summaryrefslogtreecommitdiffstats
path: root/Tex
diff options
context:
space:
mode:
authorTom2012-05-07 18:54:56 +0200
committerTom2012-05-07 18:54:56 +0200
commitd174ee3514f0886d891619da4d0b54d5587b001f (patch)
treeb83adce6b4080591a41dff2ccfb7044f2f2410ca /Tex
parentchanged pictures (diff)
downloadimsi-catcher-detection-d174ee3514f0886d891619da4d0b54d5587b001f.tar.gz
imsi-catcher-detection-d174ee3514f0886d891619da4d0b54d5587b001f.tar.xz
imsi-catcher-detection-d174ee3514f0886d891619da4d0b54d5587b001f.zip
finished few experiments with documentation
Diffstat (limited to 'Tex')
-rw-r--r--Tex/Content/Detection.tex7
-rw-r--r--Tex/Content/Evaluation.tex234
-rw-r--r--Tex/Master/Glossary.tex4
-rw-r--r--Tex/Master/Master.acn136
-rw-r--r--Tex/Master/Master.aux118
-rw-r--r--Tex/Master/Master.ist2
-rw-r--r--Tex/Master/Master.log141
-rw-r--r--Tex/Master/Master.pdfbin13409296 -> 13533667 bytes
-rw-r--r--Tex/Master/Master.synctex.gzbin483326 -> 533747 bytes
-rw-r--r--Tex/Master/Master.tex4
-rw-r--r--Tex/Master/Master.toc46
11 files changed, 497 insertions, 195 deletions
diff --git a/Tex/Content/Detection.tex b/Tex/Content/Detection.tex
index 22272b2..6b5e175 100644
--- a/Tex/Content/Detection.tex
+++ b/Tex/Content/Detection.tex
@@ -282,7 +282,7 @@ Figure \ref{fig:neighbourhood_example} shows an example of the neighbourhood gra
\begin{figure}
\centering
\includegraphics[width=.9\textwidth]{../Images/neighbourhoods_fak}
-\caption{T-Mobile and Vodafone stations at the Technische Fakult\"at.}
+\caption{Base stations and their neighbourhood connections at the Technische Fakult\"at.}
\label{fig:neighbourhood_example}
\end{figure}
It can be seen that for each provider, the neighbourhood forms an isolated, nearly fully connected subgraph.
@@ -511,13 +511,12 @@ After a brief loading time the main window shown in Figure \ref{fig:icds} should
The different elements shown in the main window are:
\begin{enumerate}
-%TODO: correct the numbering after the final picture is there
\item Firmware Loader: This button is used to load the OsmoconBB firmware onto the Motorola C123.
For this to work, the mobile phone must be connected correctly to the computer and available on the configured \texttt{tty} interface.
After pressing the button on-screen instructions will lead the user through the process of flashing.
\item Scanner: This starts the \texttt{catcher} subprocess in the background and fills the data model with information on the discovered base stations.
-During this process the Base Station List (10) and the Base Station Graph (12) will also be populated in realtime.
+During this process the Base Station List (11) and the Base Station Graph (13) will also be populated in realtime.
Re-evaluation on all base stations is done for every new \gls{bts} that has been found.
\item Filter Window: This brings up the window shown in Figure \ref{fig:filters_window}, where different view filters for the Base Station List and the Base Station Graph can be set.
@@ -563,7 +562,7 @@ The report is separated into four main parts, the first being all the harvested
\item Log Window: Every important event inside the \gls{icds} is reported in the log together with a time stamp when it occurred.
-\item Base Station Graph: This graph displays the base station found in the Base Station List (10).
+\item Base Station Graph: This graph displays the base station found in the Base Station List (11).
A node represents a single \gls{bts} and is labelled with its respective \gls{arfcn}.
An edge from note $A$ to $B$ is drawn if node $B$ occurs in the Neighbouring Cells List of $A$.
Nodes with a white background have only been found inside Neighbouring Cell Lists but not yet by the \gls{icds} scanner itself whereas nodes with a red, yellow or green background have been found and evaluated with the colour representing either a critical, a warning or an ok status respectively.
diff --git a/Tex/Content/Evaluation.tex b/Tex/Content/Evaluation.tex
index 120676c..93b4f77 100644
--- a/Tex/Content/Evaluation.tex
+++ b/Tex/Content/Evaluation.tex
@@ -1 +1,233 @@
-\chapter{Evaluation} \ No newline at end of file
+\chapter{Evaluation}
+The following chapter presents the results of some experiments done with the \gls{icds}.
+Evaluation has been done in different areas to give a complete impression of how the \gls{icds} performs.
+In the first section some general findings will be described that affect overall performance.
+Afterwards the test environment and setup of the IMSI catcher is discussed.
+The last two sections evaluate the \gls{icds} against a configured catcher, first to test the individual rules and second against the attacks that were listed earlier.
+
+\section{Performance Evaluation}
+In order to evaluate general performance it has to be considered that the \gls{icds} can be deployed in different environments.
+To reflect different compositions and densities of base stations form different areas, four distinct data sets will be used for the experiments in this section.
+The data sets have been taken in areas surrounding the city of Freiburg.
+Table shows some of data sets' key values.
+
+\begin{table}
+\centering
+\begin{tabular}{llrr}
+\toprule
+Name &Description &Number of BTS &Scan Duration\\
+\midrule
+\texttt{cdb} &CBD around the area of &54 &6:13 \\
+ &Bertholdsbrunnen & & \\
+\texttt{airport} &Airport and university area &68 &6:25 \\
+ &around Georges Koehler Allee & & \\
+\texttt{ind\_park} &Industrial park Haid in &53 &4:52 \\
+ &Freiburg West, Hausener Weg & & \\
+\texttt{house\_area} &Housing area at the rim of &22 &3:59 \\
+ &Freiburg Zähringen, Thuner Weg & & \\
+\bottomrule
+\end{tabular}
+\caption{Key values of the data sets used for performance tests.}
+\label{tab:key_data}
+\end{table}
+
+Apart from nodes from the four public \gls{gsm} providers E-Plus, T-Mobile, Vodafone and O2, nodes from Deutsche Bahn also occur in these scans.
+These nodes form a private network used for internal communications by Deutsche Bahn.
+They are identified by their broadcast name 'DB Systel GSM-R' and their frequency which is outside the regular bands.
+Since the distribution of these nodes is very sparse, only one node can be found in each scan they yield a false positive for no neighbouring nodes can be discovered.
+These nodes are not relevant to subscribers because they are not able to connect to them.
+Therefore they will be ignored and factored out for the remainder of this evaluation.
+
+\subsection{Scan Duration}
+\begin{figure}
+\centering
+\begin{tikzpicture}
+\begin{axis}[
+ width=\textwidth,
+ height=0.3\textheight,
+ xlabel=Total BTS,
+ ylabel=Scan duration in s,
+ xticklabel style={/pgf/number format/1000 sep=}
+ ]
+ \addplot [mark=*,blue] plot coordinates {
+ (68, 385)
+ (54, 373)
+ (53, 292)
+ (22, 239)
+ };
+\end{axis}
+\end{tikzpicture}
+\caption{Scan durations for the sample data sets.}
+\label{fig:durations}
+\end{figure}
+Table \ref{tab:key_data} shows that the times for scans in the Freiburg area can differ by large amounts depending on how many base stations are scanned.
+Generally said it takes longer the more dense the base station distribution is in the scanned area.
+This is however not the only factor, as Figure \ref{fig:durations} visualises.
+If the scan duration would only depend on the number of base station scanned, a linear growth could be expected.
+
+There is a large increase in scan duration between the \texttt{ind\_park} and the \texttt{cbd} data sets although only one more base station was detected.
+This jump can be explained considering the context of the scan.
+The scans were done on a Saturday between 14:00 and 16:00.
+The Freiburg CBD was crowded at the time of the scan as was the university campus due to an event held there.
+Contrary to that the industrial park area was very calm, as was the housing area.
+Whenever the \gls{icds} discovers a \gls{bts} it needs to wait until all system information messages are gathered before it can continue scanning for further base stations.
+In a crowded area reception is far worse due to radio inference therefore it takes longer to accumulate the information needed resulting in increased scanning times.
+
+A crowded area with high density of \glspl{bts} could be seen as a worst case for scan duration.
+Re-evaluation of a base station based on its own parameters thus occurs only every 7 minutes in this worst case.
+This is an inherent problem to the approach of scanning and updating all base stations and not only monitoring a subset from a single provider.
+If an IMSI catcher replaces a base station directly after it was scanned, it could take up to 7 minutes until it is discovered.
+To lessen this threat, if the \gls{icds} is used in user mode, the base station with the strongest reception is scanned again, to eliminate the possibility of having been taken over and not being detected.
+
+\subsection{Cell ID Databases}
+The usefulness of the Cell ID Rule is subject to the completeness of the database that is used.
+That is even more so since a database with a low coverage will yield false positives, \eg legitimate base stations will be evaluated as being IMSI catchers because they are not found in the database.
+
+The coverage for the OpenCellID database and the Google Mobile Maps service evaluated against the data sets can be seen in Table \ref{tab:coverage}.
