Skip to content

Commit 1582803

Browse files
rfs85rfs85
committed
Add featured projects section to INDEX.md with ongoing and published research details
1 parent dbdb5c3 commit 1582803

8 files changed

+305
-0
lines changed

‎profile/docs/INDEX.md‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,40 @@
5151
- Firmware security
5252
- Radio security
5353

54+
## Projects
55+
56+
### Featured Projects
57+
58+
- **5G Security Architecture Analysis**
59+
- In-depth analysis of 5G core and RAN security features, vulnerabilities, and mitigations.
60+
- **Status:** Ongoing
61+
- [Read more](tech-specific-research.md#5g-security-features)
62+
63+
- **Signaling Cross-Protocol Attacks**
64+
- Research on cross-protocol attacks involving SS7, Diameter, and SIP signaling.
65+
- **Status:** Ongoing
66+
- [Read more](core-network-research.md#signaling-security)
67+
68+
- **Legacy 2G Persistence Risks**
69+
- Assessment of security risks in legacy 2G networks and their impact on modern telecom environments.
70+
- **Status:** Published
71+
- [Read more](tech-specific-research.md#legacy-network-security)
72+
73+
- **IoT Telecom Protocol Misuse**
74+
- Investigation of IoT device vulnerabilities and protocol misuse in telecom networks.
75+
- **Status:** In Progress
76+
- [Read more](tech-specific-research.md#iot-connectivity-security)
77+
78+
- **Private Radio Interface Security**
79+
- Security research on private LTE/5G and radio interface deployments.
80+
- **Status:** Planned
81+
- [Read more](ran-research.md#private-network-security)
82+
83+
- **SIM/eSIM Security Research**
84+
- Technical research on SIM and eSIM vulnerabilities, provisioning, and authentication.
85+
- **Status:** Published
86+
- [Read more](sim-esim-research.md)
87+
5488
## Getting Started
5589
- [Contributing Guidelines](contributing.md)
5690
- How to contribute

‎profile/projects/5g-security-architecture-analysis.md‎

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
# 5G Security Architecture Analysis
2+
3+
## Overview
4+
In-depth analysis of 5G core and RAN security features, vulnerabilities, and mitigations. This project aims to identify, document, and address security challenges unique to 5G networks.
5+
6+
## Status
7+
- Ongoing
8+
9+
## Lead(s)
10+
- TelcoSec Research Team
11+
12+
## Objectives
13+
- Analyze 5G core network security architecture
14+
- Assess RAN security and O-RAN vulnerabilities
15+
- Document attack vectors and mitigations
16+
- Develop best practice guidelines
17+
18+
## Milestones
19+
- [x] Literature review and threat modeling
20+
- [ ] Core network security assessment
21+
- [ ] RAN and O-RAN security analysis
22+
- [ ] Publication of findings and recommendations
23+
24+
## Documentation
25+
- [5G Security Features](../docs/tech-specific-research.md#5g-security-features)
26+
- [RAN Research](../docs/ran-research.md)
27+
28+
## Updates & Change Log
29+
| Date | Update | Author |
30+
|------|--------|--------|
31+
| 2024-06-10 | Initial creation | TelcoSec Team |
32+
33+
## References
34+
- 3GPP TS 33.501
35+
- O-RAN Alliance Security Whitepapers
36+
37+
## License
38+
This project is licensed under the Apache License 2.0 unless otherwise specified.

