.3}{49}}
-\@writefile{lof}{\contentsline {figure}{\numberline {3.4}{\ignorespaces Comparison between a normal neighbourhood subgraph and a tainted one.}}{49}}
-\@writefile{lof}{\contentsline {subfigure}{\numberline{(a)}{\ignorespaces {Normal neighbourhood}}}{49}}
-\@writefile{lof}{\contentsline {subfigure}{\numberline{(b)}{\ignorespaces {Tainted neighbourhood}}}{49}}
-\newlabel{fig:structure_comparison}{{3.4}{49}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.3}Forged Parameters}{50}}
-\newlabel{sec:fake_parameters}{{3.2.3}{50}}
+\@writefile{lof}{\contentsline {figure}{\numberline {3.3}{\ignorespaces System Information 1 Message \cite {protocols1999}.}}{45}}
+\newlabel{fig:si1}{{3.3}{45}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.2}Information Evaluation}{46}}
+\newlabel{sec:info_evaluation}{{3.2.2}{46}}
+\@writefile{lot}{\contentsline {table}{\numberline {3.3}{\ignorespaces Configuration Rules implemented inside the ICDS.}}{47}}
+\newlabel{tab:config_rules}{{3.3}{47}}
+\@writefile{lot}{\contentsline {table}{\numberline {3.4}{\ignorespaces Context Rules implemented inside the ICDS.}}{48}}
+\newlabel{tab:context_rules}{{3.4}{48}}
+\FN@pp@footnote@aux{11}{48}
+\@writefile{toc}{\contentsline {subsubsection}{Neighbourhood Structure}{48}}
+\FN@pp@footnote@aux{12}{49}
+\@writefile{toc}{\contentsline {subsubsection}{Base Station Evaluation}{49}}
+\@writefile{lof}{\contentsline {figure}{\numberline {3.4}{\ignorespaces Base stations and their neighbourhood connections at the Technische Fakult\"at.}}{50}}
+\newlabel{fig:neighbourhood_example}{{3.4}{50}}
+\@writefile{lof}{\contentsline {figure}{\numberline {3.5}{\ignorespaces Comparison between a normal neighbourhood subgraph and a tainted one.}}{50}}
+\@writefile{lof}{\contentsline {subfigure}{\numberline{(a)}{\ignorespaces {Normal neighbourhood}}}{50}}
+\@writefile{lof}{\contentsline {subfigure}{\numberline{(b)}{\ignorespaces {Tainted neighbourhood}}}{50}}
+\newlabel{fig:structure_comparison}{{3.5}{50}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.3}Forged Parameters}{51}}
+\newlabel{sec:fake_parameters}{{3.2.3}{51}}
\citation{wiki_cells}
-\@writefile{toc}{\contentsline {subsubsection}{Database Rules}{51}}
-\FN@pp@footnote@aux{13}{51}
-\FN@pp@footnote@aux{14}{51}
-\FN@pp@footnote@aux{15}{51}
-\@writefile{lof}{\contentsline {figure}{\numberline {3.5}{\ignorespaces System architecture of the ICDS. The arrows indicate the flow of data.}}{52}}
-\newlabel{fig:architecture}{{3.5}{52}}
-\@writefile{toc}{\contentsline {section}{\numberline {3.3}IMSI Catcher Detection System}{52}}
-\newlabel{sec:icds}{{3.3}{52}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.3.1}Implemetation}{52}}
-\@writefile{lof}{\contentsline {figure}{\numberline {3.6}{\ignorespaces Configuration Dictionary in the settings file.}}{53}}
-\newlabel{fig:python_dict}{{3.6}{53}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.3.2}Configuration}{53}}
-\newlabel{sec:configuration}{{3.3.2}{53}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.3.3}Operation}{54}}
-\newlabel{sec:icds_operation}{{3.3.3}{54}}
-\@writefile{lof}{\contentsline {figure}{\numberline {3.7}{\ignorespaces The ICDS main window.}}{55}}
-\newlabel{fig:icds}{{3.7}{55}}
-\@writefile{toc}{\contentsline {paragraph}{Sweep scans:}{57}}
-\@writefile{toc}{\contentsline {paragraph}{CellID Information:}{57}}
-\newlabel{fig:filters_window}{{3.8(a)}{58}}
-\newlabel{sub@fig:filters_window}{{(a)}{58}}
-\newlabel{fig:rules_window}{{3.8(b)}{58}}
-\newlabel{sub@fig:rules_window}{{(b)}{58}}
-\newlabel{fig:databases}{{3.8(c)}{58}}
-\newlabel{sub@fig:databases}{{(c)}{58}}
-\newlabel{fig:encryption_window}{{3.8(d)}{58}}
-\newlabel{sub@fig:encryption_window}{{(d)}{58}}
-\@writefile{lof}{\contentsline {figure}{\numberline {3.8}{\ignorespaces Dialogs for different settings.}}{58}}
-\@writefile{lof}{\contentsline {subfigure}{\numberline{(a)}{\ignorespaces {Filters window.}}}{58}}
-\@writefile{lof}{\contentsline {subfigure}{\numberline{(b)}{\ignorespaces {Rules window.}}}{58}}
