TelcoSecDay on Insinuator.net - Bold Statements

TelcoSecDay 2020 CFP is open

Mon, 23 Sep 2019 00:00:00 +0000

We are back again with another TelcoSecDay 2020 (TSD20) which is going to happen on March 16th, 2020 as an additional event to TROOPERS. This year, it is going to be on Monday of the TROOPERS week. We are delighted to inform that the event is happening for the 9th year in a row. The CFP is open now. If you have an interesting topic related to the field of Telco Security, please make a submission. The deadline is November 17, 2019. The final notification for TSD submission is December 20, 2019.

TelcoSecDay 2019 – First talks preview

Tue, 29 Jan 2019 00:00:00 +0000

This year we had some excellent submissions for TelcoSecDay. Here are the first four confirmed speakers who are going to talk about the below mentioned topics:

1. Telecom protocols revisited – Not just a signalling problem – by Fredrik Söderlund

A look at the design of the currently deployed signalling protocols for core networks, both SS7 and Diameter (legacy and LTE). Peculiar quirks and how the design has lead to the industry sometimes failing to adhere to its own standards.

TelcoSecDay 2018 – Talks Part2

Mon, 26 Feb 2018 00:00:00 +0000

We have the next set of selected talks being announced here. I am super excited about the variety of applications we had this year. Here are some of the talks we will have.

Title: From LoRa technology to deployment within Orange affiliates

Speakers: Franck L’Hereec and Albert Nguyen

Just deployed, the LoRa technology has already passed into the hands of hackers who have analyzed the LoRaWAN protocol as well as the objects and gateways that implement it. At Orange, Orange Labs’ security experts have therefore looked into those issues, first to understand it better, and also ensure the network’s deployment in optimal security conditions. Demonstration via the example of the treatment of the security of an innovation project by Orange. During the presentation we will present :

TelcoSecDay 2018 – CFP and First talks

Thu, 08 Feb 2018 00:00:00 +0000

We have a short update from the TelcoSecDay 2018 Agenda. But before that, a short reminder. The CFP for TelcoSecDay 2018 is still open. If you are into telco research, and if you have something interesting to talk, please make a submission here. The deadline is 17th February 2018.

Here are the first two confirmed speakers who are going to talk about the below mentioned topics:

Title: Data Security for 4G Interconnection and 5G Interconnection Risk Areas

TelcoSecDay 2017 – 2nd Round of Talks

Tue, 03 Jan 2017 00:00:00 +0000

Hello and a Happy new Year!

There are only two and a half months left, so I’d like to publish the next two talks for TelcoSecDay 2017, taking place at 21st of March in Heidelberg. Both talks are about the security of an upcoming technology which importance will raise in near future: 5G Networks.

One of the talks will be from an attacker’s point of view, highlighting weaknesses of 2G/3G/4G networks and what we have to fix in 5G, and the other one will give us insights into current developments of the 3GPP standardization group.

TelcoSecDay 2017 – First Talks Published

Thu, 08 Dec 2016 00:00:00 +0000

Even if the CFP for TelcoSecDay 2017 is officially closed, I am still getting mails in. First of all: thank you for all your great feedback! As the TelcoSecDay is a complimentary and non-public event with highly specialized topics, it only works by sharing knowledge with each other. But please keep in mind that the speaker-slots are limited and I have to make a decision at some point of time.
Anyhow, I am looking forward for a great event and I am proud to publish the first accepted talks:

TelcoSecDay 2017 – CFP Opens

Sat, 29 Oct 2016 00:00:00 +0000

For the 6th year in a row, the next TelcoSecDay will take place in 2017 on March 21th. Again, it will be held one day before Troopers IT-Security Conference as an invitation-only event. For those of you who don’t know the TSD, it is organized by ERNW and is aimed at bringing researchers and people from the telecommunication industry together to discuss about current security weaknesses, challenges and strategies. To do so, various topics will be presented during the talks and there will surely be enough time to follow-up in extensive discussions.
To give you an idea, here’s the TSD 2016 agenda, and here’s the one of 2015.

TSD 2016 – Follow Up

Thu, 07 Apr 2016 00:00:00 +0000

Thanks again for all the great talks and fruitful discussions @TSD 2016! I hope everybody had a safe trip home and enjoyed Troopers as we did. In the meantime I contacted all speakers to talk about publication of their slidesets. Some of them agreed (or already published them on their own) so I’d like to share these with you:

Alexandre De Oliveira – Assaulting IPX Diameter roaming network
Siddharth Rao – The known unknowns of SS7 and beyond.
Joao Collier de Mendonca – “rucki zucki” scanning tool
Harald Welte – Open Source Network Elements for Security Analysis of Mobile Networks
Ravi & Altaf Shaik – Don’t connect to my 4G base station: investigating info leaks in 4G basebands

TelcoSecDay 2016 – Final Agenda and more

Thu, 10 Mar 2016 00:00:00 +0000

Only a few days left until Troopers! I’d like to use this chance to publish the final agenda of TelcoSecDay 2016. We will start around 8:30am and will finish at about 6:15pm. After this, we will have a shared dinner in the historic center of Heidelberg. The exact location will be announced during the TSD.

