This course provides an overview of the security of 4G (LTE) networks and focuses on how to test and secure them. By the end of the course, learners will understand LTE deployments, potential attack vectors, and methods to ensure network security. The course covers technical details, LTE interfaces, authentication processes, testing challenges, and protective controls. The teaching method includes a lecture-style presentation with a duration of 52 minutes. The intended audience for this course includes security professionals, network engineers, and individuals interested in understanding the security implications of LTE technology.
Overview
Syllabus
Introduction
Agenda
Background
Technical Details
Environment Overview
LTE Interfaces
Legitimate UE
Privileged Access
Challenges with Testing
No Authentication
Authentication Process
GTP
Tunnel IDs
Test Methods
The Bad Picture
Implementing the Environment
Gateways
Communications
Control
Architecture
Conclusions
Three Protective Controls
Moving to 12T
IPSec
Testing
Summary
Taught by
44CON Information Security Conference
