As there has been some public demand for that, here we go with the final agenda
for the Troopers
“TelcoSecDay“. The
workshop is meant to provide a platform for research exchange between operators,
vendors and researchers. The slides of the talks will potentially be made
available as well.
8:30: Opening Remarks & Introduction
9:00: Sebastian Schrittwieser (SBA Research): Guess Who’s Texting You?
Evaluating the Security of Smartphone Messaging Applications.
10:00: Peter Schneider (NSN): How to secure an LTE-Network: Just applying the
3GPP security standards and that’s it?
10:45: Break
11:00: Kevin Redon (T-Labs): Weaponizing Femtocells – The Effect of Rogue
Devices on Mobile Telecommunications
11:45: Christian Kagerhuber (Group IT Security, Deutsche Telekom AG): Security
Compliance Audit Automation (SCA, TeleManagementForum TMF528)
12:30: Lunch
13:45: Philipp Langlois (P1 Security): Assault on the GRX (GPRS Roaming
eXchange) from the Telecom Core Network perspective, from 2.5G to LTE
Advanced.
15:00: Break
15:15: Harald Welte (sysmocom): Structural deficits in telecom security
16:30: Closing Remarks
17:00: End of workshop
19:00: Joint dinner (hosted by ERNW) in Heidelberg Altstadt for those
interested and/or staying for the main conference
Visual Voicemail (VVM) is a common feature of phone providers which allows
accessing the good old voice-mailbox through the phone’s visual interface. In
contrast to the classical voicemail approach, VVM allows intuitive navigation
through voice-messages without dealing with an automated voice which tells you
about message count and possible options. However, this implies the need of
actually loading the messages of missed calls on the phone. The VVM-app displays
missed calls and downloads corresponding messages which have been left by the
initial caller. The software comes with your iPhone and is not intended for
uninstallation. However, providers have to support it and will have to activate
it for supporting clients. This feature is available on iPhones since August
2009 and became available on BlackBerrys and few Nokia phones later. Android
doesn’t implement VVM in general. However some telecommunication providers offer
their own apps to add this feature. Since version 4.0, Android offers an
official Voicemail Provider API enabling better integration for the mobile OS.
Today I’m proudly releasing the first version of apnbf, a small python script
designed for enumerating valid APNs (Access Point Name) on a GTP-C speaking
device. It tries to establish a new PDP session with the endpoint via sending a
createPDPContextRequest. This request needs to include a valid APN, so one can
easily distinguish from a valid APN (which will be answered with a
createPDPContextResponse) and an invalid APN (which will be answered with an
error indication message). In addition the tool also parses the error indication
and displays the reason (which should be “Missing or unknown APN” in case of an
invalid APN).
So, after having a completely new release yesterday, we will stay with already
known but updated software today. You might have heard of gtp_scan before, which
is a small python script for scanning mainly 3G and 4G devices and detecting GTP
(GPRS Tunneling Protocol) enabled ports. As GTP is transported via UDP and we
all know, UDP scanning is a pain, the tool uses the GTP build-in echo mechanism
to detect GTP speaking ports. Since the last version I’ve implemented some new
features:
gtp_scan is a small python script that scans for GTP (GPRS tunneling protocol)
speaking hosts. To discover those hosts it uses the GTP build in PING mechanism,
it sends a GTP packet of the type ECHO_REQUEST and listens for an incoming GTP
ECHO_REPLY. Its capable of generating ECHO_REQUESTS for GTP version 1 and GTP
version 2. Also the script can scan for both, GTP-C and GTP-U (the control
channel and the user data channel), only the port differs here.