8:30: Opening Remarks
9:00: David Batanero – New Age Phreaking: Magic tricks for wholesale fraud
9:45: Adrian Dabrowski – Towards Carrier Based IMSI Catcher Detection
10:30: Break
11:00: Alexandre De Oliveira – Assaulting IPX Diameter roaming networks
11:45: Rao Siddharth – The known and unknowns of SS7 and beyond
12:30: Joao Collier de Mendonca – “rucki zucki” scanning tool
13:00: Lunch
14:00: Harald Welte – Open Source Network Elements for Security Analysis of Mobile Networks
14:45: Rahul Sasi – Advance APT Attribution for researchers
15:30: Break
16:00: Ravi and Altaf Shaik – Don’t connect to my 4G base station: investigating info leaks in 4G basebands
16:45: Talk from some guy with interest in telco sec
17:15: Break
17:30: Dieter Spaar – Observations on mobile communication platforms

TelcoSecDay 2016 – Second Round of Talks

Wed, 03 Feb 2016 00:00:00 +0000

I am very happy to announce the second round of talks for the TelcoSecDay 2016. As mentioned in my previous post it will take place on March 15th. All invitations should be out by now; if you think you can contribute to the group and you are willing to join us – please let me know (hschmidt@ernw.de).

Still, not all talks are confirmed but the newly published talks will provide an idea about TSD 2016 and its discussions.

TelcoSecDay – First Round of Talks

Sat, 16 Jan 2016 00:00:00 +0000

Dear all,
This year the TelcoSecDay will take place on March 15th. For those of you who does not know about: the TelcoSecDay it is a sub-event of Troopers bringing together researchers, vendors and practitioners from the telecommunication / mobile security field.

The event is celebrating its 5th anniversary now, that’s why I’d like to say “thank you” to everybody taking part at this very great discussion round in the last few years. We always had a lot of very good feedback and interesting discussions and the increasing participation list of operators from year to year says (almost) everything!

Final Agenda of Troopers15 TelcoSecDay

Tue, 10 Mar 2015 00:00:00 +0000

Admitted, we’re a bit late this time, but here we go with the agenda of this year’s TelcoSecDay.

Given the high number of quality contributions overall there’s more talks than in the previous years and we’ll hence start more early (and finish later 🙂 ), so please plan accordingly.
This is the agenda, details for the invididual talks can be found in the respective links:

8:30-9:00 Opening & Intro
9:00-9:45 Luca Bruno: Through the Looking-Glass, and What Eve Found There
9:45-10:30 Dieter Spaar: How to Assess M2M Communication from an Attacker’s Perspective
Break
11:00-11:45 Tobias Engel: Securing the SS7 Interconnect
11:45-12:30 Ravishankar Borgaonkar: TelcoSecurity Mirage: 1G to 5G
12:30-13:00 Hendrik Schmidt: Security Aspects of VoLTE
Lunch
14:00-14:45 Rob Kuiters: On her majesty’s secret service – GRX and a Spy Agency
14:45-15:30 “Watching the Watchers”
Break
16:00-16:45 Markus Vervier: Borrowing Mobile Network Identities – Just Because We Can
16:45-17:15 Shahar Tal: I hunt TR-069 admins – CWMP Insecurity
Refreshment
17:30-18:00 Sébastien Roche (Orange): tba

Another Talk Added to Troopers15 TelcoSecDay

Sat, 14 Feb 2015 00:00:00 +0000

We have pretty much finalized the agenda for the Troopers TelcoSecDay and here’s another cool talk (the others can be found here, here and here):

Rob Kuiters: On her majesty’s secret service – GRX and a Spy Agency

Synopsis: In 2013 the GPRS Roaming eXchange (GRX) was in mainstream media as part of the high profile Edward Snowden revelations. The leaked documents indicated that the UK government’s intelligence organisation, Government Communications Headquarters’ (GCHQ) hacked the Belgian GRX provider, Belgacom International Carrier Services (BICS). They did this by targeting the GRX provider’s employees with the ultimate aim of gaining access to Belgacom’s Core GRX routers. Allegedly, GCHQ hacked the GRX routers in order to carry out man-in-the middle “traffic sniffing” attacks against mobile users who are roaming with smartphones or other devices capable of handling data.

Troopers TelcoSecDay – Next Talks (II)

Thu, 12 Feb 2015 00:00:00 +0000

Hi,

in addition to those recently announced and these, we’ve identified three more suitable talks for the TelcoSecDay .

