satellite telephony security · hacking a bird in the sky: the revenge of angry birds jim geovedi...
TRANSCRIPT
![Page 1: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/1.jpg)
SatelliteTelephonySecurity
![Page 2: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/2.jpg)
DON’T PANIC
![Page 3: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/3.jpg)
Arthur C. Clarke1917-2008
WHEN TERRESTRIAL COMMUNICATION FAIL,WE PREVAIL!
“
”
![Page 4: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/4.jpg)
Local ISPs
Video Contribution
Teleport PSTN
End Users
End Users
InternetTeleport
Corporate Data Networks(Interactive & Multicast)
Direct Broadcast TVLast-mile Broadband
Broadcast Video toCable Headends
Satellite Communications
![Page 5: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/5.jpg)
Dan VeenemanLow Earth Orbit Satellites
Dan VeenemanFuture & Existing Satellite Systems
WarezzmanDVB Satellite Hacking
Jim Geovedi, Raditya Iryandi,Hacking a Bird in the Sky: Hijacking VSAT Connection
Jim Geovedi, Raditya Iryandi, Anthony ZboralskiHacking a Bird in the Sky: Exploiting Satellite Trust Relationship
Adam Laurie$atellite Hacking for Fun & Pr0fit!
Leonardo Nve Egea, Christian MartorellaPlaying in a Satellite Environment 1.2
Jim Geovedi, Raditya IryandiHacking Satellite: A New Universe to Discover
1996 1998 2004 2006 2008 2009 2011
Jim Geovedi, Raditya Iryandi, Raoul ChiesaHacking a Bird in the Sky: The Revenge of Angry Birds
Jim GeovediSatellite Telephony Security: What Is and What Will Never Be
![Page 6: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/6.jpg)
Satellite Phone
![Page 7: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/7.jpg)
![Page 8: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/8.jpg)
![Page 9: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/9.jpg)
![Page 10: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/10.jpg)
Satellite Phone Network
![Page 11: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/11.jpg)
EARTH
average distance to moon:384,400 km
Geostationary OrbitAltitude: 35,786 km
Low Earth OrbitAltitude: 500-2,000 km
Medium Earth OrbitAltitude: 8,000-20,000 km
Highly Elliptical OrbitAltitude: >35,786 km
Satellite Orbits
![Page 12: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/12.jpg)
GEO (Geostationary Earth Orbit)Satellite OperatorsACeS, ICO, Inmarsat, SkyTerra, TerreStar, Thuraya
LEO (Low Earth Orbit)Satellite OperatorsGlobalstar, Iridium
![Page 13: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/13.jpg)
FeederDownlink
FeederUplink
TerminalDownlink
TerminalUplink
Return Link
Forward Link
Intersatellite Link(ISL)
Orb
ital
Alt
itud
e
Gateway
PSTN Cellular
End UserTerminal
LEOSatellite i+1
LEOSatellite i
LEO Communication Satellite Constellation System
![Page 14: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/14.jpg)
Frequency Band Designations
![Page 15: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/15.jpg)
TDMA (Time Division Multiple Access)
f1
Transponder
f1
f1f1 f1
![Page 16: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/16.jpg)
Timeframe Structure and Timeslots
1 2 3 4 5 6 7 8 9 10 11 12 13 14 150
1 2 3 4 5 6 7 8 9 10 11 12 13 14 150 16 17 18 19 20 21 22 23
21 30
1 2 3 4892 4893 4894 48950
1 hyperframe = 4,896 superframes = 19,584 multiframes = 313,344 TDMA frames(3h 28mn 53s 760ms)
1 superframe = 4 multiframes = 64 TDMA frames (2.56s)
1 multiframe = 16 TDMA frames (640 ms)
1 TDMA frame = 24 timeslots (40ms)
1 timeslot = 78 bit durations (5/3ms)
1 bit duration = 5/234ms
![Page 17: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/17.jpg)
CDMA (Code Division Multiple Access)
Transponder
f1 f1 f1 f1
------------------------------------------
oooooooooooooooooooooooooooooooooooooooooo
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
++++++++++++++++++++++++++++++++++++++++++
![Page 18: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/18.jpg)
Coverage: Iridium
![Page 19: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/19.jpg)
Coverage: Inmarsat
![Page 20: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/20.jpg)
Coverage: Thuraya
![Page 21: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/21.jpg)
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
Spotbeams: Regional Coverage
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
![Page 22: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/22.jpg)
GMR (GEO-Mobile Radio Interface)
![Page 23: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/23.jpg)
GSM GMR Release 1
GPRS GMR Release 2Evolution Path
3GPP GMR Release 3
Extension to Satellite
![Page 24: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/24.jpg)
GMR-1
![Page 25: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/25.jpg)
Space segment
