crocodilehunter
crocodilehunter copied to clipboard
EFForg
Machine learning
Some initial steps:
- @ynasser to contact ML researchers we collaborated with in the past
- start saving binary blog pcaps
Also, UW researchers suggested clustering and unsupervised learning, and then an iterative labeling approach.
Do you have training data available for this? Ie data with verified bogus cell sites? We can donate some compute to this if you like.
Hoping to gather some training data with crocodile hunter. We had considered doing an unsupervised algorithm but my (very limited) understanding is that this would require a TON of training data
Just copying this over from #83 to keep the train of thought in a single thread.
Also if you're recording the data gathered by crocodile hunter we can start experimenting with (this thread) (machine learning) to provide a probability score really you need as much data as possible on each mast then labelled samples of fake ones - which in itself isn't a hard thing to do.
If you already have a ton of mast data for anywhere let me know I can try some basic unsupervised learning methods and see how it does.
Out of interest(forgive my ignorance) but the vulns you discussed in 4g in terms of handshake, as I understand the handshake is where things get funky, what if you recorded the handshake across as many masts as possible and you could weed out the ones the did odd stuff(like downgrading to 2g)?
yea if we could record the handshake that would be great. We can't do that from CH because that would require transmitting which the SDR isn't licenesed for. But if we could record the handshake from a 4G modem that would be ideal.
Ahhh yeah I remember now I was just about to look back on your video, hrmm I've got loads of them knocking about but I've no idea how I'd record it at the moment, I'll do some digging, really it'd need to absorb masts from CH scans and then be instructed to connect to each one and record the handshake somehow I guess.
Looks like something like this might work https://desowin.org/usbpcap/ - I'll keep researching.
