Presentation about the security features provided by the 3GPP specifications for LTE. The attacks described highlight the differences between the perceived and real guarantees of the specs.
The presentation is based entirely on 3GPP documents, not on actual implementations.
See "lte_preso_w_notes.pdf" for additional information in the presenter notes.
The appendix contains a history of 2G/3G offensive security research.