# Evaluation of Resource Exhaustion Attacks against Wireless Mobile Devices
## 2 Related Work
The attack acts as follows: the intruder collects a list of mobile devices, including their cellular numbers, IP addresses and information about models, by the use of the notification MMS messages. After that the intruder exhausts the battery of the device by transmitting periodic user datagram protocol (UDP) packets, using the stored packet data protocol (PDP) contexts and the search call channel. Two main vulnerable components in the cellular network are singled out, strategies mitigating risks of such attacks are proposed. More universal ways of conducting energy exhaustion attacks are, in particular, malicious effects that form electromagnetic interference on a victim device [26; 27]. In essence, such interferences cause the target device to increase the power of its receiving-transmitting interfaces, as well as repeatedly making transmission attempts due to frequent packet loss. [PERSON], et al. [10] analyze selective jamming attacks in a wireless sensor network (WSN) that are aimed at selective physical influence the most crucial packets wirelessly passed. The core part of this influence is a real-time packet classification at the physical layer of the connection. The proposed algorithm for preventing such attacks is based on an algorithm of packet hiding, which is implemented between the media access control (MAC) and the physical Open Systems Interconnection (OSI) layers. [PERSON], et al. [11] propose an intellectual swarm based technique aimed at identifying jamming attacks in WSN. The technique enables analyzing data from sensors against jamming attacks, dynamically modifying the exploited communication channel. [PERSON], et al. [4] examine denial-of-sleep attacks in wireless sensor networks, impacting by modification of packets. The authors showed such influences can decrease the average lifetime of a device from several years up to several hours [8]  
In particular they distinguish four types of attacks:  
Collision attacks are a simultaneous sending of multiple data packets to a device, leading to its discarding and subsequent resubmitting, and thereby involving extra energy consumption. Overhearing attacks (i.e., forced listening attacks) assume a node receives packets intended for other nodes in the network, so during the receiving these packets the node cannot switch to a power-saving mode (sleep mode). This attack illustrates an indirect influence of the intruder on the victim node, as the intruder affects some other node through modifying destination address of packets it passes. A similar attack is the control packet overhead attack, involving passing particular system commands as broadcasts, such as RTS (request to send command, i.e., a warning on the preparedness of a device to send any portion of information by means if a serial port) and CTS (clear to send command, i.e., a warning on a feasibility to get data through a serial port) preventing the receiving device to activate the sleep mode. Over-emitting attacks pass messages to a device that is not ready to get them. The paper [4] also proposes improvements of the MAC protocol for governing wireless sensor networks through centralized cluster management, using a special node-gateway and a proposed WSN architecture, taking into account the monitored behavioral characteristics of the nodes. [PERSON], et al. [8] describe an method to constructing a WSN having devices functioning in a wake-up-receive mode (WuR). WuR assumes the nodes are in an active mode only during a wireless transmission and subsequent process of data, whereas in the rest time the nodes are in a high energy-efficiency mode. At that switching between the modes is realized by an event-based management. As a protection from denial-of-sleep attacks the authors propose the use of shared secret keys within the proposed key management protocol to determine the address of the compromised node. As a result only an authorized user, who has the key, is able to send data in the network. In WSN vampire attacks influencing passed packets at a layer of a routing protocol [1].