-\@writefile{lof}{\contentsline {subfigure}{\numberline{(c)}{\ignorespaces {Databases window.}}}{58}}
-\@writefile{lof}{\contentsline {subfigure}{\numberline{(d)}{\ignorespaces {Encryption window (not yet implemented).}}}{58}}
-\@writefile{toc}{\contentsline {paragraph}{Location Area Database:}{59}}
-\@writefile{toc}{\contentsline {paragraph}{Scan Encryption:}{59}}
-\@writefile{toc}{\contentsline {paragraph}{User Mode:}{59}}
+\@writefile{toc}{\contentsline {subsubsection}{Database Rules}{52}}
+\FN@pp@footnote@aux{13}{52}
+\FN@pp@footnote@aux{14}{52}
+\FN@pp@footnote@aux{15}{52}
+\@writefile{lof}{\contentsline {figure}{\numberline {3.6}{\ignorespaces System architecture of the ICDS. The arrows indicate the flow of data.}}{53}}
+\newlabel{fig:architecture}{{3.6}{53}}
+\@writefile{toc}{\contentsline {section}{\numberline {3.3}IMSI Catcher Detection System}{53}}
+\newlabel{sec:icds}{{3.3}{53}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.3.1}Implemetation}{53}}
+\@writefile{lof}{\contentsline {figure}{\numberline {3.7}{\ignorespaces Configuration Dictionary in the settings file.}}{54}}
+\newlabel{fig:python_dict}{{3.7}{54}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.3.2}Configuration}{54}}
+\newlabel{sec:configuration}{{3.3.2}{54}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.3.3}Operation}{55}}
+\newlabel{sec:icds_operation}{{3.3.3}{55}}
+\@writefile{lof}{\contentsline {figure}{\numberline {3.8}{\ignorespaces The ICDS main window.}}{56}}
+\newlabel{fig:icds}{{3.8}{56}}
+\@writefile{toc}{\contentsline {paragraph}{Sweep scans:}{58}}
+\@writefile{toc}{\contentsline {paragraph}{CellID Information:}{58}}
+\newlabel{fig:filters_window}{{3.9(a)}{59}}
+\newlabel{sub@fig:filters_window}{{(a)}{59}}
+\newlabel{fig:rules_window}{{3.9(b)}{59}}
+\newlabel{sub@fig:rules_window}{{(b)}{59}}
+\newlabel{fig:databases}{{3.9(c)}{59}}
+\newlabel{sub@fig:databases}{{(c)}{59}}
+\newlabel{fig:encryption_window}{{3.9(d)}{59}}
+\newlabel{sub@fig:encryption_window}{{(d)}{59}}
+\@writefile{lof}{\contentsline {figure}{\numberline {3.9}{\ignorespaces Dialogs for different settings.}}{59}}
+\@writefile{lof}{\contentsline {subfigure}{\numberline{(a)}{\ignorespaces {Filters window.}}}{59}}
+\@writefile{lof}{\contentsline {subfigure}{\numberline{(b)}{\ignorespaces {Rules window.}}}{59}}
+\@writefile{lof}{\contentsline {subfigure}{\numberline{(c)}{\ignorespaces {Databases window.}}}{59}}
+\@writefile{lof}{\contentsline {subfigure}{\numberline{(d)}{\ignorespaces {Encryption window (not yet implemented).}}}{59}}
+\@writefile{toc}{\contentsline {paragraph}{Location Area Database:}{60}}
+\@writefile{toc}{\contentsline {paragraph}{Scan Encryption:}{60}}
+\@writefile{toc}{\contentsline {paragraph}{User Mode:}{60}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\@writefile{toc}{\contentsline {chapter}{\numberline {4}Evaluation}{61}}
@@ -312,14 +317,14 @@
\@writefile{lof}{\contentsline {figure}{\numberline {4.1}{\ignorespaces Scan durations for the sample data sets.}}{62}}
\newlabel{fig:durations}{{4.1}{62}}
\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.1}Scan Duration}{62}}
-\citation{dennis}
\@writefile{lot}{\contentsline {table}{\numberline {4.2}{\ignorespaces Coverage for Google Mobile Maps and OpenCellID on the data sets with the time needed in s for fetching the information.}}{63}}
\newlabel{tab:coverage}{{4.2}{63}}
\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.2}Cell ID Databases}{63}}
-\@writefile{lof}{\contentsline {figure}{\numberline {4.2}{\ignorespaces Open Source IMSI Catcher.}}{64}}
-\newlabel{fig:osic}{{4.2}{64}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.3}Encryption Detection Speed}{64}}
-\@writefile{toc}{\contentsline {section}{\numberline {4.2}IMSI Catcher Detection}{64}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.3}Encryption Detection Speed}{63}}
+\@writefile{toc}{\contentsline {section}{\numberline {4.2}IMSI Catcher Detection}{63}}
+\citation{dennis}
+\@writefile{lof}{\contentsline {figure}{\numberline {4.2}{\ignorespaces Open Source IMSI Catcher (left) with USRP (black) and external clock (blue) and the ICDS (right) with the Motorola C123 connected.}}{64}}
