Detecting and warning of base stations with a security risk

1. A method, comprising:

selecting, at an electronic device, a base station to camp on;

determining, based on information broadcasted by the base station, that the base station does not support encryption;

in response to determining that the base station does not support encryption based on the information broadcasted by the base station, sending, from the electronic device to the base station, a first message, wherein the first message is addressed to a server, the first message is a short message service (SMS) message or a ping, and requests the server to send a second message to the electronic device;

determining whether the electronic device receives the second message from the base station within a threshold time period after the first message is sent; and

determining whether the base station has a security risk based at least in part on whether the second message is received within the threshold time period, wherein the determining whether the base station has the security risk comprises:

when the electronic device determines that the second message is not received within the threshold time period after the first message is sent, determining that the base station has the security risk; and

when the electronic device determines that the second message is received within the threshold time period after the first message is sent,

evaluating a signature included in the second message;

determining whether the base station has the security risk by determining whether the signature included in the second message is a valid signature provided by the server.

2. The method of claim 1 , wherein determining that the base station has the security risk comprises evaluating a content of the second message.

3. The method of claim 1 , further comprising in response to determining that the base station has the security risk, outputting an indication at the electronic device.

4. The method of claim 1 , further comprising in response to determining that the base station has the security risk, terminating a connection to the base station having the security risk.

5. The method of claim 1 , further comprising sending a notification message to a security server, wherein the notification message identifies the base station having the security risk.

6. The method of claim 5 , wherein the notification message includes at least one of a cell identification (ID) of the base station or a Media Access Control (MAC) address of the base station.

7. An electronic device, comprising:

a memory; and

at least one hardware processor communicatively coupled with the memory and configured to:

select, at the electronic device, a base station to camp on;

determine, based on information broadcasted by the base station, that the base station does not support encryption;

in response to determining that the base station does not support encryption based on the information broadcasted by the base station, send, from the electronic device to the base station, a first message, wherein the first message is addressed to a server, the first message is a short message service (SMS) message or a ping, and requests the server to send a second message to the electronic device;

determine whether the electronic device receives the second message from the base station within a threshold time period after the first message is sent; and

determine whether the base station has a security risk based at least in part on whether the second message is received within the threshold time period, wherein the determining whether the base station has the security risk comprises:

if the electronic device determines that the second message is not received within the threshold time period after the first message is sent, determining that the base station has the security risk; and

if the electronic device determines that the second message is received within the threshold time period after the first message is sent,

evaluating a signature included in the second message;

determining whether the base station has the security risk by determining whether the signature included in the second message is a valid signature provided by the server.

8. The electronic device of claim 7 , wherein determining that the base station has the security risk comprises evaluating a content of the second message.

9. The electronic device of claim 7 , wherein the at least one hardware processor is further configured to output an indication at the electronic device in response to determining that the base station has the security risk.

10. The electronic device of claim 7 , wherein the at least one hardware processor is further configured to terminate a connection to the base station having the security risk in response to determining that the base station has the security risk.

11. The electronic device of claim 7 , wherein the at least one hardware processor is further configured to send a notification message to a security server, wherein the notification message identifies the base station having the security risk.

12. The electronic device of claim 11 , wherein the notification message includes at least one of a cell identification (ID) of the base station or a Media Access Control (MAC) address of the base station.

13. A non-transitory computer-readable medium containing instructions which, when executed, cause a computing device to perform operations comprising:

selecting, at an electronic device, a base station to camp on;

determining, based on information broadcasted by the base station, that the base station does not support encryption;

in response to determining that the base station does not support encryption based on the information broadcasted by the base station, sending, from the electronic device to the base station, a first message, wherein the first message is addressed to a server, the first message is a short message service (SMS) message or a ping, and requests the server to send a second message to the electronic device;

determining whether the electronic device receives the second message from the base station within a threshold time period after the first message is sent; and

determining whether the base station has a security risk based at least in part on whether the second message is received within the threshold time period, wherein the determining whether the base station has the security risk comprises:

if the electronic device determines that the second message is not received within the threshold time period after the first message is sent, determining that the base station has the security risk; and

if the electronic device determines that the second message is received within the threshold time period after the first message is sent,

evaluating a signature included in the second message;

determining whether the base station has the security risk by determining whether the signature included in the second message is a valid signature provided by the server.

14. The non-transitory computer-readable medium of claim 13 , wherein determining that the base station has the security risk comprises evaluating a content of the second message.

15. The non-transitory computer-readable medium of claim 13 , the operations further comprising in response to determining that the base station has the security risk, outputting an indication at the electronic device.

16. The method of claim 1 , further comprising: updating the threshold time period based on user input.

17. The electronic device of claim 7 , wherein the at least one hardware processor is further configured to: update the threshold time period based on user input.

18. The non-transitory computer-readable medium of claim 13 , the operations further comprising: updating the threshold time period based on user input.