Best Practice Detail

13-12-8040

Network Operators, Service Providers and Public Safety should implement architectural designs to mitigate the fundamental vulnerabilities of many control plane protocols (eBGP, DHCP, SS7, DNS, SIP, etc): 1) Know and validate who you are accepting information from, either by link layer controls or higher layer authentication, if the protocol lacks authentication, 2) Filter to only accept/propagate information that is reasonable/expected from that network element/peer. This applies to Public Safety only in an NG9-1-1 environment.

Status: Rollover New

References/Comments:

Historical events:

• Network Operators
• Service Providers
• Public Safety
• Internet/Data
• Cyber Security
• Network Operations
• Public Safety Service
• CSRIC VII: Rollover New In CSRIC VII