+\newlabel{fig:setup}{{4.2}{64}}
\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.1}Open Source IMSI Catcher}{64}}
\FN@pp@footnote@aux{16}{64}
\FN@pp@footnote@aux{17}{64}
@@ -327,21 +332,25 @@
\@writefile{lof}{\contentsline {figure}{\numberline {4.3}{\ignorespaces Excerpt of a \texttt {OpenBTS.conf}.}}{65}}
\newlabel{fig:openbts_parameters}{{4.3}{65}}
\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.2}Rule Evaluation}{65}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.3}Attack Scenarios}{65}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.4}Long Term Test}{65}}
-\FN@pp@footnotehinttrue
-\@writefile{lot}{\contentsline {subtable}{\numberline{(a)}{\ignorespaces {T-Mobile}}}{66}}
-\@writefile{lot}{\contentsline {subtable}{\numberline{(b)}{\ignorespaces {Vodafone}}}{66}}
-\@writefile{lot}{\contentsline {subtable}{\numberline{(c)}{\ignorespaces {E-Plus}}}{66}}
-\@writefile{lot}{\contentsline {subtable}{\numberline{(d)}{\ignorespaces {O2}}}{66}}
-\@writefile{lot}{\contentsline {table}{\numberline {4.3}{\ignorespaces Consistent parameter configurations in the Freiburg area for the four German providers.}}{66}}
-\newlabel{tab:consistent_parameters}{{4.3}{66}}
-\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {5}Conclusion}{67}}
+\@writefile{lot}{\contentsline {table}{\numberline {4.3}{\ignorespaces Erroneous configurations for the IMSI catcher.}}{66}}
+\newlabel{tab:err_configs}{{4.3}{66}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.3}Long Term Test}{66}}
+\@writefile{lot}{\contentsline {table}{\numberline {4.4}{\ignorespaces failzor}}{67}}
+\newlabel{tab:par_change}{{4.4}{67}}
+\@writefile{lof}{\contentsline {figure}{\numberline {4.4}{\ignorespaces Takeover attack of an IMSI catcher on a base station.}}{67}}
+\newlabel{fig:takeover_attack}{{4.4}{67}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.4}Attack Scenarios}{67}}
+\FN@pp@footnotehinttrue
+\@writefile{lot}{\contentsline {table}{\numberline {4.5}{\ignorespaces Results of the long term evaluation.}}{68}}
+\newlabel{tab:longterm_test}{{4.5}{68}}
+\@writefile{lot}{\contentsline {table}{\numberline {4.6}{\ignorespaces Consistent parameter configurations in the Freiburg area for the four German providers.}}{68}}
+\newlabel{tab:consistent_parameters}{{4.6}{68}}
+\FN@pp@footnotehinttrue
+\@writefile{toc}{\contentsline {chapter}{\numberline {5}Conclusion}{69}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {5.1}Future Work}{67}}
+\@writefile{toc}{\contentsline {section}{\numberline {5.1}Future Work}{69}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
@@ -362,7 +371,7 @@
\bibcite{fox}{12}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{Bibliography}{69}}
+\@writefile{toc}{\contentsline {chapter}{Bibliography}{71}}
\bibcite{GSM_stats2011}{13}
\bibcite{GSM_history2011}{14}
\bibcite{osmo_slides}{15}
@@ -384,50 +393,48 @@
\bibcite{imsi_wiki}{31}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {A}OsmocomBB}{73}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {A}OsmocomBB}{75}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {A.1}Installation}{73}}
-\newlabel{sec:osmo_install}{{A.1}{73}}
-\@writefile{toc}{\contentsline {section}{\numberline {A.2}Usage}{74}}
-\newlabel{sec:osmo_usage}{{A.2}{74}}
-\@writefile{toc}{\contentsline {section}{\numberline {A.3}Serial Cable Schematics}{74}}
-\newlabel{sec:osmo_serial_schematics}{{A.3}{74}}
+\@writefile{toc}{\contentsline {section}{\numberline {A.1}Installation}{75}}
+\newlabel{sec:osmo_install}{{A.1}{75}}
+\@writefile{toc}{\contentsline {section}{\numberline {A.2}Usage}{76}}
+\newlabel{sec:osmo_usage}{{A.2}{76}}
+\@writefile{toc}{\contentsline {section}{\numberline {A.3}Serial Cable Schematics}{77}}
+\newlabel{sec:osmo_serial_schematics}{{A.3}{77}}
\FN@pp@footnotehinttrue
-\@writefile{lof}{\contentsline {figure}{\numberline {A.1}{\ignorespaces Schematics for the T191 unlock cable.}}{75}}
-\newlabel{fig:schematics}{{A.1}{75}}