‎profile/projects/README.md‎

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
# TelcoSec Projects
2+
3+
This directory contains detailed documentation for research and development projects within the TelcoSec initiative.
4+
5+
## Purpose
6+
- Provide in-depth information about ongoing, completed, and planned projects.
7+
- Track project status, objectives, milestones, and contributors.
8+
- Serve as a reference for community members and collaborators.
9+
10+
## Adding a New Project
11+
1. Create a new markdown file in this directory (e.g., `project-name.md`).
12+
2. Use the provided template below for consistency.
13+
3. Add your project to the main [Projects section](../docs/INDEX.md) if appropriate.
14+
4. Submit a pull request for review.
15+
16+
## Project Page Template
17+
```markdown
18+
# [Project Name]
19+
20+
## Overview
21+
Brief summary of the project, its goals, and significance.
22+
23+
## Status
24+
- Ongoing / Completed / Planned
25+
26+
## Lead(s)
27+
- Name(s) and contact info (optional)
28+
29+
## Objectives
30+
- Objective 1
31+
- Objective 2
32+
- ...
33+
34+
## Milestones
35+
- [ ] Milestone 1
36+
- [ ] Milestone 2
37+
- [ ] ...
38+
39+
## Documentation
40+
- [Related research](../docs/)
41+
- [Related tools](../tools/)
42+
- [Related labs](../labs/)
43+
44+
## Updates & Change Log
45+
| Date | Update | Author |
46+
|------|--------|--------|
47+
| YYYY-MM-DD | Initial creation | Name |
48+
49+
## References
50+
- [Reference 1]
51+
- [Reference 2]
52+
53+
## License
54+
This project is licensed under the Apache License 2.0 unless otherwise specified.
55+
```

‎profile/projects/iot-telecom-protocol-misuse.md‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
# IoT Telecom Protocol Misuse
2+
3+
## Overview
4+
Investigation of IoT device vulnerabilities and protocol misuse in telecom networks. This project explores how IoT deployments can introduce new attack surfaces and protocol-level risks.
5+
6+
## Status
7+
- In Progress
8+
9+
## Lead(s)
10+
- TelcoSec Research Team
11+
12+
## Objectives
13+
- Identify IoT protocol vulnerabilities in telecom environments
14+
- Analyze real-world IoT attack scenarios
15+
- Develop best practices for secure IoT integration
16+
17+
## Milestones
18+
- [x] Initial survey of IoT telecom deployments
19+
- [ ] Protocol vulnerability analysis
20+
- [ ] Case study documentation
21+
- [ ] Best practice publication
22+
23+
## Documentation
24+
- [IoT Connectivity Security](../docs/tech-specific-research.md#iot-connectivity-security)
25+
26+
## Updates & Change Log
27+
| Date | Update | Author |
28+
|------|--------|--------|
29+
| 2024-06-10 | Initial creation | TelcoSec Team |
30+
31+
## References
32+
- GSMA IoT Security Guidelines
33+
- 3GPP TS 33.185
34+
35+
## License
36+
This project is licensed under the Apache License 2.0 unless otherwise specified.

‎profile/projects/legacy-2g-persistence-risks.md‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
# Legacy 2G Persistence Risks
2+
3+
## Overview
4+
Assessment of security risks in legacy 2G networks and their impact on modern telecom environments. This project documents vulnerabilities, persistence risks, and mitigation strategies for 2G systems.
5+
6+
## Status
7+
- Published
8+
9+
## Lead(s)
10+
- TelcoSec Research Team
11+
12+
## Objectives
13+
- Identify legacy 2G vulnerabilities
14+
- Analyze persistence risks in mixed-generation networks
15+
- Recommend mitigation and decommissioning strategies
16+
17+
## Milestones
18+
- [x] Vulnerability assessment
19+
- [x] Impact analysis
20+
- [x] Recommendations published
21+
22+
## Documentation
23+
- [Legacy Network Security](../docs/tech-specific-research.md#legacy-network-security)
24+
25+
## Updates & Change Log
26+
| Date | Update | Author |
27+
|------|--------|--------|
28+
| 2024-06-10 | Initial creation | TelcoSec Team |
29+
30+
## References
31+
- GSMA FS.07
32+
- 3GPP TS 43.020
33+
34+
## License
35+
This project is licensed under the Apache License 2.0 unless otherwise specified.