+\begin{table}
+\centering
+\begin{tabular}{lrrcrrcrrcrr}
+\toprule
+& \multicolumn{2}{c}{\texttt{cdb}} &\phantom{a}& \multicolumn{2}{c}{\texttt{airport}} &\phantom{a} & \multicolumn{2}{c}{\texttt{ind\_park}}&\phantom{a} & \multicolumn{2}{c}{\texttt{house\_area}}\\
+\cmidrule{2-3} \cmidrule{5-6} \cmidrule{8-9} \cmidrule{11-12}
+&Cov.&Time& &Cov.&Time& &Cov.&Time& &Cov.&Time\\
+\midrule
+Google& 1.00&5& &0.99&8& &1.00&5& &1.00&2\\
+OCID& 0.57&51& &0.58&68& &0.58&55& &0.41&19\\
+\bottomrule
+\end{tabular}
+\caption{Coverage for Google Mobile Maps and OpenCellID on the data sets with the time needed in s for fetching the information.}
+\label{tab:coverage}
+\end{table}
+Google Mobile Maps service scored a complete coverage on all the data sets while Open Cell ID could cover about half the nodes in the different sets.
+The reason the Google service had only a 99\% coverage on the \texttt{airport} data set is that base station that has not been found was the one operated by the chair of communication systems, therefore it can be factored out.
+The OpenCellID database is not a good source of information for this project as is shown by its coverage scores.
+However it must be said that these two services are intended for localisation and thus do not have the demand to yield a complete coverage of all the base stations in the area.
+Therefore it must be kept in mind when using this rule for analysis that false positives might still be brought forth.
+What can be said though is that a base station that has been found may only be subject to a type of attack that replaces an existing base station and can thus be investigated more specifically.
+
+\subsection{Encryption Detection Speed}
+
+\section{IMSI Catcher Detection}
+
+\subsection{Open Source IMSI Catcher}
+The remainder of the rules cannot be tested without an active IMSI catcher.
+For this purpose the Open Source IMSI Catcher \cite{dennis} is used.
+
+This project builds up an IMSI catcher using only Open Source systems and freely available hardware so it can basically be used by anybody.
+On the hardware side a computer running a Linux operating system is used, as well as the \gls{usrp} as the radio transmitter.
+The \gls{usrp} allows the signal processing for radio transmissions to be done in software, therefore it can be used for a multitude of purposes and protocols.
+Some hardware modifications have to be done to the device to empower it to send and receive data on the frequency bands used for \gls{gsm} communication.
+An external clock needs to be used since \gls{gsm} operations are very time critical.
+
+On the software side GNU Radio\footnote{GNU Radio Project Wiki, \url{http://gnuradio.org/redmine/projects/gnuradio/wiki} [Online; Accessed 05.2012]}, OpenBTS\footnote{OpenBTS Project Wiki, \url{http://wush.net/trac/rangepublic} [Online; Accessed 05.2012]} and Asterisk\footnote{Asterisk, \url{http://www.asterisk.org} [Online; Accessed 05.2012]} are used to achieve the functionality provided by a IMSI catcher.
+Figure \ref{fig:osic} shows how these components are chained and used together.
+\begin{figure}
+\caption{Open Source IMSI Catcher.}
+\label{fig:osic}
+\end{figure}
+The raw data that is received by the \gls{usrp} is sent to the GNU Radio component which works as a software side interface to the \gls{usrp}.
+This data is taken by the OpenBTS software that emulates base station behaviour and has an integrated module simulating a \gls{vlr} and handing out \glspl{tmsi}.
+OpenBTS implements an open source version of the \gls{gsm} stack with the goal to provide cheap access points to the \gls{gsm} network in areas with bad coverage.
+The user accounts are as well as encoding of voice data and recording of calls is handled inside the Asterisk software, basically combining the \gls{trau}, \gls{hlr} and authentication centre of a real \gls{gsm} network.
+Calls are routed from here on to the \gls{voip} network of the university.
+
+Since we do not want to actually connect to the IMSI catcher, the Asterisk part and user configuration will be omitted here.
+The parameters necessary to simulate a \gls{gsm} cell have to be set inside the \texttt{OpenBTS.conf}.
+Figure \ref{fig:openbts_parameters} shows an annotated example for a configuration simulating a T-Mobile cell.
+\begin{figure}
+\begin{lstlisting}
+#Do not let people connect
+Control.OpenRegistration 0
+
+#Basic cell parameters
+GSM.MCC 262 GSM.ARFCN 54
+GSM.MNC 01 GSM.ShortName T-Mobile
+GSM.LAC 29184
+GSM.CI 61858
+
+#Transmission strength ranging from 0 to 23
+GSM.PowerAttenDB 20
+
+#Neighbouring cell list, space separated
+GSM.Neighbours 69 53 20
+
+#Force location Updates, multiple of 6 minutes
+GSM.T3212 1
+\end{lstlisting}
+\caption{Excerpt of a \texttt{OpenBTS.conf}.}
+\label{fig:openbts_parameters}
+\end{figure}
+\texttt{Control.OpenRegistration} is explicitly set to 0 which prevents anyone from connecting to the IMSI catcher since connections are not part of the test and we do not want to interfere with other peoples' communications in the area.
+
+
+\subsection{Rule Evaluation}
+
+\subsection{Attack Scenarios}
+Since all the rules have been tested we assume from this point on the IMSI catcher is configured correctly, meaning that parameters like the \gls{arfcn}, \gls{lac} or provider have been set up in correct and consistent way so the respective rules will not show an alarm.
+Consistent parameters for the four providers in Germany can be found in Tables \ref{tab:consistent_parameters} (a)-(d).
+\begin{table}
+\centering
+\subtable[T-Mobile]{
+\begin{tabular}{ll}
+\toprule
+Parameter &Range\\
+\midrule
+Name &T-Mobile\\
+ARFCN &13-49, 81-102,\\
+ &122-124, 587-611\\
+LAC &21014 / 21015\\
+MCC &262\\
+MNC &01\\
+\bottomrule
+\end{tabular}
+}
+\subtable[Vodafone]{
+\begin{tabular}{ll}
+\toprule
+Parameter &Range\\
+\midrule
+Name &Vodafone\\
+ARFCN &1-12, 50-80,\\
+ &103-121, 725-751\\
+LAC &793\\
+MCC &262\\
+MNC &02\\
+\bottomrule
+\end{tabular}
+}
+\subtable[E-Plus]{
+\begin{tabular}{ll}
+\toprule
+Parameter &Range\\
+\midrule
+Name &E-Plus\\
+ARFCN &975-999,\\
+ &777-863\\
+LAC &588 / 138\\
+MCC &262\\
+MNC &03\\
+\bottomrule
+\end{tabular}
+}
+\subtable[O2]{
+\begin{tabular}{ll}
+\toprule
+Parameter &Range\\
+\midrule
+Name &O2\\
+ARFCN &0, 1000-1023,\\
+ &637-723\\
+LAC &50945\\
+MCC &262\\
+MNC &07\\
+\bottomrule
+\end{tabular}
+}
+\caption{Consistent parameter configurations in the Freiburg area for the four German providers.}
+\label{tab:consistent_parameters}
+\end{table}
+Note that the Cell ID can be a arbitrary value as long as it is unique in the area of reception.
+Cell IDs measured from different base stations do not follow any particular schema.
