ESUG15: SS7 Update

ZWEIDENKER GmbH
ZWEIDENKER GmbHZWEIDENKER GmbH
SS7
Signalling System No. 7
onwaves
sysmocom
2denker
Stack
-- Generated by Asnp, the pretty-printer of France Telecom R&D (http://asn1.elibel.tm.fr/asnp/)
Remote-Operations-Generic-ROS-PDUs {joint-iso-itu-t remote-operations(4)
generic-ROS-PDUs(6) version1(0)}
DEFINITIONS IMPLICIT TAGS
::=
BEGIN
-- exports everything
IMPORTS
OPERATION, ERROR
FROM Remote-Operations-Information-Objects {joint-iso-itu-t
remote-operations(4) informationObjects(5) version1(0)};
ROS{InvokeId:InvokeIdSet, OPERATION:Invokable, OPERATION:Returnable} ::=
CHOICE {
invoke [1] Invoke{{InvokeIdSet}, {Invokable}},
returnResult [2] ReturnResult{{Returnable}},
returnError [3] ReturnError{{Errors {{Returnable}}}},
reject [4] Reject
}
…
ASN.1 Grammar
ASN.1
• 384 production rules
• all rules without xml and constraints
• done with petit parser
• generates a runtime model of a parser
TCAP
Transaction Capability Application Part
• session handling called Dialogue/Transaction
• state machine for session status
• RPC-like mechanism (ASN.1 grammar)
HLR
Home Location Register
• Registry of mobile customers
• Needed to „log into“ a GSM network (your SIM
card information is stored here)
AuC
Authentication center
• authenticates a SIM card
• holds secret key for a customer
• authenticates cryptographically
HLR/AuC
• pharo 3
• garage database driver
• deployed in a real GSM network
1 of 8

Recommended

Protecting C++ by
Protecting C++Protecting C++
Protecting C++Pavel Filonov
41 views34 slides
Crash Fast & Furious by
Crash Fast & FuriousCrash Fast & Furious
Crash Fast & FuriousPierre-Yves Ricau
1.3K views52 slides
Scope and closures by
Scope and closuresScope and closures
Scope and closuresMonu Chaudhary
123 views36 slides
Seh based attack by
Seh based attackSeh based attack
Seh based attackMihir Shah
521 views35 slides
The Ring programming language version 1.5.2 book - Part 75 of 181 by
The Ring programming language version 1.5.2 book - Part 75 of 181The Ring programming language version 1.5.2 book - Part 75 of 181
The Ring programming language version 1.5.2 book - Part 75 of 181Mahmoud Samir Fayed
12 views10 slides
Windows debugging sisimon by
Windows debugging   sisimonWindows debugging   sisimon
Windows debugging sisimonSisimon Soman
578 views20 slides

More Related Content

What's hot

Agile Iphone Development by
Agile Iphone DevelopmentAgile Iphone Development
Agile Iphone DevelopmentGiordano Scalzo
3.1K views76 slides
Miblagh (2) by
Miblagh (2)Miblagh (2)
Miblagh (2)Muhammadi Iblagh
59 views1 slide
6 new ES6 features by
6 new ES6 features6 new ES6 features
6 new ES6 featuresKyle Dorman
379 views19 slides
Ethereum virtual machine for Developers Part 1 by
Ethereum virtual machine for Developers Part 1Ethereum virtual machine for Developers Part 1
Ethereum virtual machine for Developers Part 1ArcBlock
208 views25 slides
[FT-11][suhorng] “Poor Man's” Undergraduate Compilers by
[FT-11][suhorng] “Poor Man's” Undergraduate Compilers[FT-11][suhorng] “Poor Man's” Undergraduate Compilers
[FT-11][suhorng] “Poor Man's” Undergraduate CompilersFunctional Thursday
374 views20 slides
02 - Introduction to the cdecl ABI and the x86 stack by
02 - Introduction to the cdecl ABI and the x86 stack02 - Introduction to the cdecl ABI and the x86 stack
02 - Introduction to the cdecl ABI and the x86 stackAlexandre Moneger
938 views18 slides