These are:

Hendrik Schmidt: Security Aspects of VoLTE

Synopsis: VoLTE is on its rise in mobile telecommunications. The service is provided by the IP Multimedia Subsystem (IMS) which consists of a couple of components. All those components offer new and, from an attacker’s perspective, interesting interfaces. This talk evaluates the most interesting interfaces and demonstrates attack vectors an attacker could abuse. This covers attacks from customer access, Internet VoIP services and roaming exchange.

Troopers TelcoSecDay – Next Talks

Tue, 10 Feb 2015 00:00:00 +0000

Hi,

in addition to those recently announced we’ve identified two more suitable talks for the TelcoSecDay 😉
These are

Ravishankar Borgaonkar – TelcoSecurity Mirage: 1G to 5G

Synopsis: The evolution of the mobile networking technology from 1G to 5G is driving the needs of our modern Digital Society. In this talk, we visit the security pillars of these technologies and discuss if 5G can strengthen them or not from an end-users perspective. In particular, we try to fill up security requirements for 5G networks based on the ongoing design direction.

Troopers 15 TelcoSecDay – First Talks

Sat, 07 Feb 2015 00:00:00 +0000

At Troopers15 there will be another TelcoSecDay, like in the years before (2014, 2013, 2012). Here’s the first three talks (of overall 5-6):

Luca Bruno: Through the Looking-Glass, and What Eve Found There

Synopsis: Traditionally, network operators have provided some kind of public read-only access to their current view of the BGP routing table, by the means of a “looking glass”.
In this talk we inspect looking glass instances from a security point of view, showing many shortcomings and flaws which could let a malicious entity take control of critical devices connected to them. In particular, we will highlight how easy it is for a low-skilled attacker to gain access to core routers within multiple ISP infrastructures.

Preliminary Agenda for Troopers 2014 Telco Sec Day

Tue, 04 Feb 2014 00:00:00 +0000

Given we’ve received a number of inquiries as for the agenda of this year’s TelcoSecDay here’s a first preliminary agenda. To get an idea of the event’s character you might have a look at the agenda of the 2012 edition or the 2013 edition. Pls note that there might be changes/additions to the following outline as we’re currently discussing potential contributions with two European operators. Here we go, for today:

9:00: Opening Remarks & Introduction
9:15: Ravi Borgaonkor – Evolution of SIM Card Security
10:15: Break
10:45: Adrian Dabrowski
11:45: Collin Mulliner – PatchDroid – Third Party Security Patches for Android
12:30: Lunch
13:45: Philippe Langlois
14:45: Break
15:15: Haya Shulman – The Illusion of Challenge-Response Authentication
16:00: Christian Sielaff & Daniel Hauenstein – Breaking Network Monitoring Tools Used in Telco Space
16:30: Closing Remarks
19:00: Joint dinner (hosted by ERNW) in Heidelberg Altstadt for those interested and/or staying for the main conference

Presentations from TR13 TelcoSecDay Online

Sun, 28 Apr 2013 00:00:00 +0000

Hi,

just to let you know that all presentations from this year’s TelcoSecDay are published in the interim. (Harald [Welte] couldn’t participate as in the morning of that day FRA airport was closed on short notice).

Next year’s TSD will happen on 03/18/2014.

Take care,

Enno

TROOPERS13: TelcoSecDay, IPv6 Security Summit and some more Updates

Sat, 02 Feb 2013 00:00:00 +0000

Here’s a number of updates as for upcoming TROOPERS13.

The preliminary agenda for this year’s TelcoSecDay can be found here.

Here‘s the (again: preliminary) agenda of the IPv6 Security Summit.

Last, but not least we’ve included another four talks in the main conference:

======

Sergey Bratus & Travis Goodspeed: You wouldn’t share a syringe. Would you share a USB port?

Synopsis: Previous work has shown that a USB port left unattended may be subject to pwnage via insertion of a device that types into your command shell (e.g. here). Impressive attack payloads have been delivered over USB to jailbreak PS3 and a “smart TV“. Not surprisingly, USB stacks started incorporating defenses such as device registration, USB firewalls, and other protective kits. But do these protective measures go far enough to let you safely plug in a strange thumb drive into your laptop’s USB port?

Slides from Troopers Telco Sec Day Online

Mon, 14 May 2012 00:00:00 +0000

As I mentioned the Telco Sec Day in the last post… for those who missed Flo’s announcement: in the interim all slides of the Telco Sec Day are available online here.

Obviously, given I initiated the event, I’m biased 😉 but to me it provided great insight from both the talks and the networking with other guys from the telco security field, and it did actually what it was meant for: fostering the exchange between different players in that space, for the sake of sustainably improving its’ overall security posture.