+
+\subsection{Long Term Test} \ No newline at end of file
diff --git a/Tex/Master/Glossary.tex b/Tex/Master/Glossary.tex
index d12028e..b69843c 100644
--- a/Tex/Master/Glossary.tex
+++ b/Tex/Master/Glossary.tex
@@ -99,4 +99,6 @@
\newacronym{bcc}{BCC}{Base Station Color Code}
\newacronym{bsic}{BSIC}{Base Station Identification Code}
\newacronym{mvc}{MVC}{Model View Controller}
-\newacronym{csv}{CSV}{Comma Separated Value} \ No newline at end of file
+\newacronym{csv}{CSV}{Comma Separated Value}
+\newacronym{usrp}{USRP}{Universal Software Radio Peripheral}
+\newacronym{voip}{VoIP}{Voice over IP} \ No newline at end of file
diff --git a/Tex/Master/Master.acn b/Tex/Master/Master.acn
index 44ac911..53f5349 100644
--- a/Tex/Master/Master.acn
+++ b/Tex/Master/Master.acn
@@ -11,8 +11,8 @@
\glossaryentry{ETSI?\glossaryentryfield{etsi}{\glsnamefont{ETSI}}{European Communication Standards Institute}{\relax }|setentrycounter{page}\glsnumberformat}{3}
\glossaryentry{ETSI?\glossaryentryfield{etsi}{\glsnamefont{ETSI}}{European Communication Standards Institute}{\relax }|setentrycounter{page}\glsnumberformat}{3}
\glossaryentry{DCS1800?\glossaryentryfield{dcs1800}{\glsnamefont{DCS1800}}{Digital Cellular System 1800}{\relax }|setentrycounter{page}\glsnumberformat}{3}
-\glossaryentry{ETSI?\glossaryentryfield{etsi}{\glsnamefont{ETSI}}{European Communication Standards Institute}{\relax }|setentrycounter{page}\glsnumberformat}{3}
-\glossaryentry{STC?\glossaryentryfield{stc}{\glsnamefont{STC}}{Sub Technical Committee}{\relax }|setentrycounter{page}\glsnumberformat}{3}
+\glossaryentry{ETSI?\glossaryentryfield{etsi}{\glsnamefont{ETSI}}{European Communication Standards Institute}{\relax }|setentrycounter{page}\glsnumberformat}{4}
+\glossaryentry{STC?\glossaryentryfield{stc}{\glsnamefont{STC}}{Sub Technical Committee}{\relax }|setentrycounter{page}\glsnumberformat}{4}
\glossaryentry{ETSI?\glossaryentryfield{etsi}{\glsnamefont{ETSI}}{European Communication Standards Institute}{\relax }|setentrycounter{page}\glsnumberformat}{4}
\glossaryentry{3GPP?\glossaryentryfield{3gpp}{\glsnamefont{3GPP}}{Third Generation Partnership Project}{\relax }|setentrycounter{page}\glsnumberformat}{4}
\glossaryentry{ARIB?\glossaryentryfield{arib}{\glsnamefont{ARIB}}{Association of Radio Industries and Businesses}{\relax }|setentrycounter{page}\glsnumberformat}{4}
@@ -20,7 +20,7 @@
\glossaryentry{ATIS?\glossaryentryfield{atis}{\glsnamefont{ATIS}}{Alliance for Telecommunications Industry Solutions}{\relax }|setentrycounter{page}\glsnumberformat}{4}
\glossaryentry{TTA?\glossaryentryfield{tta}{\glsnamefont{TTA}}{Telecommunications Technology Association}{\relax }|setentrycounter{page}\glsnumberformat}{4}
\glossaryentry{TTC?\glossaryentryfield{ttc}{\glsnamefont{TTC}}{Telecommunications Technology Committee}{\relax }|setentrycounter{page}\glsnumberformat}{4}
-\glossaryentry{ITU?\glossaryentryfield{itu}{\glsnamefont{ITU}}{International Telecomunication Union}{\relax }|setentrycounter{page}\glsnumberformat}{4}
+\glossaryentry{ITU?\glossaryentryfield{itu}{\glsnamefont{ITU}}{International Telecomunication Union}{\relax }|setentrycounter{page}\glsnumberformat}{5}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{5}
\glossaryentry{GPRS?\glossaryentryfield{gprs}{\glsnamefont{GPRS}}{General Packet Radio Service}{\relax }|setentrycounter{page}\glsnumberformat}{5}
\glossaryentry{EDGE?\glossaryentryfield{edge}{\glsnamefont{EDGE}}{Enhanced Data Rates for GSM Evolution}{\relax }|setentrycounter{page}\glsnumberformat}{5}
@@ -38,7 +38,7 @@
\glossaryentry{BSS?\glossaryentryfield{bss}{\glsnamefont{BSS}}{Basestation Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{5}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{5}
\glossaryentry{NSS?\glossaryentryfield{nss}{\glsnamefont{NSS}}{Network Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{5}
-\glossaryentry{PSTN?\glossaryentryfield{pstn}{\glsnamefont{PSTN}}{Public Standard Telephone Network}{\relax }|setentrycounter{page}\glsnumberformat}{5}
+\glossaryentry{PSTN?\glossaryentryfield{pstn}{\glsnamefont{PSTN}}{Public Standard Telephone Network}{\relax }|setentrycounter{page}\glsnumberformat}{6}
\glossaryentry{IN?\glossaryentryfield{in}{\glsnamefont{IN}}{Intelligent Network Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{6}
\glossaryentry{VAS?\glossaryentryfield{vas}{\glsnamefont{VAS}}{value-added service}{\relax }|setentrycounter{page}\glsnumberformat}{6}
\glossaryentry{IN?\glossaryentryfield{in}{\glsnamefont{IN}}{Intelligent Network Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{6}
@@ -48,10 +48,10 @@
\glossaryentry{BSS?\glossaryentryfield{bss}{\glsnamefont{BSS}}{Basestation Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{6}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{6}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{6}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{6}
-\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter{page}\glsnumberformat}{6}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{6}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{6}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{7}
+\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter{page}\glsnumberformat}{7}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{7}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{7}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{7}
\glossaryentry{DTMF?\glossaryentryfield{dtmf}{\glsnamefont{DTMF}}{Dual Tone Multi Frequency}{\relax }|setentrycounter{page}\glsnumberformat}{7}
\glossaryentry{SMS?\glossaryentryfield{sms}{\glsnamefont{SMS}}{Short Message Service}{\relax }|setentrycounter{page}\glsnumberformat}{7}
@@ -64,10 +64,10 @@
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{7}
\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{7}
\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter{page}\glsnumberformat}{7}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{7}
-\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter{page}\glsnumberformat}{7}
-\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter{page}\glsnumberformat}{7}
-\glossaryentry{Ki?\glossaryentryfield{ki}{\glsnamefont{Ki}}{Secret Key}{\relax }|setentrycounter{page}\glsnumberformat}{7}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{8}
+\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter{page}\glsnumberformat}{8}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter{page}\glsnumberformat}{8}
+\glossaryentry{Ki?\glossaryentryfield{ki}{\glsnamefont{Ki}}{Secret Key}{\relax }|setentrycounter{page}\glsnumberformat}{8}
\glossaryentry{EEPROM?\glossaryentryfield{eeprom}{\glsnamefont{EEPROM}}{Electrically Erasable Programmable Read-Only Memory}{\relax }|setentrycounter{page}\glsnumberformat}{8}
\glossaryentry{Kc?\glossaryentryfield{kc}{\glsnamefont{Kc}}{Cyphering Key}{\relax }|setentrycounter{page}\glsnumberformat}{8}
\glossaryentry{Ki?\glossaryentryfield{ki}{\glsnamefont{Ki}}{Secret Key}{\relax }|setentrycounter{page}\glsnumberformat}{8}
@@ -81,9 +81,9 @@
\glossaryentry{MCC?\glossaryentryfield{mcc}{\glsnamefont{MCC}}{Mobile Country Code}{\relax }|setentrycounter{page}\glsnumberformat}{8}
\glossaryentry{MNC?\glossaryentryfield{mnc}{\glsnamefont{MNC}}{Mobile Network Code}{\relax }|setentrycounter{page}\glsnumberformat}{8}
\glossaryentry{MSIN?\glossaryentryfield{msin}{\glsnamefont{MSIN}}{Mobile Subscriber Identification Number}{\relax }|setentrycounter{page}\glsnumberformat}{8}
-\glossaryentry{HNI?\glossaryentryfield{hni}{\glsnamefont{HNI}}{Home Network Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{8}
-\glossaryentry{MCC?\glossaryentryfield{mcc}{\glsnamefont{MCC}}{Mobile Country Code}{\relax }|setentrycounter{page}\glsnumberformat}{8}
-\glossaryentry{MNC?\glossaryentryfield{mnc}{\glsnamefont{MNC}}{Mobile Network Code}{\relax }|setentrycounter{page}\glsnumberformat}{8}
+\glossaryentry{HNI?\glossaryentryfield{hni}{\glsnamefont{HNI}}{Home Network Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{9}
+\glossaryentry{MCC?\glossaryentryfield{mcc}{\glsnamefont{MCC}}{Mobile Country Code}{\relax }|setentrycounter{page}\glsnumberformat}{9}
+\glossaryentry{MNC?\glossaryentryfield{mnc}{\glsnamefont{MNC}}{Mobile Network Code}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{PLMN?\glossaryentryfield{plmn}{\glsnamefont{PLMN}}{Public Land Mobile Network}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{MCC?\glossaryentryfield{mcc}{\glsnamefont{MCC}}{Mobile Country Code}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{MNC?\glossaryentryfield{mnc}{\glsnamefont{MNC}}{Mobile Network Code}{\relax }|setentrycounter{page}\glsnumberformat}{9}
@@ -102,11 +102,11 @@
\glossaryentry{EIR?\glossaryentryfield{eir}{\glsnamefont{EIR}}{Equipment Identity Register}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{AC?\glossaryentryfield{ac}{\glsnamefont{AC}}{Authentication Center}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{SMSC?\glossaryentryfield{smsc}{\glsnamefont{SMSC}}{Short Message Service Center}{\relax }|setentrycounter{page}\glsnumberformat}{9}
-\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{9}
-\glossaryentry{NSS?\glossaryentryfield{nss}{\glsnamefont{NSS}}{Network Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{9}
-\glossaryentry{ISDN?\glossaryentryfield{isdn}{\glsnamefont{ISDN}}{Integrated Services Digital Network}{\relax }|setentrycounter{page}\glsnumberformat}{9}
