Upload File

utran operation system security - aalto ran operation support ranos • subnetwork manager •...

  • Home
  • Documents
  • UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers
21
Master's thesis seminar presentation Juha Utriainen 22.8.2004 1 UTRAN Operation System Security Juha Utriainen

Upload: hadiep

Post on 08-Mar-2018

220 views

Category:

Documents


3 download

Report

TRANSCRIPT

Page 1: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 1

UTRAN Operation System Security

Juha Utriainen

Page 2: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 2

Presentation contents

• Introduction to the context of the thesis study• Presentation of the operation systems security solution• Methods used in the thesis work• Results of the study

Page 3: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 3

Universal Terrestrial Radio Access NetworkUTRAN

RNS

RNSCore Network

Core Network

Node B

Node B

Node B

Node B

Node B

Node B

Node B

RANAG

RANAG

RNC

RNC

UE

Page 4: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 4

ERICSSON RAN Operation Support RANOS

• Subnetwork manager• Controls three different element types:

– Node B:s (NB)– Radio Network Controllers (RNC)– RAN Aggregators (RANAG)

• Basic functions– Configuration management– Software management– Product inventory– Fault management– Performance Monitoring

Page 5: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 5

RANOS Explorer

Page 6: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 6

Operation and Maintenance Infrastructure OMINF

Site LAN

Site LAN

Site LAN

Client network OMINF server network

Backupserver

ApplicationServer

OMINFFirewall

Field servicelaptop

O&MRouter

RNC

NodeB

NodeB

NetworkserverRANOS

RANwith ATM PVCs

Page 7: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 7

Security solution

Page 8: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 8

OMINF Security Solution

• Consists of software and security documentation• Splits the O&M network to five firewall protected security

zones • Activates secure protocols for O&M traffic (IIOP and SSH)• Introduces two new servers into OMINF network:

– Single Logon Server (SLS) authenticating and generating temporary online and standalone offline certificates for users

– Public Key Support Server (PKS) generating certificates for servers

• Authorization of user actions is done by Telecom Security Services daemon (TSS) usually running in RANOS server

• Documentation contains firewall configuration guide and RANOS Server Security Guide

Page 9: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 9

OMINF Security Zones

SunFire V880 Sun

SunFire V880 Sun

SunFire V880 Sun

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

SunStorEDGE T3

Sun

SunFire 15000

Sun

SunFire 15000

Sun

SunFire 15000

SunFire V480

Sun

SunFire V480

Sun

SunFire V480

Sun

Sun

SunBlade 150

Sun

SunBlade 150

SunBlade 2000

Sun20'02

SunRay 150

Sun

SunRay 150

Sun

SunRay 150

Sun

Clientzone

NMS zone

RANOSzone

RAN zoneApplicationserver zone

Page 10: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 10

Authentication and authorization

User Browser Bootstrap applet Ranos Explorer RANOS SLS DS

load RE

load bootstrap applet

username/password?

get userdata

load

credentials

Element manager

workwork

load element manager

load

credentials

workwork

authenticate

credentials generated by SLS from DS userdataSSL

SSLIOP

Page 11: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 11

Security evaluation methodology

Page 12: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 12

Security evaluation workflow

• Risk assessment• Policy and other documentation evaluation• Vulnerability scanning• Architectural evaluation• Penetration testing

Page 13: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 13

Risk assessment

• Manual and intellectual work that cannot be automated• Should be part of the security policy development process• Describes threats

– Information theft– Resource theft– Service delivery break– Other system dependent threats

• Profiles enemies and their motives– Professional intruders– Script kiddies

• Evaluates threat realization possibility and impact

Page 14: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 14

Security documentation

• Security policy– Contains risk analysis– Describes methods to minimize risk realization and impact– Should also contain security breach detection mechanisms and

recovery procedures

• Other documentation– Security architecture documentation– Configuration guides– User documentation for administrators and users

Page 15: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 15

Vulnerability scanning

• Automated evaluation of current security status• Basic part of the system protection• Hacker view of the system, using tools that hackers use• Seeks for known vulnerabilities

– Open ports– Old software revisions

• Some tools test if the vulnerability can be exploited• Gives detailed and readily applicable information• Open source tools, like Nessus, are available and highly

capable

Page 16: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 16

Vulnerability scan report example

Page 17: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 17

Architectural security evaluation

• Completes the vulnerability scanning • Seeks for security infrastructure design errors

– Covert channels– Missing policy enforcement elements

• Produces information that is not available for intruders• Manual work requiring security expertise

Page 18: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 18

Penetration testing

• Demonstrates system vulnerability• Used to scare stakeholders• May be done blindly without previous evaluation• Does not have security proofing power

Page 19: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 19

Results

Page 20: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 20

Results of the thesis study

• Security package blocks outside attacks effectively• Security documentation is incomplete• Patch delivery process is immature• Intrusion detection mechanism needs refinement• Few acute findings that are now patched

Page 21: UTRAN Operation System Security - Aalto RAN Operation Support RANOS • Subnetwork manager • Controls three different element types: – Node B:s (NB) – Radio Network Controllers

Master's thesis seminar presentation Juha Utriainen22.8.2004 21

Questions?