GMR-1 System Elements
Feeder links
SOC
PSTN
GS
Gateway Station
Gateway Stations
Mobile Earth Stations
Spotbeam coverageat L-Band
![Page 26: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/26.jpg)
GMR-1 Protocol Architecture
MES
Satellite
GSC +GTS +TCS
GSMMSC
GSMSIM
GPSRECEIVER
CM
MM
RR
DLL
PHYSPHYS PHYS
RR
DLL
PHYS
BSSMAP
SCCP
MTP
CM
MM
BSSMAP
SCCP
MTP
GMR-1 Um-Interface
SpotbeamsL-Band
Feeder LinkKu or C-Band
GSM/A-Interface(CCS7)
![Page 27: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/27.jpg)
GMR-1 Logical Channel Mapping onto Physical ChannelU
SE
R C
HA
NN
ELS
MOBILE EARTH STATION SATELLITE
LOGICALCHANNELS
PHYSICALCHANNELS
TCHTraffic
TimeslotNumber
TDMA FrameSequence
RF ChannelCCH
Control andSignalling
Frequency(RF Channels)
Time(Timeslots)
PHYSICALRESOURCE
UPLINK
DOWNLINKC
ON
TR
OL
EN
TIT
IES
MA
PP
ING
![Page 28: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/28.jpg)
GMR-1 (GSM-based) Services• Standard GSM-based services (Phase 2)
• Roaming
• Single number routing
• Numbers and addressing
• Authentication and privacy
![Page 29: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/29.jpg)
GMR-1 Extended Services• Single-hopped terminal-to-terminal calls
• Optimal routing
• High penetration alerting
• Position based services
![Page 30: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/30.jpg)
GMR-2
![Page 31: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/31.jpg)
PSTN
PN
PLMN
Satellite ControlFacility
Network ControlCentre
Customer ManagementInformation System
GEO SatelliteTrafficSignalling
C-BandC-Band
C-Band
C-Band L-Band
UserTerminals
PSTN
PN
PLMN
PSTN
PN
PLMN
GMR-2 System Elements
Gateway 1
Gateway 2
Gateway 3
![Page 32: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/32.jpg)
C-band Regional Coverage for Signalling & Communication
C-Band
TrafficSignalling
![Page 33: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/33.jpg)
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
L-band Spotbeams for MSS Users
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
G
B
A
F
E
C
D
H
I
J
K
L
TrafficSignalling
![Page 34: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/34.jpg)
GMR-2 Gateway Internal Structure
RF/IF TCE GSC MSC
PSTNPN
GSM
DatabasesHLR & VLR
GA Gateway Antenna
TCE Traffic Channel Equipment
GSC Gateway Station Controller
MSC Mobile Switching Center
GA
![Page 35: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/35.jpg)
GMR Satellite Monitoring SystemIntercepting
![Page 36: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/36.jpg)
Satellite Phone Interception• Law-enforcements require tapping
• Test equipment
• Limited use of encryption
• Modifiable phone equipment
![Page 37: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/37.jpg)
Tactical InterceptionReceives L-band from satellite and line-of-sight from handset
Strategic InterceptionReceives L-band from satellite and C-band from satellite
![Page 38: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/38.jpg)
Satellite Interception Operation
MES6 GHz
UP3.5 GHzDOWN
1.5 GHzDOWN
1.6 GHzUP
Gateway
![Page 39: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/39.jpg)
Tactical Satellite Interception Operation
Gateway Monitoring Agent
MES6 GHz
UP3.5 GHzDOWN
1.5 GHzDOWN
1.5 GHzDOWN
1.6 GHzUP
1.6 GHzRADIO LINE-OF-SIGHT
![Page 40: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/40.jpg)
DownconverterIF
Satellite antenna
Uplink antenna
Tactical Satellite Interception Operation
Channel 1
Channel 2
![Page 41: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/41.jpg)
Call Analysis• Spotbeam IDs, GPS co-
ordinates, operating frequency.
• Date, time and duration of call.
• MES IMSI.
• GPS co-ordinates of MES.
• Random Reference Number (CallerID).
• TMSI called by MES.
• Mobile or Fixed Originated Call (Voice, Fax, Data or SMS).
• Terminal type.
• Ciphering key sequence number.
• RAND and SRES.
• Encryption Algorithm
![Page 42: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/42.jpg)
Strategic Satellite Interception Operation
Monitoring Centre
MES6 GHz
UP3.5 GHzDOWN
1.5 GHzDOWN
3.5 GHzDOWN
1.5 GHzDOWN
1.6 GHzUP
Gateway
![Page 43: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/43.jpg)
FAQ
![Page 44: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/44.jpg)
What’s next?
![Page 45: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/45.jpg)
![Page 46: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/46.jpg)
![Page 47: Satellite Telephony Security · Hacking a Bird in the Sky: The Revenge of Angry Birds Jim Geovedi Satellite Telephony Security: What Is and What Will Never Be. Satellite Phone. Satellite](https://reader035.vdocuments.us/reader035/viewer/2022081606/5e40f097bc9ebb0db246c5cb/html5/thumbnails/47.jpg)
@geovedihttp://www.slideshare.net/geovedi/presentations