What's hot(19)

6 new ES6 features by Kyle Dorman
6 new ES6 features6 new ES6 features
6 new ES6 features
Kyle Dorman379 views
Ethereum virtual machine for Developers Part 1 by ArcBlock
Ethereum virtual machine for Developers Part 1Ethereum virtual machine for Developers Part 1
Ethereum virtual machine for Developers Part 1
ArcBlock208 views
[FT-11][suhorng] “Poor Man's” Undergraduate Compilers by Functional Thursday
[FT-11][suhorng] “Poor Man's” Undergraduate Compilers[FT-11][suhorng] “Poor Man's” Undergraduate Compilers
[FT-11][suhorng] “Poor Man's” Undergraduate Compilers
02 - Introduction to the cdecl ABI and the x86 stack by Alexandre Moneger
02 - Introduction to the cdecl ABI and the x86 stack02 - Introduction to the cdecl ABI and the x86 stack
02 - Introduction to the cdecl ABI and the x86 stack
Alexandre Moneger938 views
Report for weather pi by Asutosh Hota
Report for weather piReport for weather pi
Report for weather pi
Asutosh Hota116 views
XpUg Coding Dojo: KataYahtzee in Ocp way by Giordano Scalzo
XpUg Coding Dojo: KataYahtzee in Ocp wayXpUg Coding Dojo: KataYahtzee in Ocp way
XpUg Coding Dojo: KataYahtzee in Ocp way
Giordano Scalzo5.5K views
various tricks for remote linux exploits  by Seok-Ha Lee (wh1ant) by CODE BLUE
various tricks for remote linux exploits  by Seok-Ha Lee (wh1ant)various tricks for remote linux exploits  by Seok-Ha Lee (wh1ant)
various tricks for remote linux exploits  by Seok-Ha Lee (wh1ant)
CODE BLUE3.8K views
Rust LDN 24 7 19 Oxidising the Command Line by Matt Provost
Rust LDN 24 7 19 Oxidising the Command LineRust LDN 24 7 19 Oxidising the Command Line
Rust LDN 24 7 19 Oxidising the Command Line
Matt Provost165 views
Devirtualizing FinSpy by jduart
Devirtualizing FinSpyDevirtualizing FinSpy
Devirtualizing FinSpy
jduart610 views
ITGM #9 - Коварный CodeType, или от segfault'а к работающему коду by delimitry
ITGM #9 - Коварный CodeType, или от segfault'а к работающему кодуITGM #9 - Коварный CodeType, или от segfault'а к работающему коду
ITGM #9 - Коварный CodeType, или от segfault'а к работающему коду
delimitry221 views
Exercice.docx by imane26
Exercice.docxExercice.docx
Exercice.docx
imane268 views
Network lab manual by Prabhu D
Network lab manualNetwork lab manual
Network lab manual
Prabhu D35.5K views
"A 1,500 line (!!) switch statement powers your Python!" - Allison Kaptur, !!... by akaptur
"A 1,500 line (!!) switch statement powers your Python!" - Allison Kaptur, !!..."A 1,500 line (!!) switch statement powers your Python!" - Allison Kaptur, !!...
"A 1,500 line (!!) switch statement powers your Python!" - Allison Kaptur, !!...
akaptur3K views

Similar to ESUG15: SS7 Update

2.1 ### uVision Project, (C) Keil Software .docx by
2.1   ### uVision Project, (C) Keil Software    .docx2.1   ### uVision Project, (C) Keil Software    .docx
2.1 ### uVision Project, (C) Keil Software .docxtarifarmarie
4 views52 slides
PVS-Studio 5.00, a solution for developers of modern resource-intensive appl... by
PVS-Studio 5.00, a solution for developers of modern resource-intensive appl...PVS-Studio 5.00, a solution for developers of modern resource-intensive appl...
PVS-Studio 5.00, a solution for developers of modern resource-intensive appl...Andrey Karpov
931 views39 slides
Automated reduction of attack surface using call graph enumeration by
Automated reduction of attack surface using call graph enumerationAutomated reduction of attack surface using call graph enumeration
Automated reduction of attack surface using call graph enumerationRuo Ando
273 views10 slides
Advanced Debugging Using Java Bytecodes by
Advanced Debugging Using Java BytecodesAdvanced Debugging Using Java Bytecodes
Advanced Debugging Using Java BytecodesGanesh Samarthyam
8.4K views60 slides
Post Exploitation Bliss: Loading Meterpreter on a Factory iPhone, Black Hat U... by
Post Exploitation Bliss: Loading Meterpreter on a Factory iPhone, Black Hat U...Post Exploitation Bliss: Loading Meterpreter on a Factory iPhone, Black Hat U...
Post Exploitation Bliss: Loading Meterpreter on a Factory iPhone, Black Hat U...Vincenzo Iozzo
714 views73 slides
What Have Syscalls Done for you Lately? by
What Have Syscalls Done for you Lately?What Have Syscalls Done for you Lately?
What Have Syscalls Done for you Lately?Docker, Inc.
379 views33 slides

Similar to ESUG15: SS7 Update(20)

2.1 ### uVision Project, (C) Keil Software .docx by tarifarmarie
2.1   ### uVision Project, (C) Keil Software    .docx2.1   ### uVision Project, (C) Keil Software    .docx
2.1 ### uVision Project, (C) Keil Software .docx
tarifarmarie4 views
PVS-Studio 5.00, a solution for developers of modern resource-intensive appl... by Andrey Karpov
PVS-Studio 5.00, a solution for developers of modern resource-intensive appl...PVS-Studio 5.00, a solution for developers of modern resource-intensive appl...
PVS-Studio 5.00, a solution for developers of modern resource-intensive appl...
Andrey Karpov931 views
Automated reduction of attack surface using call graph enumeration by Ruo Ando
Automated reduction of attack surface using call graph enumerationAutomated reduction of attack surface using call graph enumeration
Automated reduction of attack surface using call graph enumeration
Ruo Ando273 views
Advanced Debugging Using Java Bytecodes by Ganesh Samarthyam
Advanced Debugging Using Java BytecodesAdvanced Debugging Using Java Bytecodes
Advanced Debugging Using Java Bytecodes
Ganesh Samarthyam8.4K views
Post Exploitation Bliss: Loading Meterpreter on a Factory iPhone, Black Hat U... by Vincenzo Iozzo
Post Exploitation Bliss: Loading Meterpreter on a Factory iPhone, Black Hat U...Post Exploitation Bliss: Loading Meterpreter on a Factory iPhone, Black Hat U...
Post Exploitation Bliss: Loading Meterpreter on a Factory iPhone, Black Hat U...
Vincenzo Iozzo714 views
What Have Syscalls Done for you Lately? by Docker, Inc.
What Have Syscalls Done for you Lately?What Have Syscalls Done for you Lately?
What Have Syscalls Done for you Lately?
Docker, Inc.379 views
[ROOTCON13] Pilot Study on Semi-Automated Patch Diffing by Applying Machine-L... by Asuka Nakajima
[ROOTCON13] Pilot Study on Semi-Automated Patch Diffing by Applying Machine-L...[ROOTCON13] Pilot Study on Semi-Automated Patch Diffing by Applying Machine-L...
[ROOTCON13] Pilot Study on Semi-Automated Patch Diffing by Applying Machine-L...
Asuka Nakajima96 views
エンタープライズ・クラウドと 並列・分散・非同期処理 by maruyama097
エンタープライズ・クラウドと 並列・分散・非同期処理エンタープライズ・クラウドと 並列・分散・非同期処理
エンタープライズ・クラウドと 並列・分散・非同期処理
maruyama09711.3K views
How to add an optimization for C# to RyuJIT by Egor Bogatov
How to add an optimization for C# to RyuJITHow to add an optimization for C# to RyuJIT
How to add an optimization for C# to RyuJIT
Egor Bogatov2.7K views
Linux seccomp(2) vs OpenBSD pledge(2) by Giovanni Bechis
Linux seccomp(2) vs OpenBSD pledge(2)Linux seccomp(2) vs OpenBSD pledge(2)
Linux seccomp(2) vs OpenBSD pledge(2)
Giovanni Bechis3.5K views
Introduction To Erlang Final by SinarShebl
Introduction To Erlang   FinalIntroduction To Erlang   Final
Introduction To Erlang Final
SinarShebl1.8K views
Alexander Reelsen - Seccomp for Developers by DevDay Dresden
Alexander Reelsen - Seccomp for DevelopersAlexander Reelsen - Seccomp for Developers
Alexander Reelsen - Seccomp for Developers
DevDay Dresden116 views
CorePy High-Productivity CellB.E. Programming by Slide_N
CorePy High-Productivity CellB.E. ProgrammingCorePy High-Productivity CellB.E. Programming
CorePy High-Productivity CellB.E. Programming
Slide_N128 views
Lost in Translation: When Industrial Protocol Translation goes Wrong [CONFide... by Marco Balduzzi
Lost in Translation: When Industrial Protocol Translation goes Wrong [CONFide...Lost in Translation: When Industrial Protocol Translation goes Wrong [CONFide...
Lost in Translation: When Industrial Protocol Translation goes Wrong [CONFide...
Marco Balduzzi189 views
Stranger in These Parts. A Hired Gun in the JS Corral (JSConf US 2012) by Igalia
Stranger in These Parts. A Hired Gun in the JS Corral (JSConf US 2012)Stranger in These Parts. A Hired Gun in the JS Corral (JSConf US 2012)
Stranger in These Parts. A Hired Gun in the JS Corral (JSConf US 2012)
Igalia474 views

