P25 Security Test Suite

Security Test Suites for P25
SIP
P25 Security Test Suite

Security Test Suites for P25

Overview

The Valid8 Security Test Suites are suitable for auditing security of P25 network nodes including Console, RFSS, IWF, according to standards including TIA.

What It Can Do For You

The solution is capable of simulating and testing various different devices including:

  • Radio & RFSS
  • Console
  • IWF

The tool provides comprehensive checks and measurements including Request-Response times that are used to grade performance, which in conjunction with a user-configurable threshold can be used to determine a PASS/FAIL result.

Why It’s Different

  • Scalable software-based architecture can run on a range of hardware from COTS and high-end customer provided hardware to Virtual Machines and the Cloud (e.g. Amazon AWS) for maximum versatility and performance
  • Web-based UI is easy to learn
  • HTTP API enable integration with automation test systems and other equipment
  • Stateful modeling provides accurate emulation of network elements

Features

  • Pre-made test scenarios and procedures
  • PASS / FAIL analysis, including plain English diagnostic reason
  • Valid / Invalid testing
  • Customizable source-code
  • User-configurable proprietary messages, IEs, headers
  • Animated test results action-replay
  • Easy to configure
  • Automatic execution of test batches
  • UDP, TCP, SCTP transport layer IPv4/IPv6 support
  • Suitable for Development and QA test lab environments, verifying protocol compliance, negative and robustness testing, Regression testing and Reproducing customer issues in the field

Related Video

Additional Videos

Subsystems

Valid8 Security Test Suites are comprised of multiple subsystems that can be activated as needed to test the DUT. Traffic can be captured through the use of a remote capture tool such as Wireshark.

KPIs
  • Test Verdict - Pass, Fail or Inconclusive 
  • Detailed message field validation
Configurable Parameters
  • IP address and port
  • Network layer- IPv4 / IPv6
  • Transport layer- UDP / TCP / SCTP / TLS
  • Phone numbers
  • Authentication - username and password
  • Unexpected message handling - Stop / Continue

Automation API

User commands can be fully automated using an HTTP API. This includes all control functions as well as collection of results and metrics. It can be integrated into any CI system including Jenkins, CircleCI, Gitlab and others. Our Autom8 Python framework is included to ease integration.

Scripting

The application can be edited directly in the browser using VTDL using Composer, a powerful development environment that includes error checking and a graphical view easing the creation and modification of scenarios. Codec Studio can be used to quickly build message templates from raw PDUs, as captured by tcpdump for example, to use in the scenarios.
This is some text inside of a div block.

Use Cases

P25 Console (CSS) Under Test

For testing the P25 Console (CSS), the Valid8 Tester can generate SIP/RTP/Floor Control calls on CSSI to test conformance, performance and stability.

Supported Scenarios:
  • Client Server single-ended
  • Client end-to-end

P25 RFSS Under Test

For testing the P25 RFSS, the Valid8 Tester can generate SIP/RTP/Floor Control calls on ISSI to test conformance, performance and stability.

Supported Scenarios:
  • Client Server single-ended
  • Client end-to-end
P25 Security Test Suite
P25 Security Test Suite

Summary of Specifications

Specifications

V8 TS P25.0823 - General Security Assurance Requirements

  • Registration (Console to Home RFSS)
  • Registration Response flood 2xx / 4xx
  • TC_REG_CONSOLE_TO_HOME_RFSS_REG_RES_FLOOD_001- Send a flood (100 per second) of bad 4xx sip register responses for 30s then prove one good one (200) can succeed and measure the response time for the console to show group active and measure response to emergency alarm.
  • TC_REG_CONSOLE_TO_HOME_RFSS_REG_RES_FLOOD_002Send a flood (100 per second) of good (200) can succeed and an Invite call can still be made, measure the response time
  • Deregistration
  • Console to Home RFSS
  • Deregistration Response flood 2xx / 4xx
  • Send a flood (100 per second) of bad 4xx sip register responses then prove one good one (200) can succeed and measure the response time.
  • Send a flood (100 per second) of good (200) can succeed and an Invite call can still be made, measure the response time.
  • Home RFSS to Console
  • Deregistration Request flood 2xx / 4xx
  • Send a flood (100 per second) of bad 4xx sip register responses then prove one good one (200) can succeed and measure the response time.
  • Send a flood (100 per second) of good (200) can succeed and an Invite call can still be made, measure the response time.
  • Group call (Console to Home RFSS)
  • Invite Response flood 2xx / 4xx
  • Send a flood (100 per second) of bad 4xx sip invite responses then prove one good one (200) can succeed and measure the response time.
  • Send a flood (100 per second) of good (200) can succeed and the call can still be made, measure the response time.
  • Mess up the tia-p25-groupcallstring
  • Group call (Home RFSS to Console)
  • InviteRequest flood
  • Send a flood (100 per second) of invites and check an outbound call can still be made, measure the response time.
  • Unit to Unit call
  • Torture Tests RFC4475, RFC5118
  • PROTOS_Test-Suite_C07
  • Including  Invalid payload length – too long
  • Invalid payload length – too short

Product Details

Operating System 

  • ‍Protocol Engine (Linux-based) 

User Interface 

  • ‍Browser-based, touch-optimized graphical user interface 

Automation 

  • ‍HTTP API 

Note:

Actual throughput levels over radio may vary based on the 3rd party device manufacturer and software versions. Valid8 product specifications are subject to change at any time without notice.

Valid8 exports its products strictly in accordance with all US Export Control laws and regulations which shall apply to any purchase or order. Specifications are subject to change without notice.

500 West Cummings Park, Suite 6550 Woburn, MA 01801
p: +1-855-482-5438
f: +1-781-996-3708
welcome@valid8.com
VALID8.COM

Ordering Information

Product Code:
sw-testsuite-security-p25

Test Suites:
console-v8-25-0823

rfss-v8-25-0823

iwf-v8-25-0823


(others on request)

Datasheet Page

Related Video

Related Solutions

M5 Mobile UE Emulator

M5 Hardware

mobile-ue-emulator-64
mobile-ue-emulator-128
mobile-ue-emulator-256

Software Only

mobile-ue-emulator-100-sw
mobile-ue-emulator-1000-sw
mobile-ue-emulator-10000-sw

Note

  • Actual throughput levels over radio may vary based on the 3rd party device manufacturer and software versions. Valid8 product specifications are subject to change at any time without notice.

Datasheet Page
4G Security Test Suite

Product Code:
sw-testsuite-security-4g

Test Suites:
mme-3gpp-33-116

enb-3gpp-33-126

pgw-3gpp-33-250


(others on request)

Datasheet Page