S1P1wwwwwwwwwwwwwwwwwwwwwwwww_Gerhard _Ott_v2.pptx

hbj

1. ITU Workshop on “SS7 Security” Geneva, Switzerland 29 June 2016 Security in SS7 networks Gerhard Ott Test expert, Deutsche Telekom AG, [email protected] Gerhard Ott

2. Security in SS7 networks Physical Level 2 Level 3 ISUP SCCP TCAP Application The SS7 stack

3. Security in SS7 networks Security in SS7 networks - what are the risks security reasons, fraud spoof intercept DOS

4. Security in SS7 networks Target affected Provider Network User

5. Security in SS7 networks Network ( own ) Network foreign B Network foreign A Examble of a SS7 relationship

6. Security in SS7 networks Target affected Provider Network Attack on level 3 functionalities Link management Trunk group management Denial of Service attack

7. Security in SS7 networks Network ( own ) Network foreign B Network foreign A Examble for a redirection

8. Security in SS7 networks Target affected User The user will recall misled ( there is a number is in the caller list pointing to a service with special prices ) User see a faked calling number ( e.g. emergency number 110 )

9. Security in SS7 networks Target affected User The user is intercepted SMS spam SMS read along Track the location(s) of a mobile user Change the data base of a mobile user

10. Security in SS7 networks Security in SS7 networks – what to do about the risks level 3 i ssues OPC/DPC depended routing ( level 3 firewall ) Separation in two networks ( use of network i ndicator ) It is assumed that these proposals already applied

11. Security in SS7 networks Security in SS7 networks – what to do about the risks User i ssues Anomaly Detection on Incoming MAP messages ( Monitoring system ) Filtering of MAP application context ( at application level ) Configuration Software upgrade ( Vendor action, change request )

12. Security in SS7 networks Thank you for your attention Questions? Comments?