Recently uploaded

Five Things You SHOULD Know About Postman by
Five Things You SHOULD Know About PostmanFive Things You SHOULD Know About Postman
Five Things You SHOULD Know About PostmanPostman
36 views43 slides
Unit 1_Lecture 2_Physical Design of IoT.pdf by
Unit 1_Lecture 2_Physical Design of IoT.pdfUnit 1_Lecture 2_Physical Design of IoT.pdf
Unit 1_Lecture 2_Physical Design of IoT.pdfStephenTec
12 views36 slides
GDG Cloud Southlake 28 Brad Taylor and Shawn Augenstein Old Problems in the N... by
GDG Cloud Southlake 28 Brad Taylor and Shawn Augenstein Old Problems in the N...GDG Cloud Southlake 28 Brad Taylor and Shawn Augenstein Old Problems in the N...
GDG Cloud Southlake 28 Brad Taylor and Shawn Augenstein Old Problems in the N...James Anderson
92 views32 slides
Scaling Knowledge Graph Architectures with AI by
Scaling Knowledge Graph Architectures with AIScaling Knowledge Graph Architectures with AI
Scaling Knowledge Graph Architectures with AIEnterprise Knowledge
38 views15 slides
Melek BEN MAHMOUD.pdf by
Melek BEN MAHMOUD.pdfMelek BEN MAHMOUD.pdf
Melek BEN MAHMOUD.pdfMelekBenMahmoud
14 views1 slide
Igniting Next Level Productivity with AI-Infused Data Integration Workflows by
Igniting Next Level Productivity with AI-Infused Data Integration Workflows Igniting Next Level Productivity with AI-Infused Data Integration Workflows
Igniting Next Level Productivity with AI-Infused Data Integration Workflows Safe Software
280 views86 slides

Recently uploaded(20)

