Embedded Files
Referenced publications and projects:
Presentations
tshark + ELK: Network Traffic Monitoring and Analysis - BlackHat USA 2021 arsenal
5G Networks and Interconnect Threats - #HITB2021AMS COMMSEC conference talk
Security Model Of Endpoint Devices - DeepSec 2020 conference talk
SS7 Attacker Heaven Turns into Riot: How to Make Nation-State and Intelligence Attackers' Lives Much Harder on Mobile Networks - BlackHat USA 2017 conference talk
Projects
SigFW is opensource project providing the signalling SS7 and Diameter firewall filtering capabilities.
The project additionally prototypes the SS7 and Diameter signalling message protection, which is providing the message authenticity, integrity and confidentiality protection. This could be used by mobile operators to further secure their inter-PLMN interconnects against various active or passive signalling attacks.
The Diameter protection model was closely followed and further developed within GSMA DESS group. And the similar security mechanism was requested there from 3GPP for 5G networks (Liaison Statements S3-173407, S3-173433) - after the SEPP and the protected N32 interface became part of 5G networks.
Report abuse