Best Practice Detail

13-8-8534

Network Operators and Service Providers should remove invalid records if logs or alarms determine an SS7 table has been modified without proper authorization, or in the event of a modification, rollback to last valid version of record. Investigate the attack to identify required security changes.

Status: Rollover New

References/Comments: Cross reference with 7-7-8534 developed under NRIC.

Historical events:

• Network Operators
• Service Providers
• Wireline
• Cyber Security
• Network Elements
• Network Operations
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII