Telco technical

& business courses

available worldwide

IMS Security and Attacking Telecom Infrastructure

security, fraud, engineers
available worldwide
Ask for offer

Who Should Attend?

This course is aimed at telecom core engineers who want to learn about modern telecom and mobile systems and networks in the context of IMS and NGN core networks. Along with its main benefits, we present the core evolutions of the legacy telecom networks into IMS networks and the reuse of IETF-based protocols in the context of IMS.

 

Course Scope

  1. IMS Introduction.
  2. IMS Benefits.
  3. IMS Technologies.
  4. The Root of IMS Technology.
  5. IMS Security Architecture.
  6. Study of IMS-specific Protocols.
    • SIP IETF.
    • SIP-I.
    • SIP-T Diameter.
  7. Overview of other protocols still used in IMS.
    • GTP-C
    • GTP-U
    • GTPv2
    • GTP’.
  8. Overview, Security Roles, and Functions of IMS Network Elements.
    • HSS.
    • CSCFs: I-CSCF, P-CSCF, S-CSCF.
    • BG/BGCF.
    • MGCF.
    • SGW.
  9. Specific Network Elements in recent versions of IMS core networks.
    • SDP/SDR.
    • PCRF. 
  10. Security of different IMS planes.
    • Access.
    • Transport.
    • Control.
    • Application.
  11. IMS Communication security.
  12. Open Source IMS tools.
  13. IMS network element fingerprinting.
  14. Typical attacks on IMS infrastructure.
  15. Role of legacy in IMS security.
    • Interconnection with SS7 signaling network element.
    • H248.
  16. Vulnerabilities of some Voice over IP protocols:
    • SIP-I.
    • SIP-T.
    • H323.
  17. Analysis of Network Elements and vulnerabilities.
    • Generic IMS Network Element vulnerabilities.
  18. Diameter security.
  19. IMS Network Attack Scenario.
    • Radio-based, role of the subscriber.
    • Infrastructure-based, Transmission or RAN vector.
    • Internal-based, attack.
  20. Next steps to becoming an IMS network auditor.

Prerequisites

  • Basic knowledge of telecom & network principles: 
    • 2G, 3G, 4G. 
    • OSI network layers. 
    • Telecom technology. 
  • Thorough knowledge and usage of Wireshark.
  • Basic skills and usage of Linux for reverse engineering (strings, knowledge of tools in BackTrack for reverse engineering). 
  • Legal IDA Pro license recommended, but optional.
  • In addition, please bring a laptop with Linux installed either in a VM or native, BackTrack or Ubuntu (reverse engineering and hacking tools recommended).

 

Training Structure

Three-days training divided into logical sessions.

 

Methodology

Instructor-led training. The participants will receive access to a vulnerability scanner for telecom infrastructure.

The best training ever.

Mr. Timur Zagretdinov, MTT Russia

Trainer was able to answer practical questions.

Mr. Daniel Krolikowski, Play Poland

A clear picture of GSM switching and signalling.

Ms. Anette Chale, mCel Mozambique

Very effective training methods.

Ms. Erjona Xhemali, AMC Albania

Overwhelming knowledge and expertise. Interactive and enjoyable learning.

Mr. Ashish Shrestha, NCell Nepal

Professional, high-quality trainer.

Mr. Gagik Shatveryan, Vivacell

I received a lot of useful information which I use in my work every day.

Ms. Viktoriya Gusarova, Beeline RU

Really practical and very fruitful training.

Mr. Niroj Raya, NCell Nepal

Excellent knowledge from the trainer.

Ms. Catherine Barman, Swisscom

Trainer is open for comments and discussion.

Ms. Natalya Nerubenko, Life Ukraine

Very well organized training programmes.

Mr. Mihnea Teodorescu, Cosmote, RO

Great teacher with deep knowledge and experience.

Mr. Philippe Wrzecionek, TATA

The training exceeded my expectations.

Ms. Irida Gjashta, AMC Albania

Unique training covering the most important areas of my work.

Mr. Eldar Mursaqulov, Azercell

The trainer is capable of answering all my questions.

Ms. Ana Gheorghe, Vodafone RO

Highly professional trainer with lots of practical experience. Friendly and open.

Ms. Olga Rudnicka, Tele2 Latvia

Excellent methodology of teaching. Simple and easy to understand training.

Mr. Arben Shabani, PTK Kosovo

The course exceeded my expectations. Hats off!

Mr. Adnan Syed, Mobily

Excellent course and instructor.

Mr. Nikolay Suetin, Beeline Russia

Experienced trainer. Real cases with references to recommendations.

Mr. David Curkan, T-Mobile Croatia

Good logical structure of the course and explanation.

Ms. Elena Shevtsova, Beeline, KZ

Perfect course.

Mr. Arseniy Mazanik, Beeline Russia

Seminar entirely for Telecommunication operators. A lot of issues covered.

Ms. Pinelopi Tragoudara, Vodafone GR

Amazing, more than excellent, audience-oriented trainer.

Mr. Evgeniy Dmitriev, Astelit Ukraine

Excellent exercises!

Mr. Muhammad Ali, Mobilink Pakistan

I am very impressed with the trainer's knowledge and experience.

Mr. Mouin Al Saghir, Vivacell

The training is completely excellent.

Mr. Philipp Korostelev, Beeline Moscow

More than excellent course!

Ms. Inessa Mijiferjyan, Vivacell

Trainer adapted to the expectations of the audience.

Mr. Antoine Blanchet, Monaco Telecom

Trainer understands local market experience.

Mr. Andrew Sweetman, Wataniya

Deep and detailed topic analysis.

Mr. Mohamed Sabry, Vodafone Egypt

I can proudly recommend these courses for others as well.

Mr. Tarvo Jammer, Elisa Estonia

Good direct connection between course material and real problems.

Mr. Alex Konstantopoulos, Cosmote, GR

Good class notes and great examples.

Mr. Ghaffar Masood, Mobilink Pakistan

The course covers all the impacted areas.

Ms. Gratia Scanteie, Vodafone, RO

A lot of useful materials and knowledge.

Mr. Shukhrat Khaydar, UCell

Many different people from different operators can share their problems and ideas.

Mr. Omar El-Fiky, Vodafone Egypt

Training was above expectations!

Mr. Ariel Haxhiu, Eagle Mobile, AL

I feel like the trainer is the best professor and mentor one can have.

Ms. Ledia Meici, AMC Albania

Excellent, knowledgeable trainer, open to communication.

Mr. Dmitrii Kropotov, Tele2 Russia

Experienced trainer. Excellent descriptions.

Mr. Ahmad Doar, Mobily, KSA

Trainers have passion to teach & impart knowledge.

Mr. Kanchan Chitrakar, Ncell Nepal

Training provides useful methods to analyze real protocols.

Mr. Seema Karn, NCell Nepal

Everyone gets individual attention from the trainer.

Ms. Inga Tomsone, Tele2 Latvia

Trainer understands local market experience.

Mr. Andrew Sweetman, Wataniya

This course will be very useful in my daily work.

Mr. Leopoldino Ferreira, Unitel Angola

Course covers all important issues and presents relevant examples.

Mr. Mohamed Kamel, Vodafone Egypt

A good approach to a complex problem.

Ms. Horia Catrinoiu, Vodafone RO

Very clear explanations.

Ms. Tatyana Krasyuk, Life Ukraine

The whole course was very valuable.

Mr. Sayyid Ali, Dhiraagu Maldives

Regardless of technology I received theoretical and practical answers.