‎profile/projects/private-radio-interface-security.md‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
# Private Radio Interface Security
2+
3+
## Overview
4+
Security research on private LTE/5G and radio interface deployments. This project focuses on the unique risks and mitigations for private and enterprise radio networks.
5+
6+
## Status
7+
- Planned
8+
9+
## Lead(s)
10+
- TelcoSec Research Team
11+
12+
## Objectives
13+
- Assess security of private LTE/5G deployments
14+
- Identify radio interface vulnerabilities
15+
- Develop guidelines for secure private network operation
16+
17+
## Milestones
18+
- [ ] Literature review
19+
- [ ] Vulnerability assessment
20+
- [ ] Recommendations and best practices
21+
22+
## Documentation
23+
- [Private Network Security](../docs/ran-research.md#private-network-security)
24+
25+
## Updates & Change Log
26+
| Date | Update | Author |
27+
|------|--------|--------|
28+
| 2024-06-10 | Initial creation | TelcoSec Team |
29+
30+
## References
31+
- O-RAN Alliance Security
32+
- 3GPP TS 33.501
33+
34+
## License
35+
This project is licensed under the Apache License 2.0 unless otherwise specified.

‎profile/projects/signaling-cross-protocol-attacks.md‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
# Signaling Cross-Protocol Attacks
2+
3+
## Overview
4+
Research on cross-protocol attacks involving SS7, Diameter, and SIP signaling. The project investigates how attackers can exploit protocol interactions and weaknesses across telecom signaling systems.
5+
6+
## Status
7+
- Ongoing
8+
9+
## Lead(s)
10+
- TelcoSec Research Team
11+
12+
## Objectives
13+
- Identify cross-protocol vulnerabilities in telecom signaling
14+
- Analyze attack scenarios involving SS7, Diameter, and SIP
15+
- Develop detection and mitigation strategies
16+
- Share findings with the telecom security community
17+
18+
## Milestones
19+
- [x] Initial vulnerability mapping
20+
- [ ] Attack scenario development
21+
- [ ] Tooling for detection and testing
22+
- [ ] Publication of research results
23+
24+
## Documentation
25+
- [Signaling Security](../docs/core-network-research.md#signaling-security)
26+
27+
## Updates & Change Log
28+
| Date | Update | Author |
29+
|------|--------|--------|
30+
| 2024-06-10 | Initial creation | TelcoSec Team |
31+
32+
## References
33+
- GSMA FS.11, FS.19
34+
- 3GPP TS 33.210, 33.501
35+
36+
## License
37+
This project is licensed under the Apache License 2.0 unless otherwise specified.

‎profile/projects/sim-esim-security-research.md‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
# SIM/eSIM Security Research
2+
3+
## Overview
4+
Technical research on SIM and eSIM vulnerabilities, provisioning, and authentication. This project covers both legacy and modern SIM technologies, focusing on security risks and mitigations.
5+
6+
## Status
7+
- Published
8+
9+
## Lead(s)
10+
- TelcoSec Research Team
11+
12+
## Objectives
13+
- Analyze SIM and eSIM security architectures
14+
- Identify vulnerabilities in provisioning and authentication
15+
- Develop recommendations for secure SIM/eSIM deployment
16+
17+
## Milestones
18+
- [x] SIM security assessment
19+
- [x] eSIM provisioning analysis
20+
- [x] Recommendations published
21+
22+
## Documentation
23+
- [SIM/eSIM Research](../docs/sim-esim-research.md)
24+
25+
## Updates & Change Log
26+
| Date | Update | Author |
27+
|------|--------|--------|
28+
| 2024-06-10 | Initial creation | TelcoSec Team |
29+
30+
## References
31+
- GSMA SGP.02, SGP.22
32+
- 3GPP TS 31.102, 31.115
33+
34+
## License
35+
This project is licensed under the Apache License 2.0 unless otherwise specified.

0 commit comments

Comments
 (0)