OpenBTS+GSMS型伪基站的取证分析  

Analysis on the Forensics of OpenBTS+GSMS Pseudo Base Station

作　　者：骆健儿 刘绪崇 宁佐廷[2] 陈旸 Luo Jianer;Liu Xuchong;Ning Zuoting;Chen Yang(Public Administration College,Xiangtan University,Xiangtan 411105;Hunan Engineering Research Center for Big Data Smart Policing,Hunan Police Academy,Changsha 410138)

机构地区：[1]湘潭大学公共管理学院 [2]湖南警察学院大数据智慧警务工程研究中心

出　　处：《电子世界》2019年第6期96-100,102,共6页Electronics World

基　　金：湖南省自然科学基金;项目编号:2018JJ2108;网络侦查技术湖南省重点实验室开放基金;项目编号:2017WLZC005

摘　　要：伪基站是一种利用GSM漏洞非法伪装成合法移动通信基站从而非法获取手机用户信息并非法推送短信的通信设备。在打击非法利用伪基站的违法犯罪活动过程中,OpenBTS+GSMS型伪基站成为电子数据取证的重点难点。本文在深入了解伪基站的功能、架构及其工作原理的基础上,分析了OpenBTS+GSMS伪基站控制台的系统软件功能和源代码逻辑,结合大量实际案例,力求科学分析OpenBTS+GSMS型伪基站中具有取证价值的电子数据,期望为电子数据鉴定人员提供借鉴参考。Pseudo base station is a kind of communication equipment that illegally disguises itself as a legitimate mobile communication base station by taking advantage of GSM vulnerabilities to illegally acquire information of mobile users and illegally push short messages.In the process of cracking down on illegal use of pseudo base stations,OpenBTS +GSMS pseudo base stations have become the key and difficult points of electronic data forensics.Based on a thorough understanding of the functions,architecture and working principle of pseudo base station,this paper analyses the system software functions and source code logic of OpenBTS+GSMS pseudobase station console,and combines with a large number of practical cases,strives to scientifically analyze the electronic data with forensic value in OpenBTS+GSMS pseudo base station,expecting to provide reference for electronic data appraisers.

关 键 词：移动通信基站 电子数据取证 S型 通信设备 用户信息 活动过程 违法犯罪 工作原理 

分 类 号：TN929.5[电子电信—通信与信息系统]