-\glossaryentry{PLMN?\glossaryentryfield{plmn}{\glsnamefont{PLMN}}{Public Land Mobile Network}{\relax }|setentrycounter{page}\glsnumberformat}{9}
-\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{9}
+\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{10}
+\glossaryentry{NSS?\glossaryentryfield{nss}{\glsnamefont{NSS}}{Network Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{10}
+\glossaryentry{ISDN?\glossaryentryfield{isdn}{\glsnamefont{ISDN}}{Integrated Services Digital Network}{\relax }|setentrycounter{page}\glsnumberformat}{10}
+\glossaryentry{PLMN?\glossaryentryfield{plmn}{\glsnamefont{PLMN}}{Public Land Mobile Network}{\relax }|setentrycounter{page}\glsnumberformat}{10}
+\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{10}
\glossaryentry{LA?\glossaryentryfield{la}{\glsnamefont{LA}}{Location Area}{\relax }|setentrycounter{page}\glsnumberformat}{10}
\glossaryentry{CC?\glossaryentryfield{cc}{\glsnamefont{CC}}{Call Control}{\relax }|setentrycounter{page}\glsnumberformat}{10}
\glossaryentry{MM?\glossaryentryfield{mm}{\glsnamefont{MM}}{Mobility Management}{\relax }|setentrycounter{page}\glsnumberformat}{10}
@@ -123,9 +123,9 @@
\glossaryentry{MSISDN?\glossaryentryfield{msisdn}{\glsnamefont{MSISDN}}{Mobile Subscriber Integrated Services Digital Network Number}{\relax }|setentrycounter{page}\glsnumberformat}{10}
\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter{page}\glsnumberformat}{10}
\glossaryentry{HLR?\glossaryentryfield{hlr}{\glsnamefont{HLR}}{Home Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{10}
-\glossaryentry{VLR?\glossaryentryfield{vlr}{\glsnamefont{VLR}}{Visitor Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{10}
-\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{10}
-\glossaryentry{MSRN?\glossaryentryfield{msrn}{\glsnamefont{MSRN}}{Mobile Station Roaming Number}{\relax }|setentrycounter{page}\glsnumberformat}{10}
+\glossaryentry{VLR?\glossaryentryfield{vlr}{\glsnamefont{VLR}}{Visitor Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{12}
+\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{12}
+\glossaryentry{MSRN?\glossaryentryfield{msrn}{\glsnamefont{MSRN}}{Mobile Station Roaming Number}{\relax }|setentrycounter{page}\glsnumberformat}{12}
\glossaryentry{VLR?\glossaryentryfield{vlr}{\glsnamefont{VLR}}{Visitor Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{12}
\glossaryentry{HLR?\glossaryentryfield{hlr}{\glsnamefont{HLR}}{Home Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{12}
\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{12}
@@ -153,7 +153,7 @@
\glossaryentry{HLR?\glossaryentryfield{hlr}{\glsnamefont{HLR}}{Home Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{12}
\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter{page}\glsnumberformat}{12}
\glossaryentry{Ki?\glossaryentryfield{ki}{\glsnamefont{Ki}}{Secret Key}{\relax }|setentrycounter{page}\glsnumberformat}{12}
-\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{12}
+\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{14}
\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter{page}\glsnumberformat}{14}
\glossaryentry{AC?\glossaryentryfield{ac}{\glsnamefont{AC}}{Authentication Center}{\relax }|setentrycounter{page}\glsnumberformat}{14}
\glossaryentry{Ki?\glossaryentryfield{ki}{\glsnamefont{Ki}}{Secret Key}{\relax }|setentrycounter{page}\glsnumberformat}{14}
@@ -179,7 +179,7 @@
\glossaryentry{LBS?\glossaryentryfield{lbs}{\glsnamefont{LBS}}{Location Based Services}{\relax }|setentrycounter{page}\glsnumberformat}{14}
\glossaryentry{LBS?\glossaryentryfield{lbs}{\glsnamefont{LBS}}{Location Based Services}{\relax }|setentrycounter{page}\glsnumberformat}{14}
\glossaryentry{IN?\glossaryentryfield{in}{\glsnamefont{IN}}{Intelligent Network Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{14}
-\glossaryentry{SCP?\glossaryentryfield{scp}{\glsnamefont{SCP}}{Service Control Point}{\relax }|setentrycounter{page}\glsnumberformat}{14}
+\glossaryentry{SCP?\glossaryentryfield{scp}{\glsnamefont{SCP}}{Service Control Point}{\relax }|setentrycounter{page}\glsnumberformat}{15}
\glossaryentry{SCP?\glossaryentryfield{scp}{\glsnamefont{SCP}}{Service Control Point}{\relax }|setentrycounter{page}\glsnumberformat}{15}
\glossaryentry{3GPP?\glossaryentryfield{3gpp}{\glsnamefont{3GPP}}{Third Generation Partnership Project}{\relax }|setentrycounter{page}\glsnumberformat}{15}
\glossaryentry{ETSI?\glossaryentryfield{etsi}{\glsnamefont{ETSI}}{European Communication Standards Institute}{\relax }|setentrycounter{page}\glsnumberformat}{15}
@@ -250,8 +250,8 @@
\glossaryentry{SDCCH?\glossaryentryfield{sdcch}{\glsnamefont{SDCCH}}{Standalone Dedicated Control Channel}{\relax }|setentrycounter{page}\glsnumberformat}{20}
\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{20}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{20}
-\glossaryentry{TCH?\glossaryentryfield{tch}{\glsnamefont{TCH}}{Traffic Channel}{\relax }|setentrycounter{page}\glsnumberformat}{20}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{TCH?\glossaryentryfield{tch}{\glsnamefont{TCH}}{Traffic Channel}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{21}
\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter{page}\glsnumberformat}{21}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{21}
\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{21}
@@ -453,12 +453,12 @@
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{39}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{39}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{39}
-\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{39}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{40}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{40}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{40}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter{page}\glsnumberformat}{40}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{40}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{40}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{41}
\glossaryentry{DIY?\glossaryentryfield{diy}{\glsnamefont{DIY}}{do-it-yourself}{\relax }|setentrycounter{page}\glsnumberformat}{41}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{41}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{42}
@@ -477,12 +477,12 @@
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{43}
\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{43}
\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{43}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{43}
-\glossaryentry{FCCH?\glossaryentryfield{fcch}{\glsnamefont{FCCH}}{Frequency Correction Channel}{\relax }|setentrycounter{page}\glsnumberformat}{43}
-\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter{page}\glsnumberformat}{43}
-\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{43}
-\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter{page}\glsnumberformat}{43}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{43}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{44}
+\glossaryentry{FCCH?\glossaryentryfield{fcch}{\glsnamefont{FCCH}}{Frequency Correction Channel}{\relax }|setentrycounter{page}\glsnumberformat}{44}
+\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter{page}\glsnumberformat}{44}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{44}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter{page}\glsnumberformat}{44}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{44}
\glossaryentry{TC?\glossaryentryfield{tc}{\glsnamefont{TC}}{Type Code}{\relax }|setentrycounter{page}\glsnumberformat}{44}
\glossaryentry{FN?\glossaryentryfield{fn}{\glsnamefont{FN}}{Frame Number}{\relax }|setentrycounter{page}\glsnumberformat}{44}
\glossaryentry{TC?\glossaryentryfield{tc}{\glsnamefont{TC}}{Type Code}{\relax }|setentrycounter{page}\glsnumberformat}{44}
@@ -521,16 +521,16 @@
\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{46}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{46}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{46}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{46}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{47}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{47}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{47}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{49}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{49}
-\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{49}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{49}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{49}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{49}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{50}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{48}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{48}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{48}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{48}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{48}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{48}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{48}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{50}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{50}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{50}
@@ -540,24 +540,24 @@
\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{50}
