Sao Paulo – May 12, 2010 Conference APWG CECOS IV

1. 3G Dialers
A New Demon with an Old Scan
Sao Paulo – May 12, 2010
Telefonica Empresas Spain
Leonardo Amor

2. 01
New solutions – Old problems
Telefónica Empresas Spain 2
Security Services

3. Most used 3G devices to get online
Telefónica Empresas Spain 3
Security Services

4. Old School RTB devices
Telefónica Empresas Spain 4
Security Services

5. New Solutions – Old problems
 HSDPA 3G USB Tech specs:  V.90 Modem PCI Technical details:
 Up to 7.2 / 21 Mbps  Up to 56 Kbps
 USB 2.0  PCI
 Extra bonus:
 Extra bonus: • Beep, beep, beep melody
• Can warns your hands in a cold day
Both MODEMS
Telefónica Empresas Spain 5
Security Services

6. 02
Landscape
Telefónica Empresas Spain 6
Security Services

7. New Mobile Devices
First 3G Routers (lack of WPA security)
Telefónica Empresas Spain 7
Security Services

8. Heterogenous OS
Telefónica Empresas Spain 8
Security Services

9. Internet access
Source: ITU World Telecommunication/ICT Indicators Database.
Telefónica Empresas Spain 9
Security Services

10. Mobile users
Source: ITU World Telecommunication/ICT Indicators Database.
Telefónica Empresas Spain 10
Security Services

11. 03
The 3G abuse story
Telefónica Empresas Spain 11
Security Services

12. Monitoring VS Inspection
We DO NOT inspect the content
Telefónica Empresas Spain 12
Security Services

13. Monitoring VS Inspection
We DO NOT inspect the content
Just monitor the
traffic flows .
Telefónica Empresas Spain 13
Security Services

14. Alarms
2.009
Start getting alarms for traffic to
suspicius Premium numbers from
3G devices.
This monitor sensor was originally
setup with RTB on mind or fix
phone lines.
› 800 234 +++
› 645 +++ 324
› +52 244 962 +++
› 423 234 +++
Telefónica Empresas Spain 14
Security Services

15. Sources
Monitor Sensors
Our Customers help desk
Abuse Complains
Third parties services
• IP reputation
Telefónica Empresas Spain 15
Security Services

16. Abuse Group
What kind of Abuses receive Telefonica?
• Most of the time propetary formats, later some ARF and not IODEF at all
• Please, send your complains, use an standard format.
Telefónica Empresas Spain 16
Security Services

17. Modem 3G problems -- User Experience
Telefónica Empresas Spain 17
Security Services

18. Countermeasures
Countermeasures
Telefónica Empresas Spain 18
Security Services

19. 3G User Experience
Telefónica Empresas Spain 19
Security Services

20. 04
The Proposal
Telefónica Empresas Spain 20
Security Services

21. Creation of a new Working Group
To determinate major security risk related to each Mobile devices
• Phishing , Malware, Fraud, Identity Thief, brand abuse, etc..
Alliances and Collaboration
Telefónica Empresas Spain 21
Security Services

22. 05
Conclusions
Telefónica Empresas Spain 22
Security Services

23. If Internet would be a Today
river …..
Telefónica Empresas Spain 23
Security Services

24. APWG is doing a good work …
• Let’s help the industry to do not fail in old
problems
• Come on, together we can recover the river!
Telefónica Empresas Spain 24
Security Services

25. Tomorrow
Telefónica Empresas Spain 25
Security Services

26. If Internet would be a river, Operators will distribute
water
Actual distribution Optimal Value Services
Telefónica Empresas Spain 26
Security Services

27. Security from the network
The network as an active security element
Clean internet access Clean VPN access Clean users
SECURITY FOR SECURITY FOR SECURITY FOR LAN
ACCESING PUBLIC VIRTUAL PRIVATE & ENDPOINT
NETWORKS NETWORKS
CLEAN CLEAN CLEAN
PIPES CLOUD USERS
Global security & point 2 point
Telefónica Empresas Spain 27
Security Services