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {B}IMSI Catcher Detection System}{77}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {B}IMSI Catcher Detection System}{79}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {B.1}Extextions}{77}}
-\newlabel{sec:extensions}{{B.1}{77}}
-\@writefile{toc}{\contentsline {section}{\numberline {B.2}Example Configuration}{77}}
-\newlabel{sec:example_config}{{B.2}{77}}
+\@writefile{toc}{\contentsline {section}{\numberline {B.1}Extextions}{79}}
+\newlabel{sec:extensions}{{B.1}{79}}
+\@writefile{toc}{\contentsline {section}{\numberline {B.2}Example Configuration}{80}}
+\newlabel{sec:example_config}{{B.2}{80}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {C}System Information}{79}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {C}System Information}{83}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\newlabel{sec:system_infos}{{C}{79}}
+\newlabel{sec:system_infos}{{C}{83}}
\FN@pp@footnotehinttrue
-\@writefile{lof}{\contentsline {figure}{\numberline {C.1}{\ignorespaces System Information 1 Message}}{80}}
-\@writefile{lof}{\contentsline {figure}{\numberline {C.2}{\ignorespaces System Information 2 Message}}{81}}
-\@writefile{lof}{\contentsline {figure}{\numberline {C.3}{\ignorespaces System Information 3 Message}}{82}}
-\@writefile{lof}{\contentsline {figure}{\numberline {C.4}{\ignorespaces System Information 4 Message}}{83}}
+\@writefile{lof}{\contentsline {figure}{\numberline {C.1}{\ignorespaces System Information 1 Message}}{84}}
+\@writefile{lof}{\contentsline {figure}{\numberline {C.2}{\ignorespaces System Information 2 Message}}{85}}
+\@writefile{lof}{\contentsline {figure}{\numberline {C.3}{\ignorespaces System Information 3 Message}}{86}}
+\@writefile{lof}{\contentsline {figure}{\numberline {C.4}{\ignorespaces System Information 4 Message}}{87}}
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {D}Evaluation Data}{85}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {D}Evaluation Data}{89}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {D.1}IMSI Catcher Configurations}{85}}
-\@writefile{toc}{\contentsline {section}{\numberline {D.2}ICDS Scans}{85}}
+\@writefile{toc}{\contentsline {section}{\numberline {D.1}IMSI Catcher Configurations}{89}}
+\newlabel{sec:config_data}{{D.1}{89}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{Acronyms}{87}}
+\@writefile{toc}{\contentsline {chapter}{Acronyms}{91}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\gdef \LT@i {\LT@entry
diff --git a/Tex/Master/Master.ist b/Tex/Master/Master.ist
index dce662f..05a153d 100644
--- a/Tex/Master/Master.ist
+++ b/Tex/Master/Master.ist
@@ -1,5 +1,5 @@
% makeindex style file created by the glossaries package
-% for document 'Master' on 2012-5-7
+% for document 'Master' on 2012-5-11
actual '?'
encap '|'
level '!'
diff --git a/Tex/Master/Master.log b/Tex/Master/Master.log
index 7d16487..f53d861 100644
--- a/Tex/Master/Master.log
+++ b/Tex/Master/Master.log
@@ -1,4 +1,4 @@
-This is pdfTeX, Version 3.1415926-1.40.10 (TeX Live 2009/Debian) (format=pdflatex 2012.1.7) 7 MAY 2012 18:51
+This is pdfTeX, Version 3.1415926-1.40.10 (TeX Live 2009/Debian) (format=pdflatex 2012.1.7) 11 MAY 2012 17:07
entering extended mode
%&-line parsing enabled.
**Master.tex
@@ -1060,7 +1060,7 @@ Class scrbook Info: You've told me to use the font selection of the element
(scrbook) on input line 83.
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 86.
+(scrbook) on input line 85.
)
\tf@toc=\write8
\openout8 = `Master.toc'.
@@ -1199,80 +1199,80 @@ File: ../Images/c123_pcb.jpg Graphic file (type jpg)
File: ../Images/OsmoStructure.png Graphic file (type png)
<use ../Images/OsmoStructure.png> [42 <../Images/c123_pcb.jpg>] [43 <../Images/
-OsmoStructure.png (PNG copy)>] [44] [45] [46]
-<../Images/neighbourhoods_fak.png, id=201, 907.39pt x 941.5175pt>
+OsmoStructure.png (PNG copy)>]
+<../Images/sysinfo1.png, id=191, 260.172pt x 393.1488pt>
+File: ../Images/sysinfo1.png Graphic file (type png)
+
+<use ../Images/sysinfo1.png>
+
+LaTeX Warning: Float too large for page by 0.9002pt on input line 174.
