A Stealthy Approach for LTE-compliant System Information Manipulation

The open nature of wireless channels exposes mobile communication systems to numerous information security threats. We propose a novel System Information spoofing method based on signal overshadowing, termed Signal Overshadowing Spoofing (SOS). This method provides an in-depth assessment of the information security of mobile communication systems that adhere to the evolution of 3GPP standards. By sniffing critical downlink control plane signals, SOS constructs high-value forged Resource Elements (REs). Leveraging high time-frequency accuracy, it employs RF signal injection techniques to execute precise and stealthy spoofing attacks on target information and critical logical channels. The results indicate that SOS is capable of concentrating radio frequency energy within the target Resource Block (RB). When compared to traditional radio jamming methods, its attack success rate can be increased by up to $40 \%$. Moreover, it exhibits excellent concealment, significantly reducing the probability of the forged signal being detected. The superior energy utilization efficiency and concealment characteristics of the SOS offer a new research consideration and experimental basis for the information security testing of mobile communication systems.