WP3 Community PARTICIPATORY – Subnetwork meeting 2arc.salleurl.edu/oikonet-platform/public/upload/source/20150323115525... · WP3 Community PARTICIPATORY – Subnetwork meeting

Identification of diagnostic subnetwork markers for cancer in

WP3 Community Participation : Subnetwork meeting 1arc.salleurl.edu/oikonet-platform/public/upload/... · A global multidisciplinary network on housing research and learning WP3 Community

Anurag Arnab, Philip H.S. Torr - University of Oxford › ~aarnab › projects › cvpr_2017 › ... · segmentation (blue). The following instance subnetwork (red) has a CRF defined

WP2 Housing Research Subnetwork meeting 2 - …arc.salleurl.edu/oikonet-platform/public/upload/source/... · Subnetwork meeting 2 Zoran Rant was a Slovene professor at Faculty of

Bethlehem Blaze - Indianapolisindylutheran.org/wp-content/uploads/1912.pdfLennox Ryne Barringer, son of Kris & Stephanie Barringer, was baptized on November 10; Pastor Ken Ranos presided

SUBNETTING IP ADDRESS (NETWORK LAYER) · Subnetting IP Address Alamat satu network menurut struktur baku dipecah menjadi beberapa subnetwork. Subnetting menciptakan sejumlah network

Model Instruction Plandata.cteunt.org/content/files/information-technology/...Determine the Subnet Mask. 7. Determine the IP address range (increment) of each subnetwork. 8. Determine

This webinar brought to you by the Relion product … · October 29, 2015 | Slide 116 IET600 –Communication Engineering Communication Subnetwork Editor ... (optional feature acc

C101: Introduction to Communications Protocols and Their ... · Provides Subnetwork Protocols Standards for Network Services. 34 . Plant Level . Learning Objective #1 At Plant Level,

CPSC 441: Computer Communicationsledvina/DHT/ucalgary/introduction.pdfinternetwork – interconnection of networks – also called an “internet” subnetwork – a constituent of

“Time of Flight” - Carnegie Mellon School of Computer Sciencemotionplanning/papers/sbp_papers/...“Time of Flight” Final Report Ranos William P. O'Connor December 9, 1998 EEL

EEG-Based Emotion Recognition Using Hierarchical Network ...€¦ · YANG et al.: EEG-BASED EMOTION RECOGNITION USING HIERARCHICAL NETWORK WITH SUBNETWORK NODES 409 Another leading

Spacecraft Onboard Interface Services—Subnetwork Device Discovery … · Recommendation for Space Data System Practices SPACECRAFT ONBOARD INTERFACE SERVICES— SUBNETWORK DEVICE

A c-Myc regulatory subnetwork from human transposable ...jordan.biology.gatech.edu/pubs/wang-molbiosys-2009.pdfA c-Myc regulatory subnetwork from human transposable element sequenceswz

A Partial Identi–cation Subnetwork Approach to Discrete ......2016/10/11  · A Partial Identi–cation Subnetwork Approach to Discrete Games in Large Networks: An Application to

ArcGIS Tools for Subnetwork Analysis of Dynamic Traffic ...proceedings.esri.com/library/userconf/proc14/papers/487_316.pdf · • Transportation models aim to predict how people use

Integrated Transport Management SubNetwork Controller · PDF fileTask 108 - Zoom the Map View ... Task 606 - Modify a Subnetwork Alias ... System Introduction 1 1 Contents

REAL-TIME NETWORK DECOMPOSITION AND SUBNETWORK INTERFACINGonlinepubs.trb.org/Onlinepubs/hrr/1971/366/366-002.pdf · partitioning must be judicious; network decomposition and subnetwork

WaveStar Integrated Transport Management Subnetwork … · Association released by Disable Management operation..... 1-16 Association released due to the NE database being busy

UTRAN Operation System Security · RNC NodeB NodeB Network RANOS server RAN with ATM PVCs. Master's thesis seminar presentation 22.8.2004 7 Juha Utriainen Security solution. ... Element

Federal Aviation Administration FAA AMHS Subnetwork Overview SP/2

Spacecraft Onboard Interface Services—Subnetwork Test …

Identifying disease-related subnetwork connectome

Nash Equilibrium Computation in Subnetwork Zero-Sum Games ...users.cecs.anu.edu.au/~u5549252/images/TAC2016-zero-sum-game.pdf · Nash Equilibrium Computation in Subnetwork Zero-Sum

Subnetwork State Functions Deï¬ne Dysregulated Subnetworks in Cancer

Meid-401-040315 Cm Plan Uni Ground Subnetwork 401

WP2 Housing Research Subnetwork meeting 1 - Salle-URLarc.salleurl.edu/.../source/20150325120032_WP2MEETING1PRESTONH… · A global multidisciplinary network on housing research and

Inferring Cancer Subnetwork Markers

Predictive Subnetwork Extraction with Structural Priors ...hamarneh/ecopy/miccai2016b.pdf · Predictive Subnetwork Extraction with Structural Priors for Infant Connectomes ... [4,6]

Network Map, Domain Explorer, and Subnetwork Explorer Icons€¦ · Appendix A Icons and Menus Displayed in Prime Optical Network Map, Domain Explorer, and Subnetwork Explorer Icons

Defining Networks with the OSI Model...Objectives Skills Concepts Objective Domain Description Objective Domain Number Understanding OSI Basics Defining the Communications Subnetwork

CPSC 441: Computer Communicationsledvina/DHT/ucalgary/introduction.pdf · internetwork – interconnection of networks – also called an “internet” subnetwork – a constituent

ATN Subnetwork Implementation: VDL Mode 2/Controller Pilot Data Link Communications (CPDLC)

Subnetwork Encapsulation and Adaptation Layer (SEAL) IETF 71 intarea session Fred L. Templin