In order to go from alpha stage to beta we need to have a minimal set of working test conditions to answer the following question:

Given a handful neighboring BTS towers, with LAC,CID, GPS, band, channel, time history, signal strength, how can find the fake one?

Thus we have to focus on the detection matrix using the data we already have access to, like cell tower info and MLS/OCID BTS info.

The things we need to accomplish for this milestone are:

Implementation of the most basic detection matrix using minimal set of currently available variables:

• Create a flow-chart for the detection mechanism using the following variables:
• 1. Changing of LAC/CID
• 2. Sudden change of of Signal Strength (with same LAC/SID)
• 3. Appearance of new BTS (different LAC/CID etc) where none was found before (BTS neighborhood history)
• 4.

UI requirements:

• Implementing the UI screens and layout
• Adding Installation Disclaimer
• Map of current, previous BTS's with indicator of suspicious ones.

Various Network data & variables:

• SIM Cipher Indication availability
• Current connection encryption algorithm A5/1-3
• Current connection ciphering status
• Network data such as LAC,CID, etc
• Neighboring cells and their data
• RSSI
• History of Dropped Calls (and the reason/status)
• Emergency radio shutdown (shutdown of all internal RF systems like BT, Wifi, NFC etc.)
• Roaming indication
• [/] Current GPS location within 50m
• Transmission (TX) power

Other:

• Option: to use 2G GSM only (during detection) and 3G/LTE only during normal operation.
• Option: to disable automatic Network Selection (network lock.)
• Detection and blockage of Silent Calls
• [/] Detection and blockage of Silent SMS
• Detection and blockage of silent install attempts of applications (I.e. monitor or disable GTalkService / INSTALL_ASSET)

• = Done
• [/] = Partially done or WIP that need further attention