\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{50}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{50}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{50}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{51}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{51}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{52}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{52}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{52}
-\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{53}
-\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{53}
-\glossaryentry{MVC?\glossaryentryfield{mvc}{\glsnamefont{MVC}}{Model View Controller}{\relax }|setentrycounter{page}\glsnumberformat}{53}
-\glossaryentry{MVC?\glossaryentryfield{mvc}{\glsnamefont{MVC}}{Model View Controller}{\relax }|setentrycounter{page}\glsnumberformat}{53}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{54}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{52}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{52}
+\glossaryentry{MVC?\glossaryentryfield{mvc}{\glsnamefont{MVC}}{Model View Controller}{\relax }|setentrycounter{page}\glsnumberformat}{52}
+\glossaryentry{MVC?\glossaryentryfield{mvc}{\glsnamefont{MVC}}{Model View Controller}{\relax }|setentrycounter{page}\glsnumberformat}{52}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{53}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{54}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{54}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{55}
-\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{55}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{55}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{54}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{56}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{56}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{56}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{56}
\glossaryentry{CSV?\glossaryentryfield{csv}{\glsnamefont{CSV}}{Comma Separated Value}{\relax }|setentrycounter{page}\glsnumberformat}{56}
@@ -566,10 +566,36 @@
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{56}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{56}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{56}
-\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{56}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter{page}\glsnumberformat}{57}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{59}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{61}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{61}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{61}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{61}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{61}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{62}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{62}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{62}
+\glossaryentry{ICDS?\glossaryentryfield{icds}{\glsnamefont{ICDS}}{IMSI Catcher Detection System}{\relax }|setentrycounter{page}\glsnumberformat}{63}
+\glossaryentry{USRP?\glossaryentryfield{usrp}{\glsnamefont{USRP}}{Universal Software Radio Peripheral}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{USRP?\glossaryentryfield{usrp}{\glsnamefont{USRP}}{Universal Software Radio Peripheral}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{USRP?\glossaryentryfield{usrp}{\glsnamefont{USRP}}{Universal Software Radio Peripheral}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{USRP?\glossaryentryfield{usrp}{\glsnamefont{USRP}}{Universal Software Radio Peripheral}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{VLR?\glossaryentryfield{vlr}{\glsnamefont{VLR}}{Visitor Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{TMSI?\glossaryentryfield{tmsi}{\glsnamefont{TMSI}}{Temporary IMSI}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{TRAU?\glossaryentryfield{trau}{\glsnamefont{TRAU}}{Transcoding Rate and Adaption Unit}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{HLR?\glossaryentryfield{hlr}{\glsnamefont{HLR}}{Home Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{VoIP?\glossaryentryfield{voip}{\glsnamefont{VoIP}}{Voice over IP}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{64}
+\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter{page}\glsnumberformat}{65}
+\glossaryentry{LAC?\glossaryentryfield{lac}{\glsnamefont{LAC}}{Location Area Code}{\relax }|setentrycounter{page}\glsnumberformat}{65}
diff --git a/Tex/Master/Master.aux b/Tex/Master/Master.aux
index c254f8f..7e500b9 100644
--- a/Tex/Master/Master.aux
+++ b/Tex/Master/Master.aux
@@ -51,36 +51,36 @@
\citation{hsdpa}
\citation{hsupa}
\citation{kommsys2006}
-\citation{ITU1200}
\FN@pp@footnote@aux{1}{5}
\@writefile{toc}{\contentsline {section}{\numberline {2.2}The GSM Network}{5}}
\newlabel{sec:network}{{2.2}{5}}
+\citation{ITU1200}
\citation{GSM2009}
\citation{overview1994}
\citation{overview1996}
-\citation{GSM0207}
-\citation{protocols1999}
\@writefile{lof}{\contentsline {figure}{\numberline {2.2}{\ignorespaces The main components of a GSM network.}}{6}}
\newlabel{fig:gsm_network}{{2.2}{6}}
\FN@pp@footnote@aux{2}{6}
\@writefile{toc}{\contentsline {subsection}{\numberline {2.2.1}Mobile Station}{6}}
\newlabel{sec:ms}{{2.2.1}{6}}
+\citation{GSM0207}
+\citation{protocols1999}
\citation{GSM0505}
\citation{ISO7810}
-\citation{protocols1999}
-\citation{protocols1999}
\FN@pp@footnote@aux{3}{7}
\FN@pp@footnote@aux{4}{7}
+\citation{protocols1999}
+\citation{protocols1999}
\citation{kommsys2006}
\citation{GSM23003}
-\citation{ITU212}
\@writefile{lot}{\contentsline {table}{\numberline {2.1}{\ignorespaces Subset of data stored on a SIM card. Adopted from \cite {protocols1999}}}{8}}
\newlabel{tab:simdata}{{2.1}{8}}
+\citation{ITU212}
\@writefile{lot}{\contentsline {table}{\numberline {2.2}{\ignorespaces Mobile Country and Network Codes. (R) denotes that the MCC is reserved but not operational as of yet, whereas (T) denotes a operational test network.}}{9}}
\newlabel{tab:countrycodes}{{2.2}{9}}
\@writefile{toc}{\contentsline {subsection}{\numberline {2.2.2}Network Subsystem}{9}}
\newlabel{sec:nss}{{2.2.2}{9}}
-\@writefile{toc}{\contentsline {subsubsection}{Mobile Switching Center}{9}}
+\@writefile{toc}{\contentsline {subsubsection}{Mobile Switching Center}{10}}
\@writefile{toc}{\contentsline {subsubsection}{Home Location Register}{10}}
\@writefile{lot}{\contentsline {table}{\numberline {2.3}{\ignorespaces Interfaces inside the core network (upper part) and the radio network (lower part)}}{11}}
\newlabel{tab:interfaces}{{2.3}{11}}
@@ -227,10 +227,10 @@
\citation{osmo_wiki_c123}
\@writefile{toc}{\contentsline {subsubsection}{Project Status}{40}}
\FN@pp@footnote@aux{8}{40}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.1.2}Motorola C123}{40}}
-\newlabel{sec:osmo_phones}{{3.1.2}{40}}
\@writefile{lot}{\contentsline {table}{\numberline {3.1}{\ignorespaces Technical specifications for the Motorola C123.}}{41}}
\newlabel{tab:c123_specs}{{3.1}{41}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.1.2}Motorola C123}{41}}
+\newlabel{sec:osmo_phones}{{3.1.2}{41}}
\FN@pp@footnote@aux{9}{41}
\@writefile{lof}{\contentsline {figure}{\numberline {3.1}{\ignorespaces Circuit board of the Motorola C123 with its components \cite {osmo_wiki_c123}.}}{42}}
\newlabel{fig:osmo_c123}{{3.1}{42}}
@@ -254,14 +254,14 @@
\newlabel{tab:context_rules}{{3.4}{47}}
\FN@pp@footnote@aux{11}{47}
\@writefile{toc}{\contentsline {subsubsection}{Neighbourhood Structure}{47}}
-\FN@pp@footnote@aux{12}{47}
-\@writefile{lof}{\contentsline {figure}{\numberline {3.3}{\ignorespaces T-Mobile and Vodafone stations at the Technische Fakult\"at.}}{48}}
-\newlabel{fig:neighbourhood_example}{{3.3}{48}}
+\FN@pp@footnote@aux{12}{48}
+\@writefile{toc}{\contentsline {subsubsection}{Base Station Evaluation}{48}}
+\@writefile{lof}{\contentsline {figure}{\numberline {3.3}{\ignorespaces Base stations and their neighbourhood connections at the Technische Fakult\"at.}}{49}}
+\newlabel{fig:neighbourhood_example}{{3.3}{49}}
\@writefile{lof}{\contentsline {figure}{\numberline {3.4}{\ignorespaces Comparison between a normal neighbourhood subgraph and a tainted one.}}{49}}
\@writefile{lof}{\contentsline {subfigure}{\numberline{(a)}{\ignorespaces {Normal neighbourhood}}}{49}}
\@writefile{lof}{\contentsline {subfigure}{\numberline{(b)}{\ignorespaces {Tainted neighbourhood}}}{49}}
\newlabel{fig:structure_comparison}{{3.4}{49}}
-\@writefile{toc}{\contentsline {subsubsection}{Base Station Evaluation}{49}}
\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.3}Forged Parameters}{50}}
\newlabel{sec:fake_parameters}{{3.2.3}{50}}
\citation{wiki_cells}
@@ -274,10 +274,10 @@
\@writefile{toc}{\contentsline {section}{\numberline {3.3}IMSI Catcher Detection System}{52}}
\newlabel{sec:icds}{{3.3}{52}}
\@writefile{toc}{\contentsline {subsection}{\numberline {3.3.1}Implemetation}{52}}
+\@writefile{lof}{\contentsline {figure}{\numberline {3.6}{\ignorespaces Configuration Dictionary in the settings file.}}{53}}
+\newlabel{fig:python_dict}{{3.6}{53}}
\@writefile{toc}{\contentsline {subsection}{\numberline {3.3.2}Configuration}{53}}
\newlabel{sec:configuration}{{3.3.2}{53}}
-\@writefile{lof}{\contentsline {figure}{\numberline {3.6}{\ignorespaces Configuration Dictionary in the settings file.}}{54}}
-\newlabel{fig:python_dict}{{3.6}{54}}
\@writefile{toc}{\contentsline {subsection}{\numberline {3.3.3}Operation}{54}}
\newlabel{sec:icds_operation}{{3.3.3}{54}}
\@writefile{lof}{\contentsline {figure}{\numberline {3.7}{\ignorespaces The ICDS main window.}}{55}}
