Accounting

Gaining Control of Cellular Traffic Accounting by Spurious TCP Retransmission

---

Packet retransmission is a fundamental TCP mechanism that ensures reliable data transfer between two end nodes. Interestingly, when it comes to cellular data accounting, TCP retransmissins create an important policy issue giving rise to a tension between ISPs accounting for network resource consumption, and users only being aware of the application layer data. Regardless of the policies, we find that TCP are transmissions can beeasily abused to manipulate the current practice of cellular traffic accounting. In this work, we investigate the TCP retransmission account- ing policies of 12 cellular ISPs in 6 countries and report the accounting vulnerabilities with TCP re transmission attacks.First, we find that cellular data accounting policies vary between ISPs. While the majority of cellular ISPs blindly account for every IP packet, some ISPs intentionally remove the retransmission packets from the user bill for fairness. Second, we show that it is easy to launch the “usage-inflation” attack on the ISPs that blindly account for every IP packet. In our experiments, we could inflate the usage up to the monthly limit with an attack invisible to the subscriber and lasting only 9 minutes. For those ISPs that do not account for retransmission, we successfully launch the “free-riding” attack by tunneling the payload over fake TCP headers that look like retransmissions. To counter the attacks, we implement and evaluate Abacus, a light-weight, scalable accounting system that reliably detects “free-riding” attacks even in the 10 Gbps links.

---

Availability

No copy data

Detail Information

Series Title

-

Call Number

-

Publisher

: ., 2013

Collation

1-15

Language

English

ISBN/ISSN

1-891562-35-5

Classification

NONE

Content Type

-

Media Type

-

Carrier Type

-

Edition

-

Subject(s)

Gaining Control of Cellular Traffic Accounting by S

Specific Detail Info

-

Statement of Responsibility

-

Other version/related

File Attachment

Comments

---

You must be logged in to post a comment