Signalling Firewall

The opensource SigFW (SS7 and Diameter Firewall) project is available on the following link.

The SigFW is opensource project providing the signalling (SS7 and Diameter) firewall filtering capabilities.

The work was created with P1 Security and released on the BlackHat USA 2017.

The project additionally prototypes the SS7 and Diameter signalling message protection, which is providing the message authenticity, integrity and confidentiality protection. This could be used by mobile operators to further secure their inter-PLMN interconnects against various active or passive signalling attacks.

The Diameter protection model was closely followed and further developed within GSMA DESS group. And the similar security mechanism was requested there from 3GPP for 5G networks (Liaison Statements S3-173407, S3-173433) - after the SEPP and the protected N32 interface became part of 5G networks.

The SigFW project is licensed under dual license policy. Default one is opensource license and additionally the following commercial options could be provided:

Opensource license:

  • The default license is the Free Open Source GNU Affero GPL v3.0.

Commercial license:

  • Can be obtained from P1 Security or from H21 lab for embedding the code into proprietary software or to modify the code and to use it without disclosing the modified source code.