Protect your subscribers, services & revenue

Weaknesses of an unprotected network

The signaling networks that modern mobile communications are built on have a number of inherent weaknesses. As more independent players such as MVNOs and micro-operators access networks, it’s become easier for those with malicious intent to exploit those shortcomings.

While we have for many years been an important contributor in responsibly identifying these vulnerabilities to the wider industry, some have been identified and exploited on a global scale for attacks on operators and individual subscribers. These exposed weaknesses have opened the door to:

• Advanced fraud (including SMS fraud)
• Hijacking of subscriber communications 
• Subscriber location tracking 
• Tapping of calls and messages 
• Tampering with profiles to use services free of charge 
• Partial or complete service disruption 

A growing risk

All of these threats rely to a large extent on insufficient filtering of signaling messages, meaning that non-authorized nodes can request subscriber information and update subscriber profiles in situations where this is not warranted.

This applies both to traditional SS7 signaling as well as Diameter signaling that’s being deployed to support LTE-based services. Unfortunately, the attack surface keeps growing as LTE roaming increases. 

Stay secure

Our pioneering work in signaling security research means that the Signaling Firewall we’ve built is one of the most secure available. Our Signaling Firewall protects your network against attacks over SS7 as well as Diameter by inspecting traffic and tracking sessions in real-time. Illicit messages and patterns can be blocked immediately, ensuring that third parties are unable to access subscriber information or modify subscriber profiles. With our intuitive GUI you can simply configure a set of rules and leave our SS7 diameter firewall to intelligently filter traffic and block specific attacks.