{"id":"https://openalex.org/W3210952007","doi":"https://doi.org/10.1145/3447993.3483254","title":"SecureSIM","display_name":"SecureSIM","publication_year":2021,"publication_date":"2021-10-25","ids":{"openalex":"https://openalex.org/W3210952007","doi":"https://doi.org/10.1145/3447993.3483254","mag":"3210952007"},"language":"en","primary_location":{"id":"doi:10.1145/3447993.3483254","doi":"https://doi.org/10.1145/3447993.3483254","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3447993.3483254","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3447993.3483254","source":{"id":"https://openalex.org/S4363608994","display_name":"ACM Annual International Conference on Mobile Computing and Networking (MobiCom)","issn_l":"1543-5679","issn":["1543-5679"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th Annual International Conference on Mobile Computing and Networking","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3447993.3483254","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033400618","display_name":"Jinghao Zhao","orcid":"https://orcid.org/0000-0003-1675-0968","observed_orcids":["https://orcid.org/0000-0003-1675-0968","https://orcid.org/0009-0008-7823-3521"]},"institutions":[{"id":"https://openalex.org/I2803209242","display_name":"University of California System","ror":"https://ror.org/00pjdza24","country_code":"US","type":"education","lineage":["https://openalex.org/I2803209242"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jinghao Zhao","raw_affiliation_strings":["University of California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California","institution_ids":["https://openalex.org/I2803209242"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051269814","display_name":"Boyan Ding","orcid":"https://orcid.org/0009-0002-9501-8838","observed_orcids":["https://orcid.org/0009-0002-9501-8838","https://orcid.org/0000-0002-1576-261X"]},"institutions":[{"id":"https://openalex.org/I2803209242","display_name":"University of California System","ror":"https://ror.org/00pjdza24","country_code":"US","type":"education","lineage":["https://openalex.org/I2803209242"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Boyan Ding","raw_affiliation_strings":["University of California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California","institution_ids":["https://openalex.org/I2803209242"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076036430","display_name":"Yunqi Guo","orcid":"https://orcid.org/0000-0002-1852-3825","observed_orcids":["https://orcid.org/0000-0002-1852-3825"]},"institutions":[{"id":"https://openalex.org/I2803209242","display_name":"University of California System","ror":"https://ror.org/00pjdza24","country_code":"US","type":"education","lineage":["https://openalex.org/I2803209242"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yunqi Guo","raw_affiliation_strings":["University of California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California","institution_ids":["https://openalex.org/I2803209242"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006953955","display_name":"Zhaowei Tan","orcid":"https://orcid.org/0000-0002-0118-7917","observed_orcids":["https://orcid.org/0000-0002-0118-7917"]},"institutions":[{"id":"https://openalex.org/I2803209242","display_name":"University of California System","ror":"https://ror.org/00pjdza24","country_code":"US","type":"education","lineage":["https://openalex.org/I2803209242"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhaowei Tan","raw_affiliation_strings":["University of California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California","institution_ids":["https://openalex.org/I2803209242"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020188879","display_name":"Songwu Lu","orcid":"https://orcid.org/0000-0003-3779-0918","observed_orcids":["https://orcid.org/0000-0003-3779-0918"]},"institutions":[{"id":"https://openalex.org/I2803209242","display_name":"University of California System","ror":"https://ror.org/00pjdza24","country_code":"US","type":"education","lineage":["https://openalex.org/I2803209242"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Songwu Lu","raw_affiliation_strings":["University of California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California","institution_ids":["https://openalex.org/I2803209242"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2803209242"],"apc_list":null,"apc_paid":null,"fwci":2.3128,"has_fulltext":true,"cited_by_count":18,"citation_normalized_percentile":{"value":0.89591537,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"451","last_page":"464"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9028000235557556,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9028000235557556,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.07270000129938126,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.00559999980032444,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/esim","display_name":"eSIM","score":0.9879999756813049},{"id":"https://openalex.org/keywords/key-reconstruction","display_name":"key reconstruction","score":0.6859999895095825},{"id":"https://openalex.org/keywords/device-authentication","display_name":"device authentication","score":0.8199999928474426},{"id":"https://openalex.org/keywords/man-in-the-middle-attacks","display_name":"man-in-the-middle attacks","score":0.9649999737739563},{"id":"https://openalex.org/keywords/impersonation","display_name":"impersonation","score":0.656000018119812},{"id":"https://openalex.org/keywords/fine-grained-access-control","display_name":"fine-grained access control","score":0.949999988079071},{"id":"https://openalex.org/keywords/mobile-network-security","display_name":"mobile network security","score":0.5989999771118164}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.790706992149353},{"id":"https://openalex.org/C2776788033","wikidata":"https://www.wikidata.org/wiki/Q320769","display_name":"Eavesdropping","level":2,"score":0.7698549032211304},{"id":"https://openalex.org/C40367706","wikidata":"https://www.wikidata.org/wiki/Q230110","display_name":"Subscriber identity