Best Practice Detail

13-8-8053

Network Operators should establish thresholds for various SS7 message types to ensure that DoS conditions are not created. Also, alarming should be configured to monitor these types of messages to alert when DoS conditions are noted. Rigorous screening procedures can increase the difficulty of launching DDoS attacks. Care must be taken to distinguish DDoS attacks from high volumes of legitimate signaling messages. Maintain backups of signaling element data.

Status: Rollover New

References/Comments:

Historical events:

• Network Operators
• Wireline
• Cyber Security
• Network Elements
• Network Operations
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII