Course Outline

Security Concepts in Telecom Networks is a comprehensive two-day technical training course designed to provide participants with an understanding of security principles and practices in telecom networks.

The course covers a wide range of topics, including network security fundamentals, risk assessment methodologies, security requirements in telecom networks, security protocols, threat modeling, security design principles, and best practices for securing telecom networks.

Objective

By the end of this course, participants will be able to:

• Comprehend the unique aspects of Security in Telecom networks.
• Identify Telecom-specific threats and vulnerabilities, including legacy systems.
• Implement security measures tailored for Telecom infrastructure.
• Understand regulatory frameworks affecting Telecom Security (e.g. ITU, ETSI).
• Explore security protocols specific to Telecom networks (4G, 5G and IMS).
• Recognize emerging trends and technologies that influence Telecom security.

Contents

Session 1: Introduction to Security

• What is Telecom Security or widely referred to as Cyber Security and its importance
• Key Concepts: Confidentiality, Integrity, Availability (CIA Triad)
• Layers of Security: Physical, Network, Application, and Operational
• Common Cyber threats in Telecom Security (DDoS, malware, ransomware, man in the middle, data breaches and fraud)
• Explain and highlight the differences between Authentication, Ciphering, Encryption, Public/Private Certificates
• Overview of Security Standards specific to Telecom (e.g., ETSI EN 303 645, 3GPP Security Standards), regulatory Compliance (e.g., FCC mandates, GDPR implications for Telecom)

Session 2: Telecom Network Architecture and Security Layers

• Explain Security algorithms between Access Network (Radio Nodes) and User equipment (UE)
• Authentication methods in LTE, improvements (new Identifiers) introduced in 5G
• Ciphering and integrity algorithms supported in Radio Access Network (RAN) for radio interface
• What would an attacker try to gain from the Core Network of a telecom operator
• Overview of the Core elements and their connections / protocol interactions
• Relation of the Core element networking and application protocols with the OSI layer
• Describe network security protocols used in telecommunication networks and relate them to OSI layers
• Explain the difference between a secure IP/Transport network between core elements and a secure version of an application protocol
• Security on the Roaming Network interfaces (most vulnerable, more attacks due to statistics)
• Security in OSS/BSS and other IT infrastructure

Test Exercise: Exploit 2FA SMS in SS7 to perform card fraud.

Session 3: Security Measures and Best Practices for Telecom

• Telecom-Specific Security Practices: Subscriber identity protection, signaling security
• Network Security Technologies: Telecom-grade firewalls, IDS/IPS tailored for Telecom traffic

Test Exercise: Draft a security policy addressing Telecom-specific threats and compliance needs.

Session 4: Incident Response and Management in Telecoms

• Understanding the Incident Response Lifecycle in the context of Telecoms
• The essential steps to be taken to recover from a Cyber-attack (incident Response Plan tailored for Telecom service disruptions)
• Scenario-Based Discussion: Work through a Telecom-specific incident response scenario, such as a network outage due to a DDoS attack in a Diameter Hub

Session 5: Emerging Trends in Security for Telecom

• Current Trends: Zero Trust Architecture in Telecom, AI in threat detection, IoT security challenges
• Future Network Security trends (AI/ML) and a holistic approach on network security
• Describe the global efforts towards an extended MITRE ATT&CK ecosystem for mobile network operators
• Interactive Discussion: Explore recent incidents involving Telecom infrastructure and discuss the lessons learned.

Session 6: Group Discussion and Q&A

• Open forum for discussion on Telecom security topics
• Q&A with the instructor
• Sharing of experiences and best practices among participants

Assessment and Certification

• Participants will receive a certificate of completion.
• Optional: Short quiz at the end of Day 2 to assess understanding of Telecom-specific security concepts.

This course provides Telecom professionals with targeted knowledge and practical skills necessary to enhance security within Telecom networks. By integrating real-world examples and interactive activities, participants will gain actionable insights to apply in their roles.

 Entry Requirements

• Understanding of Telecommunications systems and networks
• Familiarity with Telecom protocols (e.g. SIP, SS7) and architecture.
• Basic IT knowledge (operating systems, networking)

 Target Group: Telecommunications Professionals with limited or no experience in Security.

 Mode of Delivery:  Instructor-led learning in a virtual classroom (or onsite)

Duration:  2 Days

Maximum Number of Participants: 12

Language: English