+
+[44] [45 <../Images/sysinfo1.png (PNG copy)>] [46] [47]
+<../Images/neighbourhoods_fak.png, id=205, 907.39pt x 941.5175pt>
File: ../Images/neighbourhoods_fak.png Graphic file (type png)
<use ../Images/neighbourhoods_fak.png>
-Underfull \hbox (badness 1629) in paragraph at lines 285--285
+Underfull \hbox (badness 1629) in paragraph at lines 292--292
[]\T1/ptm/m/n/10.95 Base sta-tions and their neigh-bour-hood con-nec-tions at t
he Tech-nis-che
[]
-[47]
+[48]
LaTeX Font Info: Font shape `T1/phv/bx/n' in size <14.4> not available
-(Font) Font shape `T1/phv/b/n' tried instead on input line 318.
- [48] [49 <../Images/neighbourhoods_fak.png>] [50] [51]
-<../Images/Architecture_software.png, id=220, 341.8371pt x 183.78261pt>
+(Font) Font shape `T1/phv/b/n' tried instead on input line 325.
+ [49] [50 <../Images/neighbourhoods_fak.png>] [51] [52]
+<../Images/Architecture_software.png, id=224, 341.8371pt x 183.78261pt>
File: ../Images/Architecture_software.png Graphic file (type png)
-<use ../Images/Architecture_software.png> [52 <../Images/Architecture_software.
+<use ../Images/Architecture_software.png> [53 <../Images/Architecture_software.
png (PNG copy)>]
LaTeX Font Info: Font shape `T1/pcr/m/it' in size <10.95> not available
-(Font) Font shape `T1/pcr/m/sl' tried instead on input line 472.
- [53] <../Images/ICDS.png, id=229, 1287.81125pt x 881.2925pt>
+(Font) Font shape `T1/pcr/m/sl' tried instead on input line 479.
+ [54] <../Images/ICDS.png, id=233, 1287.81125pt x 881.2925pt>
File: ../Images/ICDS.png Graphic file (type png)
-<use ../Images/ICDS.png> [54] [55 <../Images/ICDS.png>] [56]
-<../Images/filter_window.png, id=240, 311.1625pt x 218.8175pt>
+<use ../Images/ICDS.png> [55] [56 <../Images/ICDS.png>] [57]
+<../Images/filter_window.png, id=245, 311.1625pt x 218.8175pt>
File: ../Images/filter_window.png Graphic file (type png)
<use ../Images/filter_window.png>
-<../Images/rules_window.png, id=241, 278.03876pt x 358.33875pt>
+<../Images/rules_window.png, id=246, 278.03876pt x 358.33875pt>
File: ../Images/rules_window.png Graphic file (type png)
<use ../Images/rules_window.png>
-<../Images/databases.png, id=242, 358.33875pt x 373.395pt>
+<../Images/databases.png, id=247, 358.33875pt x 373.395pt>
File: ../Images/databases.png Graphic file (type png)
<use ../Images/databases.png>
File: ../Images/databases.png Graphic file (type png)
<use ../Images/databases.png>
-Underfull \hbox (badness 1297) in paragraph at lines 580--580
+Underfull \hbox (badness 1297) in paragraph at lines 587--587
[]\T1/ptm/m/n/9 (d) En-cryp-tion win-dow (not yet im-ple-
[]
-Overfull \hbox (10.40205pt too wide) in paragraph at lines 595--610
+Overfull \hbox (10.40205pt too wide) in paragraph at lines 602--617
[] \T1/ptm/b/n/10.95 Cel-lID In-for-ma-tion:[][] \T1/ptm/m/n/10.95 Cel-lID in-f
or-ma-tion can be ob-tained through sev-eral dif-fer-ent means.
[]
-[57] [58 <../Images/filter_window.png> <../Images/rules_window.png> <../Images/
-databases.png>]) (../Content/Evaluation.tex [59] [60
-
-
-]
+[58] [59 <../Images/filter_window.png> <../Images/rules_window.png> <../Images/
+databases.png>]) (../Content/Evaluation.tex [60]
Chapter 4.
Overfull \hbox (3.33815pt too wide) in paragraph at lines 16--30
[][]
[]
-[61] [62]
-Underfull \vbox (badness 10000) has occurred while \output is active []
+[61
- [63]
-Underfull \hbox (badness 10000) in paragraph at lines 184--227
-[][] []
- []
-[64]) (../Content/Conclusion.tex [65] [66]
+] [62] [63] [64] [65] [66]) (../Content/Conclusion.tex [67] [68]
Chapter 5.