@@ -306,14 +306,42 @@
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\FN@pp@footnotehinttrue
-\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {5}Conclusion}{63}}
+\@writefile{toc}{\contentsline {section}{\numberline {4.1}Performance Evaluation}{61}}
+\@writefile{lot}{\contentsline {table}{\numberline {4.1}{\ignorespaces Key values of the data sets used for performance tests.}}{61}}
+\newlabel{tab:key_data}{{4.1}{61}}
+\@writefile{lof}{\contentsline {figure}{\numberline {4.1}{\ignorespaces Scan durations for the sample data sets.}}{62}}
+\newlabel{fig:durations}{{4.1}{62}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.1}Scan Duration}{62}}
+\citation{dennis}
+\@writefile{lot}{\contentsline {table}{\numberline {4.2}{\ignorespaces Coverage for Google Mobile Maps and OpenCellID on the data sets with the time needed in s for fetching the information.}}{63}}
+\newlabel{tab:coverage}{{4.2}{63}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.2}Cell ID Databases}{63}}
+\@writefile{lof}{\contentsline {figure}{\numberline {4.2}{\ignorespaces Open Source IMSI Catcher.}}{64}}
+\newlabel{fig:osic}{{4.2}{64}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.3}Encryption Detection Speed}{64}}
+\@writefile{toc}{\contentsline {section}{\numberline {4.2}IMSI Catcher Detection}{64}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.1}Open Source IMSI Catcher}{64}}
+\FN@pp@footnote@aux{16}{64}
+\FN@pp@footnote@aux{17}{64}
+\FN@pp@footnote@aux{18}{64}
+\@writefile{lof}{\contentsline {figure}{\numberline {4.3}{\ignorespaces Excerpt of a \texttt {OpenBTS.conf}.}}{65}}
+\newlabel{fig:openbts_parameters}{{4.3}{65}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.2}Rule Evaluation}{65}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.3}Attack Scenarios}{65}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.2.4}Long Term Test}{65}}
+\FN@pp@footnotehinttrue
+\@writefile{lot}{\contentsline {subtable}{\numberline{(a)}{\ignorespaces {T-Mobile}}}{66}}
+\@writefile{lot}{\contentsline {subtable}{\numberline{(b)}{\ignorespaces {Vodafone}}}{66}}
+\@writefile{lot}{\contentsline {subtable}{\numberline{(c)}{\ignorespaces {E-Plus}}}{66}}
+\@writefile{lot}{\contentsline {subtable}{\numberline{(d)}{\ignorespaces {O2}}}{66}}
+\@writefile{lot}{\contentsline {table}{\numberline {4.3}{\ignorespaces Consistent parameter configurations in the Freiburg area for the four German providers.}}{66}}
+\newlabel{tab:consistent_parameters}{{4.3}{66}}
+\FN@pp@footnotehinttrue
+\@writefile{toc}{\contentsline {chapter}{\numberline {5}Conclusion}{67}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {5.1}Related Projects}{63}}
-\@writefile{toc}{\contentsline {section}{\numberline {5.2}Future Work}{63}}
+\@writefile{toc}{\contentsline {section}{\numberline {5.1}Future Work}{67}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
@@ -334,7 +362,7 @@
\bibcite{fox}{12}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{Bibliography}{I}}
+\@writefile{toc}{\contentsline {chapter}{Bibliography}{69}}
\bibcite{GSM_stats2011}{13}
\bibcite{GSM_history2011}{14}
\bibcite{osmo_slides}{15}
@@ -356,50 +384,50 @@
\bibcite{imsi_wiki}{31}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {A}OsmocomBB}{V}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {A}OsmocomBB}{73}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {A.1}Installation}{V}}
-\newlabel{sec:osmo_install}{{A.1}{V}}
-\@writefile{toc}{\contentsline {section}{\numberline {A.2}Usage}{VI}}
-\newlabel{sec:osmo_usage}{{A.2}{VI}}
-\@writefile{toc}{\contentsline {section}{\numberline {A.3}Serial Cable Schematics}{VI}}
-\newlabel{sec:osmo_serial_schematics}{{A.3}{VI}}
+\@writefile{toc}{\contentsline {section}{\numberline {A.1}Installation}{73}}
+\newlabel{sec:osmo_install}{{A.1}{73}}
+\@writefile{toc}{\contentsline {section}{\numberline {A.2}Usage}{74}}
+\newlabel{sec:osmo_usage}{{A.2}{74}}
+\@writefile{toc}{\contentsline {section}{\numberline {A.3}Serial Cable Schematics}{74}}
+\newlabel{sec:osmo_serial_schematics}{{A.3}{74}}
\FN@pp@footnotehinttrue
-\@writefile{lof}{\contentsline {figure}{\numberline {A.1}{\ignorespaces Schematics for the T191 unlock cable.}}{VII}}
-\newlabel{fig:schematics}{{A.1}{VII}}
+\@writefile{lof}{\contentsline {figure}{\numberline {A.1}{\ignorespaces Schematics for the T191 unlock cable.}}{75}}
+\newlabel{fig:schematics}{{A.1}{75}}
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {B}IMSI Catcher Detection System}{IX}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {B}IMSI Catcher Detection System}{77}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {B.1}Extextions}{IX}}
-\newlabel{sec:extensions}{{B.1}{IX}}
-\@writefile{toc}{\contentsline {section}{\numberline {B.2}Example Configuration}{IX}}
-\newlabel{sec:example_config}{{B.2}{IX}}
+\@writefile{toc}{\contentsline {section}{\numberline {B.1}Extextions}{77}}
+\newlabel{sec:extensions}{{B.1}{77}}
+\@writefile{toc}{\contentsline {section}{\numberline {B.2}Example Configuration}{77}}
+\newlabel{sec:example_config}{{B.2}{77}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {C}System Information}{XI}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {C}System Information}{79}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\newlabel{sec:system_infos}{{C}{XI}}
+\newlabel{sec:system_infos}{{C}{79}}
\FN@pp@footnotehinttrue
-\@writefile{lof}{\contentsline {figure}{\numberline {C.1}{\ignorespaces System Information 1 Message}}{XII}}
-\@writefile{lof}{\contentsline {figure}{\numberline {C.2}{\ignorespaces System Information 2 Message}}{XIII}}
-\@writefile{lof}{\contentsline {figure}{\numberline {C.3}{\ignorespaces System Information 3 Message}}{XIV}}
-\@writefile{lof}{\contentsline {figure}{\numberline {C.4}{\ignorespaces System Information 4 Message}}{XV}}
+\@writefile{lof}{\contentsline {figure}{\numberline {C.1}{\ignorespaces System Information 1 Message}}{80}}
+\@writefile{lof}{\contentsline {figure}{\numberline {C.2}{\ignorespaces System Information 2 Message}}{81}}
+\@writefile{lof}{\contentsline {figure}{\numberline {C.3}{\ignorespaces System Information 3 Message}}{82}}
+\@writefile{lof}{\contentsline {figure}{\numberline {C.4}{\ignorespaces System Information 4 Message}}{83}}
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {D}Evaluation Data}{XVII}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {D}Evaluation Data}{85}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {D.1}IMSI Catcher Configurations}{XVII}}
-\@writefile{toc}{\contentsline {section}{\numberline {D.2}ICDS Scans}{XVII}}
+\@writefile{toc}{\contentsline {section}{\numberline {D.1}IMSI Catcher Configurations}{85}}
+\@writefile{toc}{\contentsline {section}{\numberline {D.2}ICDS Scans}{85}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{Acronyms}{XIX}}
+\@writefile{toc}{\contentsline {chapter}{Acronyms}{87}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\gdef \LT@i {\LT@entry
diff --git a/Tex/Master/Master.ist b/Tex/Master/Master.ist
index 066114c..dce662f 100644
--- a/Tex/Master/Master.ist
+++ b/Tex/Master/Master.ist
@@ -1,5 +1,5 @@
% makeindex style file created by the glossaries package
-% for document 'Master' on 2012-5-2
+% for document 'Master' on 2012-5-7
actual '?'
encap '|'
level '!'
diff --git a/Tex/Master/Master.log b/Tex/Master/Master.log
index 5a4e23d..7d16487 100644
--- a/Tex/Master/Master.log
+++ b/Tex/Master/Master.log
@@ -1,4 +1,4 @@
-This is pdfTeX, Version 3.1415926-1.40.10 (TeX Live 2009/Debian) (format=pdflatex 2012.1.7) 2 MAY 2012 16:22
+This is pdfTeX, Version 3.1415926-1.40.10 (TeX Live 2009/Debian) (format=pdflatex 2012.1.7) 7 MAY 2012 18:51
entering extended mode
%&-line parsing enabled.
**Master.tex
@@ -1033,9 +1033,6 @@ Class scrbook Info: You've told me to use the font selection of the element
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
(scrbook) on input line 62.
-Class scrbook Info: You've told me to use the font selection of the element
-(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 63.
[1
@@ -1045,37 +1042,31 @@ Class scrbook Info: You've told me to use the font selection of the element
]
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 66.
+(scrbook) on input line 72.
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 67.
+(scrbook) on input line 74.
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 71.
+(scrbook) on input line 75.
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 74.
+(scrbook) on input line 79.
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 75.
-
-Overfull \hbox (6.13179pt too wide) detected at line 76
- []\T1/ptm/m/n/10.95 XVII
- []
-
-
-Overfull \hbox (6.13179pt too wide) detected at line 77
- []\T1/ptm/m/n/10.95 XVII
- []
-
+(scrbook) on input line 82.
+Class scrbook Info: You've told me to use the font selection of the element
+(scrbook) `sectioning' that is an alias of element `disposition'
+(scrbook) on input line 83.
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 78.
+(scrbook) on input line 86.
)
\tf@toc=\write8
\openout8 = `Master.toc'.
- [2] (../Content/Motivation.tex
+
+[2] (../Content/Motivation.tex
Chapter 1.
Class scrbook Warning: \float@addtolists detected!
@@ -1116,11 +1107,11 @@ File: ../Images/Architecture.png Graphic file (type png)
<use ../Images/Architecture.png> [5]
LaTeX Font Info: Font shape `T1/ptm/bx/n' in size <12> not available
(Font) Font shape `T1/ptm/b/n' tried instead on input line 117.
