Mobile Communication Security Solutions

All the elements of a communication network should be hardened so that it is resistant to various security attacks. Maintaining latest update levels of network elements and their software is an essential part of any OAM concept applied in a network domain.

1. Critical infrastructure elements must be identified and well protected; the necessity of redundant elements should be carefully evaluated, e.g. to still allow management during exceptional situations.
2. Information on the network’s internal structure, including the topology, the platform types, the distribution of functional elements, the capacities etc. or the customer data concerning location, service usage, usage pattern, account information etc. should be made available only to authorized parties and only to the extent that is actually required. The limited availability of this information reduces the knowledge about potential targets.
3. Intrusion Detection System (IDS) should be deployed in the network to detect, monitor and report security attacks, such as DoS and attacks that utilize system flaws, and any compromise of system security.
4. Fast response to security attacks and automatic recovery of security compromise must be provided to increase the probability of business continuity/continuous operation and to mitigate the effects of attacks.
5. The network should be easy to manage and realistic and realizable security policies must be developed.
6. Rapid couplings of the networks of different administrative domains must be secured (authentication, integrity, confidentiality, availability and anti-replay protection, etc.) against external attackers.
7. Mutual dependencies between the infrastructure security and new service to be created must be minimized.
8. Authenticity, confidentiality, integrity, anti-replay protections for network management signaling shall be provided.

Interoperability between the administrative domains shall not compromise the security of any involved domain