Pengembangan Mobile-IMSI Catcher Berbasis OsmocomBB dan Pesawat Tanpa Awal
DOI:
https://doi.org/10.54706/senastindo.v7.2025.406Keywords:
IMSI Catcher, subscriber identity, OsmocomBB, UAV, signal intelligenceAbstract
This research aims to develop a portable and stealthy Mobile-IMSI Catcher system by integrating the open-source software OsmocomBB with an aerial platform based on an Unmanned Aerial Vehicle (UAV). The system is designed to detect and map subscriber identities from active mobile devices operating on GSM networks, including those from domestic and foreign operators as well as roaming devices. The methodology combines Signal Intelligence (SigInt) principles with the Network Penetration Testing framework based on NIST SP 800-42. The implementation stages include scanning for Absolute Radio Frequency Channel Numbers (ARFCN), capturing IMSI, and collecting and analyzing network parameters such as MCC, MNC, LAC, and CI. Field testing was conducted in the Yogyakarta region using a UAV equipped with OsmocomBB firmware and a Software Defined Radio (SDR) module. The results show that the system successfully captured various subscriber identities, mapped device locations based on network parameters, and tracked movement through changes in LAC and CI values. The collected data were visualized through spatial mapping, enabling detailed mobility analysis. The UAV integration significantly enhances the system's range, operational flexibility, and stealth, allowing data interception to be conducted from the air with minimal risk of detection. With its relatively low deployment cost and airborne mobility, this system presents a promising solution for future applications in cellular network monitoring, national security, law enforcement, and signal intelligence operations.
Downloads
References
[1] P. Ziayi, S. M. Farmanbar, dan M. Rezvani, “YAICD: Yet Another IMSI Catcher Detector in GSM,” Security and Communication Networks, vol. 2021, hlm. 1–13, Jan 2021, doi: 10.1155/2021/8847803.
[2] I. Palamà, F. Gringoli, G. Bianchi, dan N. Blefari-Melazzi, “IMSI Catchers in the wild: A real world 4G/5G assessment,” Computer Networks, vol. 194, hlm. 108137, Jul 2021, doi: 10.1016/j.comnet.2021.108137.
[3] M. Kotuliak, S. Erni, P. Leu, M. Röschlin, dan S. ˇCapkun, “LTRACK: Stealthy Tracking of Mobile Phones in LTE,” dalam Proceedings of the 31st USENIX Security Symposium, Security 2022, Boston, MA: USENIX Association, 2022. [Daring]. Tersedia pada: https://www.scopus.com/pages/publications/85140951883
[4] A. Paci, G. Bologna, I. Palamà, dan G. Bianchi, “FlashCatch: Minimizing Disruption in IMSI Catcher Operations,” dalam 18th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Arlington VA USA: ACM, Jun 2025, hlm. 124–135. doi: 10.1145/3734477.3734705.
[5] N. Bello dan O. Kanu, “Penetration Testing of GSM Network Using Man-in-the-Middle Attack,” JES. Journal of Engineering Sciences, vol. 0, no. 0, hlm. 0–0, Okt 2023, doi: 10.21608/jesaun.2023.226718.1249.
[6] S. Park, R. Borgaonkar, A. Shaik, dan J.-P. Seifert, “Anatomy of Commercial IMSI Catchers and Detectors,” dalam Workshop on Privacy in the Electronic Society, London, 2019, hlm. 74–86.
[7] S. Iqbal dan J. M. Hamamreh, “Wireless Open Source Supremacy: Osmocom-based Networks for Indoor and Outdoor IoT Applications Deployment,” RS Open Journal on Innovative Communication Technologies, vol. 4, no. 9, Nov 2023, doi: https://doi.org/10.46470/03d8ffbd.d488f834.
[8] Y. Richter, E. Danieli, I. Levi, dan R. Richter, “A Taxonomy of Multi-Modal Cyber Radio Frequency (CRF) Mitigation Based on Passive Geo-Location and Hardware Characteristics,” dalam 2024 IEEE International Conference on Microwaves, Communications, Antennas, Biomedical Engineering and Electronic Systems (COMCAS), Tel Aviv, Israel: IEEE, Jul 2024, hlm. 1–6. doi: 10.1109/COMCAS58210.2024.10666202.