- [6 <../Images/Architecture.png (PNG copy)>] [7] [8] [9]
-Underfull \vbox (badness 6808) has occurred while \output is active []
+ [6 <../Images/Architecture.png (PNG copy)>] [7]
+Underfull \vbox (badness 10000) has occurred while \output is active []
- [10]
-[11] <../Images/Authentication.png, id=66, 359.1819pt x 323.0469pt>
+ [8]
+[9] [10] [11] <../Images/Authentication.png, id=66, 359.1819pt x 323.0469pt>
File: ../Images/Authentication.png Graphic file (type png)
<use ../Images/Authentication.png> [12] [13 <../Images/Authentication.png (PNG
@@ -1128,13 +1119,14 @@ copy)>] [14] <../Images/Mapping.png, id=76, 337.28409pt x 115.19838pt>
File: ../Images/Mapping.png Graphic file (type png)
<use ../Images/Mapping.png> [15] [16 <../Images/Mapping.png (PNG copy)>]
-<../Images/Cells.png, id=84, 98.72083pt x 88.8921pt>
+[17] <../Images/Cells.png, id=87, 98.72083pt x 88.8921pt>
File: ../Images/Cells.png Graphic file (type png)
- <use ../Images/Cells.png>
-<../Images/real_Cells.PNG, id=85, 743.02594pt x 496.10344pt>
+
+<use ../Images/Cells.png>
+<../Images/real_Cells.PNG, id=88, 743.02594pt x 496.10344pt>
File: ../Images/real_Cells.PNG Graphic file (type png)
-<use ../Images/real_Cells.PNG> [17]
+<use ../Images/real_Cells.PNG>
<../Images/Standart_config.png, id=90, 199.4652pt x 133.26588pt>
File: ../Images/Standart_config.png Graphic file (type png)
@@ -1157,7 +1149,7 @@ File: ../Images/Cipher.png Graphic file (type png)
File: ../Images/TDMAFDMA.png Graphic file (type png)
<use ../Images/TDMAFDMA.png>
-Underfull \vbox (badness 4899) has occurred while \output is active []
+Underfull \vbox (badness 1406) has occurred while \output is active []
[23 <../Images/TDMAFDMA.png (PNG copy)>]
<../Images/Frames.png, id=117, 367.42068pt x 252.29457pt>
@@ -1207,18 +1199,20 @@ File: ../Images/c123_pcb.jpg Graphic file (type jpg)
File: ../Images/OsmoStructure.png Graphic file (type png)
<use ../Images/OsmoStructure.png> [42 <../Images/c123_pcb.jpg>] [43 <../Images/
-OsmoStructure.png (PNG copy)>] [44] [45]
-Underfull \vbox (badness 4441) has occurred while \output is active []
-
- [46]
+OsmoStructure.png (PNG copy)>] [44] [45] [46]
<../Images/neighbourhoods_fak.png, id=201, 907.39pt x 941.5175pt>
File: ../Images/neighbourhoods_fak.png Graphic file (type png)
-<use ../Images/neighbourhoods_fak.png> [47] [48 <../Images/neighbourhoods_fak.p
-ng>]
+<use ../Images/neighbourhoods_fak.png>
+Underfull \hbox (badness 1629) in paragraph at lines 285--285
+[]\T1/ptm/m/n/10.95 Base sta-tions and their neigh-bour-hood con-nec-tions at t
+he Tech-nis-che
+ []
+
+[47]
LaTeX Font Info: Font shape `T1/phv/bx/n' in size <14.4> not available
(Font) Font shape `T1/phv/b/n' tried instead on input line 318.
- [49] [50] [51]
+ [48] [49 <../Images/neighbourhoods_fak.png>] [50] [51]
<../Images/Architecture_software.png, id=220, 341.8371pt x 183.78261pt>
File: ../Images/Architecture_software.png Graphic file (type png)
@@ -1226,7 +1220,7 @@ File: ../Images/Architecture_software.png Graphic file (type png)
png (PNG copy)>]
LaTeX Font Info: Font shape `T1/pcr/m/it' in size <10.95> not available
(Font) Font shape `T1/pcr/m/sl' tried instead on input line 472.
- [53] <../Images/ICDS.png, id=227, 1352.05125pt x 835.12pt>
+ [53] <../Images/ICDS.png, id=229, 1287.81125pt x 881.2925pt>
File: ../Images/ICDS.png Graphic file (type png)
<use ../Images/ICDS.png> [54] [55 <../Images/ICDS.png>] [56]
@@ -1244,12 +1238,12 @@ File: ../Images/databases.png Graphic file (type png)
<use ../Images/databases.png>
File: ../Images/databases.png Graphic file (type png)
<use ../Images/databases.png>
-Underfull \hbox (badness 1297) in paragraph at lines 581--581
+Underfull \hbox (badness 1297) in paragraph at lines 580--580
[]\T1/ptm/m/n/9 (d) En-cryp-tion win-dow (not yet im-ple-
[]
-Overfull \hbox (10.40205pt too wide) in paragraph at lines 596--611
+Overfull \hbox (10.40205pt too wide) in paragraph at lines 595--610
[] \T1/ptm/b/n/10.95 Cel-lID In-for-ma-tion:[][] \T1/ptm/m/n/10.95 Cel-lID in-f
or-ma-tion can be ob-tained through sev-eral dif-fer-ent means.
[]
@@ -1260,12 +1254,25 @@ databases.png>]) (../Content/Evaluation.tex [59] [60
]
Chapter 4.
-) (../Content/Conclusion.tex [61] [62
+Overfull \hbox (3.33815pt too wide) in paragraph at lines 16--30
+ [][]
+ []
+
+[61] [62]
+Underfull \vbox (badness 10000) has occurred while \output is active []
-]
+ [63]
+Underfull \hbox (badness 10000) in paragraph at lines 184--227
+[][] []
+ []
+
+[64]) (../Content/Conclusion.tex [65] [66]
Chapter 5.
-) [63] [64
+) [67
+
+
+] [68
@@ -1311,7 +1318,7 @@ Underfull \hbox (badness 10000) in paragraph at lines 48--52
[]a30 . zip$\T1/ptm/m/n/10.95 ,
[]
-[1
+[69
]
@@ -1350,18 +1357,18 @@ Underfull \hbox (badness 10000) in paragraph at lines 138--143
. html$\T1/ptm/m/n/10.95 ,
[]
-[2]
+[70]
Underfull \hbox (badness 10000) in paragraph at lines 158--161
[]\T1/ptm/m/sc/10.95 Wikipedia\T1/ptm/m/n/10.95 . Cell id. $\T1/pcr/m/n/10.95
http : / / bb . osmocom . org / trac / wiki /
[]
-) [3] (../Content/Appendix.tex [4
+) [71] (../Content/Appendix.tex [72
]
Appendix A.
-[5]
+[73]
Overfull \hbox (25.37581pt too wide) in paragraph at lines 31--33
\T1/ptm/m/n/10.95 moved to \T1/pcr/m/n/10.95 osmocom-bb/src/host/layer23/src/mi
sc \T1/ptm/m/n/10.95 and the \T1/pcr/m/n/10.95 Makefile.am
@@ -1372,48 +1379,48 @@ Overfull \hbox (5.82301pt too wide) in paragraph at lines 46--47
[][][][][][][][][][][][][][][][][][]
[]
-<../Images/t191cable.jpg, id=288, 702.625pt x 609.27625pt>
+<../Images/t191cable.jpg, id=300, 702.625pt x 609.27625pt>
File: ../Images/t191cable.jpg Graphic file (type jpg)
-<use ../Images/t191cable.jpg> [6] [7 <../Images/t191cable.jpg>] [8
+<use ../Images/t191cable.jpg> [74] [75 <../Images/t191cable.jpg>] [76
]
Appendix B.
-[9] [10
+[77] [78
]
Appendix C.
-<../Images/sysinfo1.png, id=304, 260.172pt x 393.1488pt>
+<../Images/sysinfo1.png, id=317, 260.172pt x 393.1488pt>
File: ../Images/sysinfo1.png Graphic file (type png)
<use ../Images/sysinfo1.png>
LaTeX Warning: Float too large for page by 0.9002pt on input line 79.
-<../Images/sysinfo2.png, id=305, 261.32832pt x 440.55792pt>
+<../Images/sysinfo2.png, id=318, 261.32832pt x 440.55792pt>
File: ../Images/sysinfo2.png Graphic file (type png)
<use ../Images/sysinfo2.png>
LaTeX Warning: Float too large for page by 61.98238pt on input line 84.
-<../Images/sysinfo3.png, id=306, 284.45473pt x 373.49136pt>
+<../Images/sysinfo3.png, id=319, 284.45473pt x 373.49136pt>
File: ../Images/sysinfo3.png Graphic file (type png)
<use ../Images/sysinfo3.png>
-<../Images/sysinfo4.png, id=307, 252.07776pt x 370.0224pt>
+<../Images/sysinfo4.png, id=320, 252.07776pt x 370.0224pt>
File: ../Images/sysinfo4.png Graphic file (type png)
-<use ../Images/sysinfo4.png> [11] [12 <../Images/sysinfo1.png (PNG copy)>]
-[13 <../Images/sysinfo2.png (PNG copy)>] [14 <../Images/sysinfo3.png (PNG copy)
->] [15 <../Images/sysinfo4.png (PNG copy)>] [16
+<use ../Images/sysinfo4.png> [79] [80 <../Images/sysinfo1.png (PNG copy)>]
+[81 <../Images/sysinfo2.png (PNG copy)>] [82 <../Images/sysinfo3.png (PNG copy)
+>] [83 <../Images/sysinfo4.png (PNG copy)>] [84
]
Appendix D.
