【正文】 心提取具體的目標(biāo)設(shè)備信息。 基站在尋呼信道上發(fā)送包含與終端移動(dòng)用戶相關(guān)的臨時(shí)移動(dòng)用戶識(shí)別碼（ TMSI）信息。 圖 簡(jiǎn) 化的 SMS空中接口 在日常的社交活動(dòng)和簡(jiǎn)單的商業(yè)性質(zhì)的交流中， SMS 系統(tǒng)的大多數(shù)合理使用功能常常被定性為是不重要的。 盡管不能實(shí)現(xiàn)語(yǔ)音通話，但有需要的大多數(shù)的個(gè)體用戶可以通過(guò)文字信息功能實(shí)現(xiàn)通信。在本節(jié)中，通過(guò)確定這些網(wǎng)絡(luò)的瓶頸，我們提出了簡(jiǎn)單的方法來(lái)發(fā)現(xiàn)網(wǎng)絡(luò)中最脆弱的部分。所有測(cè)試都是用我們自己的手機(jī)完成。 短消息服務(wù)中心 是根據(jù)存儲(chǔ)和轉(zhuǎn)發(fā)機(jī)制 進(jìn)行 信息路由，每條信息都會(huì)被保存，除非目標(biāo)設(shè)備成功接收該短信或超時(shí)無(wú)效。 當(dāng)設(shè)備開(kāi)啟時(shí) ，下載的第一條消息不是序列號(hào)為 1 的那條，而是序列號(hào)為 301 的那條。由于歸屬位置寄存器不可能確定每一個(gè)手機(jī)的收件箱容量，因此，我們選擇了不同時(shí)期不同價(jià)格的手機(jī)進(jìn)行測(cè)試： 美國(guó)電話電報(bào)公司 的 Nokia 3560 手機(jī)、 弗萊森電訊 的稍新一點(diǎn)的 LG 4400 手機(jī) 和斯普林特公司最近發(fā)布的高端Treo 650 手機(jī)，包含 1GB 的可移動(dòng)的記憶棒 。 Cingular Wireless recorded an increase of up to 1000% on calls destined for the Washington . area [44]. While these works are engineered to handle 畢業(yè)設(shè)計(jì)（論文） 外文翻譯 9 elevated amounts of traf?c, the sheer number of calls was far greater than capacity for voice munications in the affected areas. However, with voicebased phone services being almost entirely unavailable due to TCH saturation, SMS messages were still successfully received in even the most congested regions because the control channels responsible for their delivery remained available. Text messaging allowed the lines of munication to remain open for many individuals in need in spite of their inability to plete voice calls. Accordingly, SMS messaging is now viewed by many as a reliable method of munication when all other means appear unavailable. A high number of call initiations at a given base station slows this response as the RACH is a shared access channel running the Slotted Aloha protocol Due to this proliferation of text messaging, we analyze Interoriginated, SMS attacks and their effects on voice and other services in cellular works. We ?rst characterize these systems through an extensive study of the available standards documentation and graybox testing. From this data, we discuss a number of attacks and the susceptibility of mobile phone works to , from graybox testing,we assess the resilience of these works to these attacks. Before discussing the speci?cs of any attack on cellular works, it is necessary to examine these systems from an adversary’s perspective. In this section, we present simple methods of discovering the most fragile portions of these works by determining system bottlenecks. We then investigate the creation of effective targeting systems designed to exploit these choke points. Determining Bottlenecks in Cellular Networks There is an inherent cost imbalance between injecting SMS messages into the phone work and delivering messages to a mobile user. Such imbalances are the root of DoS attacks. Recognizing these bottlenecks requires a thorough understanding of the system. The cellular work standards documentation provides the framework from which the system is built, but it lacks implementation speci?c details. In an effort to bridge this gap, we performed graybox testing [7, 14]. We characterize these systems by delivery disciplines, delivery rates, and interfaces. All tests were performed using our own phones. At no time did we inject a damaging volume of packets into the system or violate any service agreement. 畢業(yè)設(shè)計(jì)（論文） 外文翻譯 10 Delivery Discipline The delivery discipline of a work dictates the way messages move through the system. By studying this ?ow, we determine system response to an in?ux of text messages. The overall system response is a posite of multiple queuing points. The standards documentation indicates two points of interest the SMSC and the target device. SMSCs are the locus of SMS message ?ow。T, and Verizon all required under 700 bytes to send a 160 byte SMS message. This included the HTTP POST and browser headers. Due to the ACKs required for downloading the web page ( for Sprint, for ATamp。 instead the ?rst 300 messages were missing. This demonstrates that Verizon’s SMSC has a buffer capacity of 100 messages and a FIFO eviction policy. Sprint’s SMSC proved different than both ATamp。我們確信大多數(shù)短消息服務(wù)中心和移動(dòng)設(shè)備的緩沖容量有限。它的設(shè)備重新連接網(wǎng)絡(luò)時(shí) ,只能容