module","level":3,"score":0.7003856897354126},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.6269174814224243},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5968873500823975},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5890029668807983},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5663439035415649},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.550142228603363},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5125246047973633},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.4899684488773346},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.4666796922683716},{"id":"https://openalex.org/C168970074","wikidata":"https://www.wikidata.org/wiki/Q5227146","display_name":"Data Authentication Algorithm","level":4,"score":0.46052297949790955},{"id":"https://openalex.org/C194699767","wikidata":"https://www.wikidata.org/wiki/Q7878662","display_name":"Multi-factor authentication","level":4,"score":0.44312146306037903},{"id":"https://openalex.org/C196491621","wikidata":"https://www.wikidata.org/wiki/Q554830","display_name":"Man-in-the-middle attack","level":3,"score":0.42710500955581665},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.3970656991004944},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3947834372520447},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24416813254356384},{"id":"https://openalex.org/C2779971919","wikidata":"https://www.wikidata.org/wiki/Q1378949","display_name":"Handset","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3447993.3483254","doi":"https://doi.org/10.1145/3447993.3483254","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3447993.3483254","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3447993.3483254","source":{"id":"https://openalex.org/S4363608994","display_name":"ACM Annual International Conference on Mobile Computing and Networking (MobiCom)","issn_l":"1543-5679","issn":["1543-5679"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th Annual International Conference on Mobile Computing and Networking","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3447993.3483254","doi":"https://doi.org/10.1145/3447993.3483254","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3447993.3483254","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3447993.3483254","source":{"id":"https://openalex.org/S4363608994","display_name":"ACM Annual International Conference on Mobile Computing and Networking (MobiCom)","issn_l":"1543-5679","issn":["1543-5679"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th Annual International Conference on Mobile Computing and Networking","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G5520421933","display_name":"Collaborative Research: CNS Core: Small: Beyond-5G Extreme Mobility: Issues and Solutions","funder_award_id":"2008026","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5846624716","display_name":"CNS Core: Small: A Software-Defined Approach to 5G Services for Robots","funder_award_id":"1910150","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3210952007.pdf","grobid_xml":"https://content.openalex.org/works/W3210952007.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W190551272","https://openalex.org/W1595155753","https://openalex.org/W2010579408","https://openalex.org/W2017822141","https://openalex.org/W2033811191","https://openalex.org/W2050379150","https://openalex.org/W2053656443","https://openalex.org/W2105412867","https://openalex.org/W2140095007","https://openalex.org/W2154765153","https://openalex.org/W2158812183","https://openalex.org/W2164831052","https://openalex.org/W2168356719","https://openalex.org/W2287724167","https://openalex.org/W2294912729","https://openalex.org/W2335588581","https://openalex.org/W2526496292","https://openalex.org/W2567869469","https://openalex.org/W2572070369","https://openalex.org/W2594536436","https://openalex.org/W2782681674","https://openalex.org/W2794598542","https://openalex.org/W2796848669","https://openalex.org/W2890559797","https://openalex.org/W2890591751","https://openalex.org/W2898506421","https://openalex.org/W2932741641","https://openalex.org/W2946618605","https://openalex.org/W2951035739","https://openalex.org/W2965939289","https://openalex.org/W2970745276","https://openalex.org/W2988314999","https://openalex.org/W2991425020","https://openalex.org/W3008993478","https://openalex.org/W3014135557","https://openalex.org/W3016049591","https://openalex.org/W3021133756","https://openalex.org/W3146754932","https://openalex.org/W6602780416","https://openalex.org/W6604970211"],"related_works":["https://openalex.org/W6959079960","https://openalex.org/W2351761483","https://openalex.org/W2761400924","https://openalex.org/W7165629207","https://openalex.org/W618994295","https://openalex.org/W1592590981","https://openalex.org/W4401173251","https://openalex.org/W7171737579","https://openalex.org/W629102186","https://openalex.org/W3094643880"],"abstract_inverted_index":{"The":[0,80],"SIM/eSIM":[1],"card":[2],"stores":[3],"critical":[4],"information":[5,51],"for":[6,60,103],"a":[7,69,113],"mobile":[8],"user":[9],"to":[10,39,55,98],"access":[11,32,96,122],"the":[12,23,30,36,85,130],"4G/5G":[13],"network.":[14],"In":[15],"this":[16],"work,":[17],"we":[18],"uncover":[19],"three":[20],"vulnerabilities":[21],"of":[22,71,100,132],"current":[24,86],"SIM":[25,87],"practice.":[26],"We":[27,110],"show":[28],"that":[29,116],"PIN-based":[31],"control":[33,97],"may":[34],"expose":[35],"in-SIM":[37,50,101],"data":[38,63],"an":[40],"adversary":[41],"through":[42],"both":[43,118],"hardware":[44],"and":[45,94,107,120,126],"software.":[46],"Once":[47],"exposed,":[48],"such":[49],"can":[52],"be":[53],"used":[54,59],"reconstruct":[56],"various":[57,104],"keys":[58],"device":[61],"authentication,":[62],"encryption,":[64],"etc.":[65,79],"They":[66],"thus":[67],"enable":[68],"number":[70],"attacks,":[72],"including":[73],"traffic":[74],"eavesdropping,":[75],"man-in-the-middle":[76],"attack,":[77],"impersonation,":[78],"fundamental":[81],"problem":[82],"is":[83],"that,":[84],"design":[88],"does":[89],"not":[90],"offer":[91],"proper":[92],"authentication":[93,119],"fine-grained":[95,121],"hundreds":[99],"files":[102],"in-card":[105],"applets":[106],"off-card":[108],"units.":[109],"next":[111],"propose":[112],"new":[114],"solution":[115],"offers":[117],"control.":[123],"Our":[124],"implementation":[125],"evaluation":[127],"have":[128],"confirmed":[129],"viability":[131],"our":[133],"proposal.":[134]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":2}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2021-11-08T00:00:00"}