OAM (Operations, Administration, and Maintenance)

OAM in context

Security controls in telecom span signaling firewalls (SS7/Diameter/GTP screening at the network edge), transport encryption (IPsec, TLS, PRINS), identity and access on OSS/BSS, and monitoring at both the packet and log level. Controls are audited against GSMA FS.11/FS.19/FS.20/FS.36 and, in Europe, NIS2 sectoral rules.

Telecom threats range from opportunistic SMS phishing and SIM swap to nation-state grade location tracking and lawful-interception abuse. The common thread is that most attacks exploit the inherited trust model of legacy signaling. SS7 and Diameter were designed for a closed operator community that no longer exists.

To place OAM in the wider telecom-security picture, review SCADA, Cipher Downgrade Attack, Management Plane, SNMP, CLI Spoofing and HI2.

Related terms

• SCADA
• Cipher Downgrade Attack
• Management Plane
• SNMP
• CLI Spoofing
• HI2
• Mediation Device (Lawful Interception)
• SSH

Equipment

OSS, OAM and element managers (EMS, NMS)

• BSS
• Management Plane
• OAM Compromise
• OSS
• SNMP

Articles in the P1 mobile network security guide

Related topic hubs

• Diameter Security 4G/LTE Diameter threats across IPX/roaming and DEA defenses.
• Diameter Attacks S6a IDR/PUR/CLR abuse, subscriber tracking, LTE signaling attacks.
• Open RAN Security O-RAN xApp/rApp, E2/A1/O1 interfaces and RIC security.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.