Core Network Security Assessment

Core Network Security Assessment in context

The mobile core is where subscriber sessions, mobility and policy live. In 4G it is the EPC (MME, HSS, S/PGW); in 5G it is the Service-Based Architecture with AMF, SMF, UPF, AUSF, UDM and the NRF. Core exposure is the difference between a single-subscriber leak and a fleet-wide breach.

Signaling protocols carry the control-plane instructions that set up calls, register subscribers, hand over sessions and route SMS. SS7, Diameter, GTP-C and SIP are the four dominant families, and interconnect exposure of any of them is treated by GSMA FS.11 / FS.19 / FS.20 as a top-tier telecom risk.

To place Core Network Security Assessment in the wider telecom-security picture, review ACL, Telecom SIEM, Control Plane Security, Hardening, OAM Compromise and 5G SBA.

Related terms

• ACL
• Telecom SIEM
• Control Plane Security
• Hardening
• OAM Compromise
• 5G SBA
• Network Exposure Function (NEF)
• RSA

Related topic hubs

• Telecom Security Audit Structured MNO/MVNO security audit methodology.
• SS7 Firewall GSMA FS.11 category 1/2/3 SS7 message screening at the STP edge.
• SS7 Penetration Testing Interconnect pentest methodology for SS7 signaling.
• Signaling Firewall Unified SS7/Diameter/GTP/SMS signaling firewall framework.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.