Activity: Talk or presentation › Scientific poster presentation
Description
This project aims at detecting attacks in the SS7 (Signaling System 7) traffic of the 2G and 3G mobile networks. Vulnerabilities of SS7 designed in the 70ties allow an attacker to track a Mobile Station (MS), to intercept, modify or redirect SMS or calls and to perform a Denial of Service (DoS). Although the security improved with 4G, the legacy 2G and 3G networks must be maintained for 5 to 10 more years for compatibility with old mobile or network equipment. We aim at detecting SS7 anomalies which may reveal suspicious activities. We are building detectors analyzing the SS7 traffic between network nodes. We will combine detector outputs in the MARk framework (developed at the Cyber Defence Research Unit [1]) to highlight anomalies.