Simulating unauthorized use of a cellular communication network
Described embodiments include a system that includes a digital memory and a processor. The processor is configured to simulate, using information stored in the digital memory, an unauthorized use of a cellular communication network by at least one cellular communication terminal, by generating, and then transmitting from a network side of the cellular communication network, traffic that appears to have originated from the at least one cellular communication terminal. Other embodiments are also described.
1. A system, comprising:
a digital memory; and
a processor, configured:
to generate, using information stored in the digital memory, traffic that appears to have originated from at least one cellular communication terminal,
to inject the generated traffic, from a network side of the cellular communication network, into a flow of traffic over the network, such as to simulate an unauthorized use of the network by the at least one cellular communication terminal,
to ascertain a result of the simulated unauthorized use, and
to generate an output indicative of the result.
2. The system according to claim 1 , wherein the processor is configured to transmit the generated traffic to a core network (CN) of the cellular communication network by injecting the generated traffic into the flow of traffic.
3. The system according to claim 1 , wherein the generated traffic is first generated traffic, and wherein the processor is further configured to:
generate second traffic that appears to have originated from at least one other cellular communication terminal,
inject the second generated traffic into the flow of traffic, such as to simulate an authorized use of the network by the at least one other cellular communication terminal, and
ascertain a result of the simulated authorized use,
wherein the output is indicative of both the result of the simulated unauthorized use and the result of the simulated authorized use.
4. The system according to claim 1 , wherein the at least one cellular communication terminal includes a plurality of cellular communication terminals, and wherein the processor is configured to inject the generated traffic from a single point in the cellular communication network.
5. The system according to claim 1 , wherein the processor is configured, in generating the traffic, to format the traffic to appear as if the traffic was received from a plurality of base stations belonging to the cellular communication network.
6. The system according to claim 1 , wherein the processor is configured to inject the traffic from between a radio access network (RAN) and a core network (CN) of the cellular communication network.
7. The system according to claim 1 , wherein the generated traffic includes a control packet, and wherein the processor is configured to simulate the unauthorized use by unauthorizedly passing data within the control packet.
8. The system according to claim 7 , wherein the control packet includes a Session Initiation Protocol (SIP) message.
9. The system according to claim 1 , wherein the generated traffic includes a destination identifier of another cellular communication terminal.
10. The system according to claim 1 , wherein the generated traffic includes a source identifier of another cellular communication terminal.
11. The system according to claim 1 , wherein the processor is configured to simulate the unauthorized use by simulating a denial-of-service (DoS) attack.
12. The system according to claim 1 , wherein the processor is configured to simulate the unauthorized use by simulating a control-traffic attack against the cellular communication network.
13. A method, comprising:
generating traffic that appears to have originated from at least one cellular communication terminal;
injecting the generated traffic, from a network side of the cellular communication network, into a flow of traffic over the network, such as to simulate an unauthorized use of the network by the at least one cellular communication terminal;
ascertaining a result of the simulated unauthorized use; and
generating an output indicative of the result.
14. The method according to claim 13 , wherein injecting the traffic comprises transmitting the traffic to a core network (CN) of the cellular communication network.
15. The method according to claim 13 , wherein the generated traffic is first generated traffic, and wherein the method further comprises:
generating second traffic that appears to have originated from at least one other cellular communication terminal;
injecting the second generated traffic into the flow of traffic, such as to simulate an authorized use of the network by the at least one other cellular communication terminal; and
ascertaining a result of the simulated authorized use,
wherein the output is indicative of both the result of the simulated unauthorized use and the result of the simulated authorized use.
16. The method according to claim 13 , wherein the at least one cellular communication terminal includes a plurality of cellular communication terminals, and wherein injecting the generated traffic comprises injecting the generated traffic from a single point in the cellular communication network.
17. The method according to claim 13 , wherein generating the traffic comprises formatting the traffic to appear as if the traffic was received from a plurality of base stations belonging to the cellular communication network.
18. The method according to claim 13 , wherein injecting the generated traffic comprises injecting the generated traffic from between a radio access network (RAN) and a core network (CN) of the cellular communication network.
19. The method according to claim 13 , wherein the generated traffic includes a control packet, and wherein simulating the unauthorized use comprises simulating the unauthorized use by unauthorizedly passing data within the control packet.
20. The method according to claim 19 , wherein the control packet includes a Session Initiation Protocol (SIP) message.
21. The method according to claim 13 , wherein the generated traffic includes a destination identifier of another cellular communication terminal.
22. The method according to claim 13 , wherein the generated traffic includes a source identifier of another cellular communication terminal.
23. The method according to claim 13 , wherein simulating the unauthorized use comprises simulating the unauthorized use by simulating a denial-of-service (DoS) attack.
24. The method according to claim 13 , wherein simulating the unauthorized use comprises simulating the unauthorized use by simulating a control-traffic attack against the cellular communication network.
25. A computer software product comprising a tangible non-transitory computer-readable medium in which program instructions are stored, which instructions, when read by a processor, cause the processor:
to generate traffic that appears to have originated from at least one cellular communication terminal,
to inject the generated traffic, from a network side of the cellular communication network, into a flow of traffic over the network, such as to simulate an unauthorized use of the network by the at least one cellular communication terminal,
to ascertain a result of the simulated unauthorized use, and
to generate an output indicative of the result.
26. The computer software product according to claim 25 , wherein the instructions further cause the processor to format the traffic to appear as if the traffic was received from a plurality of base stations belonging to the cellular communication network.