-) (./Master.acr [17] [18
+) (./Master.acr [85] [86
]
@@ -1426,18 +1433,18 @@ Underfull \hbox (badness 10000) in paragraph at lines 34--35
[]|\T1/ptm/m/n/10.95 Electrically Erasable Pro-grammable Read-Only
[]
-[19
+[87
-] [20]) [21] (./Master.aux) )
+] [88]) [89] (./Master.aux) )
Here is how much of TeX's memory you used:
- 24837 strings out of 493848
- 464940 string characters out of 1152824
- 670196 words of memory out of 3000000
- 27469 multiletter control sequences out of 15000+50000
+ 24909 strings out of 493848
+ 466035 string characters out of 1152824
+ 679896 words of memory out of 3000000
+ 27541 multiletter control sequences out of 15000+50000
80434 words of font info for 106 fonts, out of 3000000 for 9000
714 hyphenation exceptions out of 8191
- 69i,13n,72p,1076b,1342s stack positions out of 5000i,500n,10000p,200000b,50000s
+ 69i,13n,72p,1076b,1344s stack positions out of 5000i,500n,10000p,200000b,50000s
{/usr/share/texmf-texlive/fonts/enc/dvips/base/8r.
enc}</usr/share/texmf-texlive/fonts/type1/public/amsfonts/cm/cmmi10.pfb></usr/s
hare/texmf-texlive/fonts/type1/public/amsfonts/cm/cmmi12.pfb></usr/share/texmf-
@@ -1453,9 +1460,9 @@ uhvb8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/times/utmb8a.pfb></usr/sha
re/texmf-texlive/fonts/type1/urw/times/utmr8a.pfb></usr/share/texmf-texlive/fon
ts/type1/urw/times/utmr8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/times/u
tmri8a.pfb>
-Output written on Master.pdf (89 pages, 13409296 bytes).
+Output written on Master.pdf (93 pages, 13533667 bytes).
PDF statistics:
- 397 PDF objects out of 1000 (max. 8388607)
+ 410 PDF objects out of 1000 (max. 8388607)
0 named destinations out of 1000 (max. 500000)
168 words of extra memory for PDF output out of 10000 (max. 10000000)
diff --git a/Tex/Master/Master.pdf b/Tex/Master/Master.pdf
index e966d25..739ec17 100644
--- a/Tex/Master/Master.pdf
+++ b/Tex/Master/Master.pdf
Binary files differ
diff --git a/Tex/Master/Master.synctex.gz b/Tex/Master/Master.synctex.gz
index 5fbc741..ded4f8b 100644
--- a/Tex/Master/Master.synctex.gz
+++ b/Tex/Master/Master.synctex.gz
Binary files differ
diff --git a/Tex/Master/Master.tex b/Tex/Master/Master.tex
index c687ebc..80d9a96 100644
--- a/Tex/Master/Master.tex
+++ b/Tex/Master/Master.tex
@@ -3,7 +3,7 @@
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\documentclass[a4paper,twoside, DIV=10,fontsize=11pt,bibliography=totoc, BCOR=15mm, headinclude=true,
- footinclude=false, cleardoubleplain,chapterprefix=false,appendixprefix=true]{scrbook}
+ footinclude=false, cleardoubleplain,chapterprefix=true,appendixprefix=true]{scrbook}
%chapterprefix=true/false
%appendixprefix=true/false
@@ -153,7 +153,7 @@
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\clearpage{\pagestyle{empty}\cleardoublepage}
-\pagenumbering{Roman}
+%\pagenumbering{Roman}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% Bibliography %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
diff --git a/Tex/Master/Master.toc b/Tex/Master/Master.toc
index a469036..c7feddc 100644
--- a/Tex/Master/Master.toc
+++ b/Tex/Master/Master.toc
@@ -7,7 +7,7 @@
\contentsline {section}{\numberline {2.2}The GSM Network}{5}
\contentsline {subsection}{\numberline {2.2.1}Mobile Station}{6}
\contentsline {subsection}{\numberline {2.2.2}Network Subsystem}{9}
-\contentsline {subsubsection}{Mobile Switching Center}{9}
+\contentsline {subsubsection}{Mobile Switching Center}{10}
\contentsline {subsubsection}{Home Location Register}{10}
\contentsline {subsubsection}{Visitor Location Register}{12}
\contentsline {subsubsection}{Equipment Identification Register}{12}
@@ -41,13 +41,13 @@
\contentsline {section}{\numberline {3.1}Framework and Hardware}{39}
\contentsline {subsection}{\numberline {3.1.1}OsmocomBB}{39}
\contentsline {subsubsection}{Project Status}{40}
-\contentsline {subsection}{\numberline {3.1.2}Motorola C123}{40}
+\contentsline {subsection}{\numberline {3.1.2}Motorola C123}{41}
\contentsline {subsubsection}{OsmocomBB and ICDS}{42}
\contentsline {section}{\numberline {3.2}Procedure}{43}
\contentsline {subsection}{\numberline {3.2.1}Information Gathering}{43}
\contentsline {subsection}{\numberline {3.2.2}Information Evaluation}{45}
\contentsline {subsubsection}{Neighbourhood Structure}{47}
-\contentsline {subsubsection}{Base Station Evaluation}{49}
+\contentsline {subsubsection}{Base Station Evaluation}{48}
\contentsline {subsection}{\numberline {3.2.3}Forged Parameters}{50}
\contentsline {subsubsection}{Database Rules}{51}
\contentsline {section}{\numberline {3.3}IMSI Catcher Detection System}{52}
@@ -60,19 +60,27 @@
\contentsline {paragraph}{Scan Encryption:}{59}
\contentsline {paragraph}{User Mode:}{59}
\contentsline {chapter}{\numberline {4}Evaluation}{61}
-\contentsline {chapter}{\numberline {5}Conclusion}{63}
-\contentsline {section}{\numberline {5.1}Related Projects}{63}
-\contentsline {section}{\numberline {5.2}Future Work}{63}
-\contentsline {chapter}{Bibliography}{I}
-\contentsline {chapter}{\numberline {A}OsmocomBB}{V}
-\contentsline {section}{\numberline {A.1}Installation}{V}
-\contentsline {section}{\numberline {A.2}Usage}{VI}
-\contentsline {section}{\numberline {A.3}Serial Cable Schematics}{VI}
-\contentsline {chapter}{\numberline {B}IMSI Catcher Detection System}{IX}
-\contentsline {section}{\numberline {B.1}Extextions}{IX}
-\contentsline {section}{\numberline {B.2}Example Configuration}{IX}
-\contentsline {chapter}{\numberline {C}System Information}{XI}
-\contentsline {chapter}{\numberline {D}Evaluation Data}{XVII}
-\contentsline {section}{\numberline {D.1}IMSI Catcher Configurations}{XVII}
-\contentsline {section}{\numberline {D.2}ICDS Scans}{XVII}
-\contentsline {chapter}{Acronyms}{XIX}
+\contentsline {section}{\numberline {4.1}Performance Evaluation}{61}
+\contentsline {subsection}{\numberline {4.1.1}Scan Duration}{62}
+\contentsline {subsection}{\numberline {4.1.2}Cell ID Databases}{63}
+\contentsline {subsection}{\numberline {4.1.3}Encryption Detection Speed}{64}
+\contentsline {section}{\numberline {4.2}IMSI Catcher Detection}{64}
+\contentsline {subsection}{\numberline {4.2.1}Open Source IMSI Catcher}{64}
+\contentsline {subsection}{\numberline {4.2.2}Rule Evaluation}{65}
+\contentsline {subsection}{\numberline {4.2.3}Attack Scenarios}{65}
+\contentsline {subsection}{\numberline {4.2.4}Long Term Test}{65}
+\contentsline {chapter}{\numberline {5}Conclusion}{67}
+\contentsline {section}{\numberline {5.1}Future Work}{67}
+\contentsline {chapter}{Bibliography}{69}
+\contentsline {chapter}{\numberline {A}OsmocomBB}{73}
+\contentsline {section}{\numberline {A.1}Installation}{73}
+\contentsline {section}{\numberline {A.2}Usage}{74}
+\contentsline {section}{\numberline {A.3}Serial Cable Schematics}{74}
+\contentsline {chapter}{\numberline {B}IMSI Catcher Detection System}{77}
+\contentsline {section}{\numberline {B.1}Extextions}{77}
+\contentsline {section}{\numberline {B.2}Example Configuration}{77}
+\contentsline {chapter}{\numberline {C}System Information}{79}
+\contentsline {chapter}{\numberline {D}Evaluation Data}{85}
+\contentsline {section}{\numberline {D.1}IMSI Catcher Configurations}{85}
+\contentsline {section}{\numberline {D.2}ICDS Scans}{85}
+\contentsline {chapter}{Acronyms}{87}