公开(公告)号：US11265717B2

公开(公告)日：2022-03-01

申请号：US16357998

申请日：2019-03-19

Applicant: University of Florida Research Foundation, Inc.

Inventor： Patrick G. Traynor ,  Christian Peeters ,  Bradley G. Reaves ,  Hadi Abdullah ,  Kevin Butler ,  Jasmine Bowers ,  Walter N. Scaife

IPC: H04L29/06 ,  H04W8/06 ,  H04W8/04 ,  H04W12/121 ,  H04W64/00 ,  H04L9/32 ,  H04M3/22 ,  H04W12/50 ,  H04W12/0433

Abstract: Disclosed are various embodiments for detecting Signaling System 7 (SS7) redirection attacks by measuring call audio round trip times between phones. Such redirection attacks force calls to travel longer physical distances than usual, thereby causing longer end-to-end delay. Accordingly, various embodiments implement a distance bounding-inspired protocol that allows for securely characterizing the round trip time between two call endpoints. As a result, telephone users can reliably detect SS7 redirection attacks and protect the information contained in their calls.

公开(公告)号：US11568044B2

公开(公告)日：2023-01-31

申请号：US16358385

申请日：2019-03-19

Applicant: UNIVERSITY OF FLORIDA RESEARCH FOUNDATION, INC.

Inventor： Kevin Butler ,  Tuba Yavuz ,  Jing Tian ,  Grant Hernandez ,  Farhaan Fowze

IPC: G06F21/55 ,  G06F13/42 ,  G06F21/57

Abstract: Example embodiments provide methods, apparatuses, systems, computing devices, and/or the like for vetting USB device firmware via a USB-specific firmware analysis framework. In one example, a method is provided for analyzing firmware of a Universal Serial Bus (USB) device. The example method includes steps of receiving a firmware image extracted from the USB device, identifying signatures from the firmware image relating to USB operation, and building an expected model of operation of the USB device using the identified signatures and a database of operational information regarding USB devices. The example method further includes the steps of generating a recovered model of operation of the USB device based on the firmware image and the identified signatures, and comparing the recovered model of operation with the expected model of operation to identify unexpected or unknown behaviors. The example method may further include generating a report comprising the identified unexpected or unknown behaviors.

公开(公告)号：US20190297503A1

公开(公告)日：2019-09-26

申请号：US16357998

申请日：2019-03-19

Applicant: University of Florida Research Foundation, Inc.

Inventor： Patrick G. Traynor ,  Christian Peeters ,  Bradley G. Reaves ,  Hadi Abdullah ,  Kevin Butler ,  Jasmine Bowers ,  Walter N. Scaife

IPC: H04W12/12 ,  H04W12/04 ,  H04W12/00 ,  H04L9/32 ,  H04M3/22 ,  H04W64/00

Abstract: Disclosed are various embodiments for detecting Signaling System 7 (SS7) redirection attacks by measuring call audio round trip times between phones. Such redirection attacks force calls to travel longer physical distances than usual, thereby causing longer end-to-end delay. Accordingly, various embodiments implement a distance bounding-inspired protocol that allows for securely characterizing the round trip time between two call endpoints. As a result, telephone users can reliably detect SS7 redirection attacks and protect the information contained in their calls.