You have been warned: Abusing 5G's Warning and Emergency Systems
Evangelos Bitsikas, Christina P\"opper

TL;DR
This paper investigates security vulnerabilities in 5G-based Public Warning Systems, demonstrating practical attacks that can cause misinformation or suppression of critical alerts, and discusses necessary countermeasures for safer emergency communications.
Contribution
It provides the first comprehensive analysis of PWS security in 5G, identifying vulnerabilities and demonstrating five practical attacks including spoofing and suppression methods.
Findings
MitM attacks have more severe impacts than non-MitM attacks.
PWS barring can effectively eliminate legitimate warnings.
Roaming aspects of PWS are vulnerable and impact other emergency features.
Abstract
The Public Warning System (PWS) is an essential part of cellular networks and a country's civil protection. Warnings can notify users of hazardous events (e.g., floods, earthquakes) and crucial national matters that require immediate attention. PWS attacks disseminating fake warnings or concealing precarious events can have a serious impact, causing fraud, panic, physical harm, or unrest to users within an affected area. In this work, we conduct the first comprehensive investigation of PWS security in 5G networks. We demonstrate five practical attacks that may impact the security of 5G-based Commercial Mobile Alert System (CMAS) as well as Earthquake and Tsunami Warning System (ETWS) alerts. Additional to identifying the vulnerabilities, we investigate two PWS spoofing and three PWS suppression attacks, with or without a man-in-the-middle (MitM) attacker. We discover that MitM-based…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
