Because of lacking secure strategy, there appear a lot of security leaks and increasing security threats in SS7 network. Based on the analysis of security leaks in message handling of the network and features of those threats, the paper proposes a defense method against the counterfeit signaling network management messages. After adding service discrimination in MTP3 layer message handling, this method can discriminate the counterfeit management messages and stop the messages form passing through signal nodes, and thus protect SS7 network. The simulation experiment establishes a signaling network model to simulate the message handling of the defenseless network and the defended network. Experiment results demonstrate that this method is valid and feasible.

A defense method based on improved MTP3 message discrimination in SS7 network

As the neural system of telecommunication network,the security problem of signaling system 7(SS7) becomes more serious.The main security threats of SS7 are listed in this paper,analyse the security flaw due to lack of authentication and how the attckers make use of the management messages of the MTP3 layer to attck the SS7 network,then propose security solution to protect MTP3 layer in SS7,using Key Exchange protocol and Authentication Header protocol,by which the security of SS7 network is enhanced.

Liu Cai-xia

Papers

Research on Secure Strategy Based on MTP3 Layer in SS7 Network