Mobile Threat Catalogue

Unauthorized QoS Indicator Modification

Contribute

Threat Category: VoLTE

ID: CEL-16

Threat Description: Unauthorized changes to the VoLTE Quality of Service class of identifier (QCI) can alter data reception characteristics, including the availability of the call’s bandwidth and packet transmission delay or loss characteristics.

Threat Origin

Insecurity of Voice Solution VoLTE in LTE Mobile Networks 1

How Voice Call Technology Poses Security Threats in 4G LTE Networks 2

Exploit Examples

Not Applicable

CVE Examples

Not Applicable

Possible Countermeasures

References

  1. C.-Y. Li et al. “Insecurity of Voice Solution VoLTE in LTE Mobile Networks”, In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, 2015, pp. 316-327; http://dx.doi.org/10.1145/2810103.2813618 [accessed 8/23/2016] 

  2. G.-H. Tu et al., “How Voice Call Technology Poses Security Threats in 4G LTE Networks”, in Proceedings of 2015 IEEE Conference on Communications and Network Security (CNS), 2015; https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=7346856 [accessed 8/1/2022]