Best Practice Detail

13-8-8533

Network Operators, Service Providers should if an SS7 Denial of Service (DoS) attack is detected, more aggressively apply the same thresholding and filtering mechanism used to prevent an attack (NRIC BP 8053).  The alert/alarm will specify the target of the attack. Isolate, contain, and, if possible, physically disconnect the attacker.  If necessary, isolate the targeted network element and disconnect to force a traffic reroute.

Status: Rollover New

References/Comments:

Historical events:

• Network Operators
• Service Providers
• Wireline
• Cyber Security
• Disaster Recovery
• Emergency Preparedness
• CSRIC VII: Rollover New In CSRIC VII