KAIST researchers develop Devilray to detect fake base stations

A research team led by KAIST, in collaboration with the National Security Research Institute, Kyung Hee University, the University of Florida, and Cape, has developed Devilray, a testing platform designed to identify security vulnerabilities in fake base station detection technologies.

Fake base stations mimic legitimate mobile networks to intercept personal information, track locations, or disrupt communications. Recent criminal trends include “SMS Blaster” attacks, where mobile units transmit phishing messages impersonating financial or delivery services.

By analyzing 3GPP international mobile communication standards, the team simulated 2,592 different operational configurations of fake base stations. Testing seven existing detection systems revealed that each failed to identify at least 192 of these configurations. The study also noted that increasing detection rates through machine learning often led to a higher rate of false positives, where legitimate communications are incorrectly flagged as attacks.