-) [67
+) [69
-] [68
+] [70
@@ -1318,7 +1318,7 @@ Underfull \hbox (badness 10000) in paragraph at lines 48--52
[]a30 . zip$\T1/ptm/m/n/10.95 ,
[]
-[69
+[71
]
@@ -1357,73 +1357,77 @@ Underfull \hbox (badness 10000) in paragraph at lines 138--143
. html$\T1/ptm/m/n/10.95 ,
[]
-[70]
+[72]
Underfull \hbox (badness 10000) in paragraph at lines 158--161
[]\T1/ptm/m/sc/10.95 Wikipedia\T1/ptm/m/n/10.95 . Cell id. $\T1/pcr/m/n/10.95
http : / / bb . osmocom . org / trac / wiki /
[]
-) [71] (../Content/Appendix.tex [72
+) [73] (../Content/Appendix.tex [74
]
Appendix A.
-[73]
-Overfull \hbox (25.37581pt too wide) in paragraph at lines 31--33
+[75]
+Overfull \hbox (25.37581pt too wide) in paragraph at lines 32--34
\T1/ptm/m/n/10.95 moved to \T1/pcr/m/n/10.95 osmocom-bb/src/host/layer23/src/mi
sc \T1/ptm/m/n/10.95 and the \T1/pcr/m/n/10.95 Makefile.am
[]
-Overfull \hbox (5.82301pt too wide) in paragraph at lines 46--47
+Overfull \hbox (5.82301pt too wide) in paragraph at lines 47--48
[][][][][][][][][][][][][][][][][][]
[]
-<../Images/t191cable.jpg, id=300, 702.625pt x 609.27625pt>
+[76] <../Images/t191cable.jpg, id=311, 702.625pt x 609.27625pt>
File: ../Images/t191cable.jpg Graphic file (type jpg)
-<use ../Images/t191cable.jpg> [74] [75 <../Images/t191cable.jpg>] [76
+<use ../Images/t191cable.jpg> [77 <../Images/t191cable.jpg>] [78
]
Appendix B.
-[77] [78
-
+LaTeX Font Info: Font shape `T1/pcr/bx/n' in size <10.95> not available
+(Font) Font shape `T1/pcr/b/n' tried instead on input line 74.
+[79] [80]
+Underfull \vbox (badness 10000) has occurred while \output is active []
-]
+ [81]
+[82]
Appendix C.
-<../Images/sysinfo1.png, id=317, 260.172pt x 393.1488pt>
File: ../Images/sysinfo1.png Graphic file (type png)
-
<use ../Images/sysinfo1.png>
-LaTeX Warning: Float too large for page by 0.9002pt on input line 79.
+LaTeX Warning: Float too large for page by 0.9002pt on input line 206.
-<../Images/sysinfo2.png, id=318, 261.32832pt x 440.55792pt>
+<../Images/sysinfo2.png, id=332, 261.32832pt x 440.55792pt>
File: ../Images/sysinfo2.png Graphic file (type png)
<use ../Images/sysinfo2.png>
-LaTeX Warning: Float too large for page by 61.98238pt on input line 84.
+LaTeX Warning: Float too large for page by 61.98238pt on input line 211.
-<../Images/sysinfo3.png, id=319, 284.45473pt x 373.49136pt>
+<../Images/sysinfo3.png, id=333, 284.45473pt x 373.49136pt>
File: ../Images/sysinfo3.png Graphic file (type png)
<use ../Images/sysinfo3.png>
-<../Images/sysinfo4.png, id=320, 252.07776pt x 370.0224pt>
+<../Images/sysinfo4.png, id=334, 252.07776pt x 370.0224pt>
File: ../Images/sysinfo4.png Graphic file (type png)
-<use ../Images/sysinfo4.png> [79] [80 <../Images/sysinfo1.png (PNG copy)>]
-[81 <../Images/sysinfo2.png (PNG copy)>] [82 <../Images/sysinfo3.png (PNG copy)
->] [83 <../Images/sysinfo4.png (PNG copy)>] [84
+<use ../Images/sysinfo4.png> [83
+
+
+] [84] [85 <../Images/sysinfo2.png (PNG copy)>] [86 <../Images/sysinfo3.png (PN
+G copy)>] [87 <../Images/sysinfo4.png (PNG copy)>] [88
]
Appendix D.
