OpenBTS+GSMS型伪基站的取证分析

Analysis on the Forensics of OpenBTS+GSMS Pseudo Base Station

伪基站是一种利用GSM漏洞非法伪装成合法移动通信基站从而非法获取手机用户信息并非法推送短信的通信设备。在打击非法利用伪基站的违法犯罪活动过程中,OpenBTS+GSMS型伪基站成为电子数据取证的重点难点。本文在深入了解伪基站的功能、架构及其工作原理的基础上,分析了OpenBTS+GSMS伪基站控制台的系统软件功能和源代码逻辑,结合大量实际案例,力求科学分析OpenBTS+GSMS型伪基站中具有取证价值的电子数据,期望为电子数据鉴定人员提供借鉴参考。

Pseudo base station is a kind of communication equipment that illegally disguises itself as a legitimate mobile communication base station by taking advantage of GSM vulnerabilities to illegally acquire information of mobile users and illegally push short messages.In the process of cracking down on illegal use of pseudo base stations,OpenBTS +GSMS pseudo base stations have become the key and difficult points of electronic data forensics.Based on a thorough understanding of the functions,architecture and working principle of pseudo base station,this paper analyses the system software functions and source code logic of OpenBTS+GSMS pseudobase station console,and combines with a large number of practical cases,strives to scientifically analyze the electronic data with forensic value in OpenBTS+GSMS pseudo base station,expecting to provide reference for electronic data appraisers.