Telecoms Network Security Course

Lesson 1 • Regulatory and Compliance Frameworks

Introduces telecom-specific security obligations and international standards bodies. Grounds students in compliance requirements that shape security design.

Lesson 2 • Telecom Network Architecture Overview

Covers core, access, and transport network layers and their interdependencies. Provides the structural baseline for understanding attack surfaces.

Lesson 3 • Key Protocols and Standards

Examines SS7, Diameter, SIP, and IP-based protocols used in telecom. Connects protocol behaviour to later vulnerability analysis.

Lesson 1 • Threat Intelligence Sources and Models

Teaches use of threat feeds, ISACs, and structured models like MITRE ATT&CK for telecom. Enables evidence-based threat prioritisation.

Lesson 2 • Common Telecom Attack Vectors

Surveys interception, fraud, denial-of-service, and signalling attacks. Builds threat awareness needed for later vulnerability and defence chapters.

Lesson 3 • Risk Assessment Fundamentals

Applies qualitative and quantitative risk methods to telecom environments. Produces risk registers that guide security investment decisions.

Lesson 1 • Diameter Protocol Vulnerabilities

Covers Diameter's role in LTE and its inherited and unique security flaws. Extends signalling security knowledge to 4G network contexts.

Lesson 2 • Signalling Firewall and Filtering Controls

Teaches deployment and tuning of SS7 and Diameter firewalls and filtering rules. Translates vulnerability knowledge into actionable defensive configurations.

Lesson 3 • SS7 Attack Techniques

Details location tracking, call interception, and SMS hijacking via SS7. Prepares students to recognise and replicate attack patterns in lab environments.

Lesson 4 • SS7 Protocol Deep Dive

Examines SS7 message types, transaction flows, and trust assumptions. Establishes the technical basis for understanding signalling exploits.

Lesson 1 • Radio Frequency Jamming and Interference

Examines intentional and unintentional RF interference affecting network availability. Connects physical-layer disruption to service continuity risk.

Lesson 2 • IMSI Catchers and Rogue Base Stations

Analyses how false base stations capture subscriber identities and intercept traffic. Prepares students to detect and counter these physical-layer threats.

Lesson 3 • RAN Equipment Security Hardening

Applies configuration hardening principles to base station and RAN controller equipment. Reduces the attack surface of deployed radio infrastructure.

Lesson 1 • DNS Security in Telecom Environments

Covers DNS cache poisoning, DNSSEC deployment, and DNS-based threat detection. Secures the naming infrastructure critical to telecom service resolution.

Lesson 2 • Firewall and Perimeter Defence Design

Teaches stateful and next-generation firewall placement and rule design for telecom. Establishes controlled boundaries between network segments.

Lesson 3 • IP Routing Security in Telecom

Addresses BGP hijacking, route leaks, and RPKI-based route origin validation. Protects the routing fabric that underpins telecom service delivery.

Lesson 4 • Network Segmentation and Zero Trust

Implements micro-segmentation and zero-trust principles within telecom core networks. Limits lateral movement and contains breach impact.

Lesson 1 • Network Slicing Security

Analyses isolation requirements and cross-slice attack risks in multi-tenant 5G environments. Ensures slice boundaries enforce security and performance guarantees.

Lesson 2 • Multi-Access Edge Computing Security

Secures MEC platforms deployed at the network edge for latency-sensitive applications. Addresses the expanded attack surface introduced by distributed compute.

Lesson 3 • Open RAN Security Considerations

Evaluates security implications of disaggregated RAN components and open interfaces. Identifies supply chain and interface risks unique to Open RAN deployments.

Lesson 4 • 5G Threat Modelling and Testing

Applies structured threat modelling and penetration testing to 5G core and RAN. Validates security controls before and after 5G service launch.

Lesson 1 • Security Information and Event Management

Configures SIEM platforms to ingest, correlate, and alert on telecom-specific log sources. Enables real-time visibility across network and system events.

Lesson 2 • Network Traffic Analysis and Anomaly Detection

Applies flow analysis, deep packet inspection, and behavioural baselines to detect threats. Identifies malicious patterns within high-volume telecom traffic.

Lesson 3 • Threat Hunting in Telecom Networks

Conducts hypothesis-driven hunts for persistent threats within telecom infrastructure. Uncovers adversaries that evade automated detection systems.

Lesson 4 • Incident Response in Telecom Environments

Executes structured incident response phases tailored to telecom service continuity. Minimises customer impact and preserves forensic evidence during incidents.

Lesson 1 • Security Metrics and Reporting

Defines KPIs and KRIs that measure telecom security programme effectiveness. Communicates security posture to technical teams and executive stakeholders.

Lesson 2 • Security Governance and Policy Frameworks

Establishes security policies, roles, and governance structures for telecom operators. Aligns security operations with organisational risk appetite and obligations.

Lesson 3 • Third-Party and Supply Chain Risk Management

Assesses vendor security posture and manages risk from network equipment suppliers. Reduces exposure from compromised or substandard third-party components.

Lesson 4 • Business Continuity and Disaster Recovery

Designs BC and DR plans that maintain telecom service under major disruption scenarios. Validates plans through tabletop exercises and live failover testing.