-) (./Master.acr [85] [86
+Underfull \vbox (badness 10000) has occurred while \output is active []
-]
+ [89])
+(./Master.acr [90]
Underfull \hbox (badness 2626) in paragraph at lines 24--24
[]|\T1/ptm/m/n/10.95 Conférence Eu-ropéenne des Ad-min-is-tra-tions des
[]
@@ -1433,18 +1437,20 @@ Underfull \hbox (badness 10000) in paragraph at lines 34--35
[]|\T1/ptm/m/n/10.95 Electrically Erasable Pro-grammable Read-Only
[]
-[87
+[91
+
+
-] [88]) [89] (./Master.aux) )
+] [92]) [93] (./Master.aux) )
Here is how much of TeX's memory you used:
- 24909 strings out of 493848
- 466035 string characters out of 1152824
- 679896 words of memory out of 3000000
- 27541 multiletter control sequences out of 15000+50000
- 80434 words of font info for 106 fonts, out of 3000000 for 9000
+ 24948 strings out of 493848
+ 466619 string characters out of 1152824
+ 689951 words of memory out of 3000000
+ 27578 multiletter control sequences out of 15000+50000
+ 81055 words of font info for 108 fonts, out of 3000000 for 9000
714 hyphenation exceptions out of 8191
- 69i,13n,72p,1076b,1344s stack positions out of 5000i,500n,10000p,200000b,50000s
+ 69i,13n,72p,1076b,1689s stack positions out of 5000i,500n,10000p,200000b,50000s
{/usr/share/texmf-texlive/fonts/enc/dvips/base/8r.
enc}</usr/share/texmf-texlive/fonts/type1/public/amsfonts/cm/cmmi10.pfb></usr/s
hare/texmf-texlive/fonts/type1/public/amsfonts/cm/cmmi12.pfb></usr/share/texmf-
@@ -1454,15 +1460,15 @@ ic/amsfonts/cm/cmr8.pfb></usr/share/texmf-texlive/fonts/type1/public/amsfonts/c
m/cmsy10.pfb></usr/share/texmf-texlive/fonts/type1/public/amsfonts/cm/cmsy8.pfb
></usr/share/texmf-texlive/fonts/type1/public/eurosym/feymr10.pfb></usr/share/t
exmf-texlive/fonts/type1/public/amsfonts/latxfont/lcircle1.pfb></usr/share/texm
-f-texlive/fonts/type1/urw/courier/ucrr8a.pfb></usr/share/texmf-texlive/fonts/ty
-pe1/urw/courier/ucrro8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/helvetic/
-uhvb8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/times/utmb8a.pfb></usr/sha
-re/texmf-texlive/fonts/type1/urw/times/utmr8a.pfb></usr/share/texmf-texlive/fon
-ts/type1/urw/times/utmr8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/times/u
-tmri8a.pfb>
-Output written on Master.pdf (93 pages, 13533667 bytes).
+f-texlive/fonts/type1/urw/courier/ucrb8a.pfb></usr/share/texmf-texlive/fonts/ty
+pe1/urw/courier/ucrr8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/courier/uc
+rro8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/helvetic/uhvb8a.pfb></usr/s
+hare/texmf-texlive/fonts/type1/urw/times/utmb8a.pfb></usr/share/texmf-texlive/f
+onts/type1/urw/times/utmr8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/times
+/utmr8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/times/utmri8a.pfb>
+Output written on Master.pdf (97 pages, 13560498 bytes).
PDF statistics:
- 410 PDF objects out of 1000 (max. 8388607)
+ 427 PDF objects out of 1000 (max. 8388607)
0 named destinations out of 1000 (max. 500000)
168 words of extra memory for PDF output out of 10000 (max. 10000000)
diff --git a/Tex/Master/Master.pdf b/Tex/Master/Master.pdf
index 739ec17..94d74d7 100644
--- a/Tex/Master/Master.pdf
+++ b/Tex/Master/Master.pdf
Binary files differ
diff --git a/Tex/Master/Master.synctex.gz b/Tex/Master/Master.synctex.gz
index ded4f8b..600d9dc 100644
--- a/Tex/Master/Master.synctex.gz
+++ b/Tex/Master/Master.synctex.gz
Binary files differ
diff --git a/Tex/Master/Master.toc b/Tex/Master/Master.toc
index c7feddc..a71c596 100644
--- a/Tex/Master/Master.toc
+++ b/Tex/Master/Master.toc
@@ -45,42 +45,41 @@
\contentsline {subsubsection}{OsmocomBB and ICDS}{42}
\contentsline {section}{\numberline {3.2}Procedure}{43}
\contentsline {subsection}{\numberline {3.2.1}Information Gathering}{43}
-\contentsline {subsection}{\numberline {3.2.2}Information Evaluation}{45}
-\contentsline {subsubsection}{Neighbourhood Structure}{47}
-\contentsline {subsubsection}{Base Station Evaluation}{48}
-\contentsline {subsection}{\numberline {3.2.3}Forged Parameters}{50}
-\contentsline {subsubsection}{Database Rules}{51}