[9] P. Sukhno dan S. Sotnik, “Critical Review of GSM Network Structure,” dalam Proceedings of VIII st International Conference, Kharkiv, Okt 2024.
[10] B. I. Bakare dan S. M. Ekolama, “Preventing Man-in-The-Middle (MiTM) Attack of GSM Calls,” EJECE, vol. 5, no. 4, hlm. 63–68, Agu 2021, doi: 10.24018/ejece.2021.5.4.336.
[11] A. R, S. Ramesh, V. V. Balaji, Y. Sikhwal, dan Prof. B. Reddy, “Stingray Device for Cyber-Surveillance using a Software-Defined Radio as an IMSI Catcher,” IJRASET, vol. 11, no. 5, hlm. 1806–1813, Mei 2023, doi: 10.22214/ijraset.2023.51956.
[12] K. M. Kareem, “The Impact of IMSI Catcher Deployments on Cellular Network Security: Challenges and Countermeasures in 4G and 5G Networks,” 2024, arXiv. doi: 10.48550/ARXIV.2405.00793.
[13] N. Sheremet dan G. Fokin, “Software-Defined Radio Wireless Communication Technology Design. LTE MIMO Mode Validation,” dalam 2024 Wave Electronics and its Application in Information and Telecommunication Systems (WECONF), St. Petersburg, Russian Federation: IEEE, Jun 2024, hlm. 1–6. doi: 10.1109/WECONF61770.2024.10564644.
[14] A. Savochkin, R. Gasparyan, A. Lukyanchikov, E. Redkina, dan A. Nochovnyi, “Review and study of software packages for emulating 2G/4G mobile networks,” dalam Third International Conference on Optics, Computer Applications, and Materials Science (CMSD-III 2023), S. Sadullozoda dan R. Abdullozoda, Ed., Dushanbe, Tajikistan: SPIE, Feb 2024, hlm. 48. doi: 10.1117/12.3025072.
[15] W. Saad, M. Bennis, M. Mozaffari, dan X. Lin, Wireless Communications and Networking for Unmanned Aerial Vehicles, 1 ed. Cambridge University Press, 2020. doi: 10.1017/9781108691017.
[16] C. Dorn, A. Depold, F. Lurz, S. Erhardt, dan A. Hagelauer, “UAV-based Localization of Mobile Phones for Search and Rescue Applications,” dalam 2022 IEEE 22nd Annual Wireless and Microwave Technology Conference (WAMICON), Clearwater, FL, USA: IEEE, Apr 2022, hlm. 1–4. doi: 10.1109/WAMICON53991.2022.9786189.
[17] N. Kumari dan P. (Dr) Cn Khairnar, “Al-Based Signal Intelligence for Real-Time Threat Detection,” AJCT, vol. 10, no. 3, hlm. 1–8, Des 2024, doi: 10.33130/AJCT.2024v10i03.005.
[18] Computer Science and Telecommunications Board, Bulk Collection of Signals Intelligence: Technical Options. Washington, D.C.: National Academies Press, 2015, hlm. 19414. doi: 10.17226/19414.
[19] K. Scarfone, M. Souppaya, A. Cody, dan A. Orebaugh, “NIST SP 800-42: Guideline on Network Security Testing,” National Institute of Standards and Technology, Gaithersburg, MD, 2015. doi: 10.6028/NIST.SP.800-115.
[20] T. Tucker dkk., “Detecting IMSI-Catchers by Characterizing Identity Exposing Messages in Cellular Traffic,” dalam Proceedings 2025 Network and Distributed System Security Symposium, San Diego, CA, USA: Internet Society, 2025. doi: 10.14722/ndss.2025.241115.
[21] Y. Zhang, C. Ma, D. Wang, T. Liu, dan Z. Wu, “A Methodology of Fake Cell Test Based on the RRC Redirection or Reselection Priorities from the 5G Network,” dalam Security and Privacy in Social Networks and Big Data, vol. 1298, Y. Xiang, Z. Liu, dan J. Li, Ed., dalam Communications in Computer and Information Science, vol. 1298. , Singapore: Springer Singapore, 2020, hlm. 215–223. doi: 10.1007/978-981-15-9031-3_19.
Downloads
Published
How to Cite
Issue
Section
Categories
License
Copyright (c) 2025 Dedy Hariyadi, Fazlurrahman, Mei Purweni
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
