©2017P1Security.Allrightsreserved.
²
TrainingDescription
TS-250IMSSecurity&attackingtelecominfrastructure
©2017P1Security.Allrightsreserved.
TS-250IMSSecurity&attackingtelecominfrastructure
DescriptionofTrainingClass
LearnaboutmoderntelecomandmobilesystemandnetworksinthecontextofIMSandNGNcorenetworks.ThetraineewilllearnalsoaboutthecoreevolutionsofthelegacytelecomnetworksintoIMSnetworksandthereuseofIETF-basedprotocolsinthecontextofIMSalongwithitsmainbenefits.
Duration• Uniqueversion:3days
Attendeeswillreceive• Trainingmaterial: copyof thepresenter’s slides through IntralinksWebplatformtool fora
oneYeardurationafterthetraining’sdelivery.
Pre-requisitesoftrainingclass• Basicknowledgeoftelecom&networkprinciples:
o Whatis2G,3G;o OSInetworklayers;o Basicknowledgeoftelecomtechnologies;o BasicknowledgeofLinux.
• LaptopwithKaliLinuxinstalledeitherinVMornative;• GoodknowledgeandusageofWireshark;• GoodITsecuritybackground.
Coveredinthistraining• IMSIntroduction• IMSBenefits• IMSTechnologies• RootofthetechnologyofIMS• IMSSecurityArchitecture• IMS-specificProtocolsstudy
o SIPIETFo SIP-Io SIP-To Diameter
• OverviewofotherprotocolsstillusedinIMSo GTP-Co GTP-Uo GTPv2o GTP’
• IMSNetworkElementsoverviewandsecurityroles,functionso HSSo CSCFs:I-CSCF,P-CSCF,S-CSCF
©2017P1Security.Allrightsreserved.
o BG/BGCFo MGCFo SGW
• SpecificNetworkElementsinrecentversionofIMScorenetworkso SDP/SDRo PCRF
• SecurityofthedifferentIMSplaneso Accesso Transporto Controlo Application
• IMSCommunicationsecurity• OpenSourceIMStools• IMSnetworkelementfingerprinting• TypicalattacksonIMSinfrastructure• RoleoflegacyinIMSsecurity
o interconnectionwithSS7signalingnetworkelemento H248
• VulnerabilitiesofsomeVoiceoverIPprotocols:o SIP-Io SIP-To H323
• AnalysisofNetworkElementandvulnerabilitieso GenericIMSNetworkElementvulnerabilities
• Diametersecurity• ScenarioofattackofIMSnetwork
o Radio-based,subscriberroleo Infrastructure-based,TransmissionorRANvectoro Internal-based,attack
NextstepstobecomeanIMSnetworkauditor.
Top Related