Click to edit Master text styles
Second level
Third level
Fourth level
Fifth level
‹date/time›
‹footer›
‹#›
------=_NextPart_01C49F5B.E3E6A380
Content-Location: file:///C:/A2645633/PSTNtoITTechTransition-SecurityConcerns_files/master03.xml
Content-Transfer-Encoding: quoted-printable
Content-Type: text/xml; charset="utf-8"
![](3D"master03_background.gif")
PSTN
to IT Technology Transition =
Security concerns
Craig A Schiller, CISSP
Hillsboro PD Police Reserve
Specialists
George Heuston
Hillsboro Police Department
![](3D"slide0001_image002.jpg")
![](3D"slide0001_image004.jpg")
Outline=
Public
Switched Telephone Network
(PSTN)
<=
span
style=3D'font-size:75%;color:yellow'>•Strong
Physical Security measures
<=
span
style=3D'font-size:75%;color:yellow'>•Vendor
supplied and maintained HW/SW
<=
span
style=3D'font-size:75%;color:yellow'>•Complete
isolation from other systems
<=
span
style=3D'font-size:75%;color:yellow'>•Information
about the infrastructure is not publicly shared
<=
span
style=3D'font-size:75%;color:yellow'>•High
levels of reliability and robustness
<=
span
style=3D'font-size:75%;color:yellow'>•Paired
STP-SCP devices improve reliability & security
<=
span
style=3D'font-size:75%;color:yellow'>•Out
of Band Control messages
<=
span
style=3D'font-size:75%;color:yellow'>•Messages
can be protected with Digital Signatures
The Way=
It
Was
![](3D"slide0004_image005.gif")
IT Tech=
nology
<=
span
style=3D'color:yellow'>•Info widely known – public standards
<=
span
style=3D'color:yellow'>•In-band control messages – no priority!
The Way=
It
Will Be
![](3D"slide0005_image007.jpg")
The Res=
ults
“The
unreliability of existing gateway screening capabilities, the lack of secu=
rity
gu=
idelines
for interconnection, and the lack of control and authentication =
mechanisms for network management
traffic, are all matters requiring further attention. Malicious activity directed at
signaling gateways could precipitate network disruptions and impact ove=
rall
network availability and reliability.&nbs=
p;
Mo=
reover,
the Internet Protocol does not accord higher priority to ‘in-band=
217;
si=
gnaling
messages. As a result, netwo=
rk
congestion might not be circumvented in converged networks by using
conventional…mechanisms.”
President’s National Security
Telecommunications Advisory Committee
June 2001
Convers=
ion
Conversion
of telephone equipment to IT technology
• Introduced variable security meas=
ures
to formerly secure equipment
• Changed the paradigm from assured
vendor maintenance to optional vendor maintenance
• Permitted more Vendors to compete
– loss of standards and quality
• Loss of out-of-band control messa=
ges in
favor of cheaper in-band control messages.
Security
Issues
Potential
Loss of isolation
Each
environment has its own threats, vulnerabilities
Connecting corporate systems to phone and ISP systems increa=
ses
the total
threat population and potential vulnerabilities for all systems
Liabilities
Threat
pool from the Internet much greater than isolated corporate
Accepting
data and retrieving it safely from Internet
Actions=
Segregate
networks into systems of similar risks
Internal
Firewalls permit limited traffic and reduce risks
Separate
development and production environments
Harden
systems to prevent their use against other internal systems
Use
SSL for all Internet transactions
Pull technology is fundamentally safer for moving data from
Internet syst=
ems to
corporate systems.
Evaluate
the security of your systems using Systrust, WebTrust or SAS 70
Check
out the UL Standard for monitoring centers
Questio=
ns
•George Heuston&#=
13;
•Hillsboro Police
Department
•
•Craig A Schiller,
CISSP
•Global Security
Officer
•RadiSys
Corporation
•503.615.1646
=
;
•
' + ENDSHOW_MESG + '
![](3D"notes_flag.gif")
No=
tes![](3D"buttons.gif")
![](3D"slide0001_image001.png"){kind=link}
![](3D"slide0001_image003.png"){kind=link}
![](3D"slide0005_image006.png"){kind=link}