Telecommunications Infrastructure - Security SS7 Signalling Security by Philippe Langlois.pdf

(2401 KB) Pobierz
Telecommunications Infrastructure Security
SS7 Signalling Security
Philippe Langlois, P1 Security Inc.
phil@p1sec.com
Agenda
SS7 Basics
Example of SS7 protocol (ISUP) and related
attacks
SS7 and IP: the SIGTRAN evolution and problems
A practical SS7 attack: Disabling incoming calls
to any subscriber
New attack perimeters: Femto cell attacks
Getting secure
Philippe Langlois, P1 Security Inc, http://www.p1security.com
SS7 Basics
Introduction to SS7 in the PSTN
SS7 links types and SS7 signal units
Philippe Langlois, P1 Security Inc, http://www.p1security.com
Basic SS7 network
Service Switching Points
(SSP) are the telephone
“switches” that are interconnected to each other by SS7
links. The SSPs perform call processing on calls that
originate, tandem, or terminate at that site.
Signal Transfer Points
(STP) are “routers” that relay
messages between network switches and databases.
Their main function is to route SS7 messages to the
correct outgoing signaling link, based on information
contained in the SS7 message address fields.
Service Control Points
(SCP) contains centralized
network databases for providing enhanced services.
Examples of services include toll-free numbers and
prepaid subscriptions.
Philippe Langlois, P1 Security Inc, http://www.p1security.com
SS7 basic architecture
Philippe Langlois, P1 Security Inc, http://www.p1security.com
Zgłoś jeśli naruszono regulamin