SS7 for INFOSEC

Presented at DerbyCon 9.0 Finish Line (2019), Sept. 8, 2019, noon (45 minutes)

SS7 is to the PSTN what BGP is for the Internet. In this presentation Paul will explain the fundamentals of the SS7 protocol and telecommunications architecture. An overview of how SS7 is utilized by large enterprises, mobile networks and service providers will be discussed. Security issues with the SS7 protocol will be covered with real world examples of how a service provider network may be targeted to gain access to the SS7 network.

Presenters:

• Paul Coggin
  Paul Coggin works as a Cyber SME at nou Systems, Inc. His expertise includes tactical, service provider, and ICS/SCADA network infrastructure attacks, and defenses, as well as large complex network design and implementation. His experience includes leading network architecture reviews, vulnerability analysis, and penetration testing engagements for critical infrastructure and tactical networks. Pauls’ experience includes teaching networking, hacking and forensics courses internationally. He has a BS in Math/Computer Science, a MS in Information Assurance and Security and a MS in Computer Information Systems. In addition he holds a number of network and security certifications.

Links:

• https://infocon.org/cons/DerbyCon/DerbyCon 9 2019/SS7 for INFOSEC Paul Coggin.mp4
• https://infocon.org/cons/DerbyCon/DerbyCon 9 2019/SS7 for INFOSEC Paul Coggin.eng.srt (subtitles)
• https://www.youtube.com/watch?v=cAQ-uAEnd-M

Similar Presentations:

• DeepSec 2018 „I like to mov &6974,%bx“ / SS7 for INFOSEC
• DEF CON China 1.0 (2019) / Attacks you can't combat: vulnerabilities of most robust mobile operators
• Black Hat USA 2017 / SS7 Attacker Heaven Turns into Riot: How to Make Nation-State and Intelligence Attackers' Lives Much Harder on Mobile Networks