Five Things You SHOULD Know About Postman by Postman
Five Things You SHOULD Know About PostmanFive Things You SHOULD Know About Postman
Five Things You SHOULD Know About Postman
Postman36 views
Unit 1_Lecture 2_Physical Design of IoT.pdf by StephenTec
Unit 1_Lecture 2_Physical Design of IoT.pdfUnit 1_Lecture 2_Physical Design of IoT.pdf
Unit 1_Lecture 2_Physical Design of IoT.pdf
StephenTec12 views
GDG Cloud Southlake 28 Brad Taylor and Shawn Augenstein Old Problems in the N... by James Anderson
GDG Cloud Southlake 28 Brad Taylor and Shawn Augenstein Old Problems in the N...GDG Cloud Southlake 28 Brad Taylor and Shawn Augenstein Old Problems in the N...
GDG Cloud Southlake 28 Brad Taylor and Shawn Augenstein Old Problems in the N...
James Anderson92 views
Igniting Next Level Productivity with AI-Infused Data Integration Workflows by Safe Software
Igniting Next Level Productivity with AI-Infused Data Integration Workflows Igniting Next Level Productivity with AI-Infused Data Integration Workflows
Igniting Next Level Productivity with AI-Infused Data Integration Workflows
Safe Software280 views
STKI Israeli Market Study 2023 corrected forecast 2023_24 v3.pdf by Dr. Jimmy Schwarzkopf
STKI Israeli Market Study 2023   corrected forecast 2023_24 v3.pdfSTKI Israeli Market Study 2023   corrected forecast 2023_24 v3.pdf
STKI Israeli Market Study 2023 corrected forecast 2023_24 v3.pdf
STPI OctaNE CoE Brochure.pdf by madhurjyapb
STPI OctaNE CoE Brochure.pdfSTPI OctaNE CoE Brochure.pdf
STPI OctaNE CoE Brochure.pdf
madhurjyapb14 views
"Running students' code in isolation. The hard way", Yurii Holiuk by Fwdays
"Running students' code in isolation. The hard way", Yurii Holiuk "Running students' code in isolation. The hard way", Yurii Holiuk
"Running students' code in isolation. The hard way", Yurii Holiuk
Fwdays17 views
SAP Automation Using Bar Code and FIORI.pdf by Virendra Rai, PMP
SAP Automation Using Bar Code and FIORI.pdfSAP Automation Using Bar Code and FIORI.pdf
SAP Automation Using Bar Code and FIORI.pdf
Piloting & Scaling Successfully With Microsoft Viva by Richard Harbridge
Piloting & Scaling Successfully With Microsoft VivaPiloting & Scaling Successfully With Microsoft Viva
Piloting & Scaling Successfully With Microsoft Viva
PharoJS - Zürich Smalltalk Group Meetup November 2023 by Noury Bouraqadi
PharoJS - Zürich Smalltalk Group Meetup November 2023PharoJS - Zürich Smalltalk Group Meetup November 2023
PharoJS - Zürich Smalltalk Group Meetup November 2023
Noury Bouraqadi132 views

ESUG15: SS7 Update

  • 1. SS7 Signalling System No. 7 onwaves sysmocom 2denker
  • 3. -- Generated by Asnp, the pretty-printer of France Telecom R&D (http://asn1.elibel.tm.fr/asnp/) Remote-Operations-Generic-ROS-PDUs {joint-iso-itu-t remote-operations(4) generic-ROS-PDUs(6) version1(0)} DEFINITIONS IMPLICIT TAGS ::= BEGIN -- exports everything IMPORTS OPERATION, ERROR FROM Remote-Operations-Information-Objects {joint-iso-itu-t remote-operations(4) informationObjects(5) version1(0)}; ROS{InvokeId:InvokeIdSet, OPERATION:Invokable, OPERATION:Returnable} ::= CHOICE { invoke [1] Invoke{{InvokeIdSet}, {Invokable}}, returnResult [2] ReturnResult{{Returnable}}, returnError [3] ReturnError{{Errors {{Returnable}}}}, reject [4] Reject } … ASN.1 Grammar
  • 4. ASN.1 • 384 production rules • all rules without xml and constraints • done with petit parser • generates a runtime model of a parser
  • 5. TCAP Transaction Capability Application Part • session handling called Dialogue/Transaction • state machine for session status • RPC-like mechanism (ASN.1 grammar)
  • 6. HLR Home Location Register • Registry of mobile customers • Needed to „log into“ a GSM network (your SIM card information is stored here)
  • 7. AuC Authentication center • authenticates a SIM card • holds secret key for a customer • authenticates cryptographically
  • 8. HLR/AuC • pharo 3 • garage database driver • deployed in a real GSM network