Mobile Interconnect Threats: How Next-Gen Products May be Already Outdated

Summary

• SS7 networks were initially designed without security protocols, making them vulnerable to attacks
• Mobile network operators are deploying new equipment to detect and protect against attacks
• The talk describes vulnerabilities discovered in SS7 firewall vendors and how to assess the security of such products
• The speaker's employer is Orange, a European operator with many affiliates worldwide
• The presentation includes a technical overview of the sequence stack and the different layers of the Sigtran stack
• The speaker's team developed a tool called Pornss7 to modify and generate packets that can be processed by the sequence stack of the SS7 firewall
• The talk includes a pseudocode example of how to bypass detection from the SS7 firewall at the IP level

Abstract