nullcon Goa 2017 - Case Study Of SS7/Sigtran Assessment by Akib Sayyed

This talk presents a detailed penetration testing case study focused on SS7 and SIGTRAN vulnerabilities. The speaker discusses the methodology used for assessing SS7, highlights challenges encountered during testing, and outlines commonly found issues including protocol flaws that can make SS7 susceptible to attacks. Additionally, the session covers prevalent attack methods, the presence of SS7 vulnerabilities on the dark web, and preventive measures to safeguard against these threats. The speaker, who has five years of experience in telecom security and a history of discovering zero-day vulnerabilities, also shares insights from past presentations at renowned conferences.