SecurityGen-Signaling-Threats-in-Latam.pdf
0 likes6 views
The document discusses signaling threats faced by mobile network operators (MNOs) in Latin America. It notes that the volume of attacks against an MNO depends more on how vulnerable the operator's signaling infrastructure is rather than the size of the country or operator. Attackers focus on opportunities that allow fast cashflow. The most common exploited threats identified are fraud, data breach, and subscriber denial of service attacks. MNOs without proper firewall protections can see 70% of incoming attacks successfully responded to by their networks. Security measures can reduce successful attacks to under 1%.
SecurityGen-Signaling-Threats-in-Latam.pdf
- 1. The insights shared in this document are drawn from the actual data collected by SecurityGen team across many MNOs (Mobile Network Operators) in the region. SIGNALLING THREATS IN LATAM LATAM Scenario The number of attacks does NOT depend on the size of the country/Mobile Operator. The volume of attacks received by an MNO depends on how vulnerable is the operator’s signaling infrastructure and the efficiency of its protective systems, when available. Attackers will always take the easier path. Unless there is a special contract with specific targets, they will focus on opportunities for a fast cashflow. Hard Truths
- 2. secgen.com NPN Some Numbers NPN Attack Categories The most common exploited threats were: NPN Considerations The largest category - Fraud - mostly comprises of such attacks against MNOs as grey route and SMS and Billing evasion. Data breach mainly was against subscribers and included IMSI, location data and interception of calls and SMS. In many of those events, cross-protocol attacks were performed either to facilitate or obfuscate the main attack. A minor part in terms of volume, the Operator data breach is still much relevant if you consider the possibility of network mapping and posterior Denial-of-service. Data Breach Subscriber DoS Fraud Operators received from 60 to over 100 thousand attacks daily. MNOs without a well configured firewall protection or not even STP and DEA protection, had an average of 70% of incoming attacks being successfully responded by the network. Due to nature of some attacks (like sweeping), this is expected. When protective measures are executed on the network correctly, successful attacks drop to less than 1%. Data Breach Subscriber DoS Fraud
- 3. secgen.com UK | Italy | Czech Republic | Brazil | Egypt India | South Korea | Japan | Malaysia | UAE Email: contact@secgen.com Website: www.secgen.com SecurityGen is a global company focused on cybersecurity for telecom security. We deliver a solid security foundation to drive secure telecom digital transformations and ensure safe and robust network operations. Our extensive product and service portfolio provides complete protection against existing and advanced telecom security threats. About SecurityGen Connect With Us Subscriber DoS is not evenly spread worldwide but is unfortunately detected in some countries in the region. If you assume part of the subscribers is IoT equipment used in utilities and security, DoS attacks are considered significant threats to the general public. Want a better understanding of how those threats affect your Operator and how to Identify, Detect and Protect the Network and Subscribers? Just reach out for a clarification session at contact@secgen.com, and we at SecurityGen will be happy to guide you through a completely new approach to securing your Network and Subscribers!