-\contentsline {section}{\numberline {3.3}IMSI Catcher Detection System}{52}
-\contentsline {subsection}{\numberline {3.3.1}Implemetation}{52}
-\contentsline {subsection}{\numberline {3.3.2}Configuration}{53}
-\contentsline {subsection}{\numberline {3.3.3}Operation}{54}
-\contentsline {paragraph}{Sweep scans:}{57}
-\contentsline {paragraph}{CellID Information:}{57}
-\contentsline {paragraph}{Location Area Database:}{59}
-\contentsline {paragraph}{Scan Encryption:}{59}
-\contentsline {paragraph}{User Mode:}{59}
+\contentsline {subsection}{\numberline {3.2.2}Information Evaluation}{46}
+\contentsline {subsubsection}{Neighbourhood Structure}{48}
+\contentsline {subsubsection}{Base Station Evaluation}{49}
+\contentsline {subsection}{\numberline {3.2.3}Forged Parameters}{51}
+\contentsline {subsubsection}{Database Rules}{52}
+\contentsline {section}{\numberline {3.3}IMSI Catcher Detection System}{53}
+\contentsline {subsection}{\numberline {3.3.1}Implemetation}{53}
+\contentsline {subsection}{\numberline {3.3.2}Configuration}{54}
+\contentsline {subsection}{\numberline {3.3.3}Operation}{55}
+\contentsline {paragraph}{Sweep scans:}{58}
+\contentsline {paragraph}{CellID Information:}{58}
+\contentsline {paragraph}{Location Area Database:}{60}
+\contentsline {paragraph}{Scan Encryption:}{60}
+\contentsline {paragraph}{User Mode:}{60}
\contentsline {chapter}{\numberline {4}Evaluation}{61}
\contentsline {section}{\numberline {4.1}Performance Evaluation}{61}
\contentsline {subsection}{\numberline {4.1.1}Scan Duration}{62}
\contentsline {subsection}{\numberline {4.1.2}Cell ID Databases}{63}
-\contentsline {subsection}{\numberline {4.1.3}Encryption Detection Speed}{64}
-\contentsline {section}{\numberline {4.2}IMSI Catcher Detection}{64}
+\contentsline {subsection}{\numberline {4.1.3}Encryption Detection Speed}{63}
+\contentsline {section}{\numberline {4.2}IMSI Catcher Detection}{63}
\contentsline {subsection}{\numberline {4.2.1}Open Source IMSI Catcher}{64}
\contentsline {subsection}{\numberline {4.2.2}Rule Evaluation}{65}
-\contentsline {subsection}{\numberline {4.2.3}Attack Scenarios}{65}
-\contentsline {subsection}{\numberline {4.2.4}Long Term Test}{65}
-\contentsline {chapter}{\numberline {5}Conclusion}{67}
-\contentsline {section}{\numberline {5.1}Future Work}{67}
-\contentsline {chapter}{Bibliography}{69}
-\contentsline {chapter}{\numberline {A}OsmocomBB}{73}
-\contentsline {section}{\numberline {A.1}Installation}{73}
-\contentsline {section}{\numberline {A.2}Usage}{74}
-\contentsline {section}{\numberline {A.3}Serial Cable Schematics}{74}
-\contentsline {chapter}{\numberline {B}IMSI Catcher Detection System}{77}
-\contentsline {section}{\numberline {B.1}Extextions}{77}
-\contentsline {section}{\numberline {B.2}Example Configuration}{77}
-\contentsline {chapter}{\numberline {C}System Information}{79}
-\contentsline {chapter}{\numberline {D}Evaluation Data}{85}
-\contentsline {section}{\numberline {D.1}IMSI Catcher Configurations}{85}
-\contentsline {section}{\numberline {D.2}ICDS Scans}{85}
-\contentsline {chapter}{Acronyms}{87}
+\contentsline {subsection}{\numberline {4.2.3}Long Term Test}{66}
+\contentsline {subsection}{\numberline {4.2.4}Attack Scenarios}{67}
+\contentsline {chapter}{\numberline {5}Conclusion}{69}
+\contentsline {section}{\numberline {5.1}Future Work}{69}
+\contentsline {chapter}{Bibliography}{71}
+\contentsline {chapter}{\numberline {A}OsmocomBB}{75}
+\contentsline {section}{\numberline {A.1}Installation}{75}
+\contentsline {section}{\numberline {A.2}Usage}{76}
+\contentsline {section}{\numberline {A.3}Serial Cable Schematics}{77}
+\contentsline {chapter}{\numberline {B}IMSI Catcher Detection System}{79}
+\contentsline {section}{\numberline {B.1}Extextions}{79}
+\contentsline {section}{\numberline {B.2}Example Configuration}{80}
+\contentsline {chapter}{\numberline {C}System Information}{83}
+\contentsline {chapter}{\numberline {D}Evaluation Data}{89}
+\contentsline {section}{\numberline {D.1}IMSI Catcher Configurations}{89}
+\contentsline {chapter}{Acronyms}{91}