4G Security Test Suite

Security Test Suites for 4G
4G-LTE
Core
IMS
SIGTRAN
M3UA
SS7
SCTP
CAMEL
ISUP
4G Security Test Suite

Security Test Suites for 4G

Overview

The Valid8 Security Test Suites are suitable for auditing security of 4G LTE network nodes including UE, eNodeB, MME, SGW, PGW, according to standards including NESAS, 3GPP.

What we Can Do For You

The solution is capable of simulating and testing various different devices:

  • UE
  • eNodeB
  • MME
  • SGW
  • PGW

Why we’re Different

  • Scalable software-based architecture can run on a range of hardware from COTS and high-end customer provided hardware to Virtual Machines and the Cloud (e.g. Amazon AWS) for maximum versatility and performance
  • Web-based UI is easy to learn
  • HTTP API enable integration with automation test systems and other equipment
  • Stateful modeling provides accurate emulation of network elements

Features

  • Pre-made test scenarios and procedures
  • PASS / FAIL analysis, including plain English diagnostic reason
  • Valid / Invalid testing
  • Customizable source-code
  • User-configurable proprietary messages, IEs, headers
  • Animated test results action-replay
  • Easy to configure
  • Automatic execution of test batches
  • UDP, TCP, SCTP transport layer IPv4/IPv6 support
  • Suitable for Development and QA test lab environments, verifying protocol compliance, negative and robustness testing, Regression testing and Reproducing customer issues in the field

Related Video

Additional Videos

Subsystems

Valid8 Security Test Suites are comprised of multiple subsystems that can be activated as needed to test the DUT. Traffic can be captured through the use of a remote capture tool such as Wireshark.

KPIs
  • Test Verdict - Pass, Fail or Inconclusive 
  • Detailed message field validation
Configurable Parameters
  • IP address and port
  • Network layer- IPv4 / IPv6
  • Transport layer- UDP / TCP / SCTP / TLS
  • Phone numbers
  • Authentication - username and password
  • Unexpected message handling - Stop / Continue

Automation API

User commands can be fully automated using an HTTP API. This includes all control functions as well as collection of results and metrics. It can be integrated into any CI system including Jenkins, CircleCI, Gitlab and others. Our Autom8 Python framework is included to ease integration.

Scripting

The application can be edited directly in the browser using VTDL using Composer, a powerful development environment that includes error checking and a graphical view easing the creation and modification of scenarios. Codec Studio can be used to quickly build message templates from raw PDUs, as captured by tcpdump for example, to use in the scenarios.
This is some text inside of a div block.

PRODUCT OPTIONS

4G Security Test Suite

Use Cases

No items found.
4G Security Test Suite
4G Security Test Suite

Summary of Specifications

Specifications

NESAS SCAS 3GPP TS 33.116 - MME

  • Access with 2G SIM  forbidden    
  • Re-synchronization    
  • Integrity check of Attach message    
  • Not forwarding EPS authentication data to  SGSN    
  • Not forwarding unused EPS authentication  data between different security domains    
  • Bidding down prevention    
  • NAS integrity algorithm selection and use  .    
  • NAS NULL integrity protection    
  • NAS confidentiality protection    
  • Bidding down prevention in X2-handovers .    
  • NAS integrity protection algorithm  selection in MME change .    
  • No access with 2G SIM via idle mode  mobility    
  • No access with 2G SIM via handover    
  • No access with 2G SIM via SRVCC    
  • Release of non-emergency bearers

NESAS SCAS 3GPP TS 33.216 - eNodeB

  • Control plane data  confidentiality protection    
  • Control plane data integrity protection    
  • User plane data ciphering and deciphering  at the eNB    
  • User plane data integrity protection    
  • AS algorithms selection    
  • Verify RRC integrity protection    
  • The selection of EIA0    
  • Key refresh at the eNB    
  • AS Security Mode Command Procedure    
  • Bidding down prevention in X2-handovers    
  • AS protection algorithm selection in eNB  change    
  • RRC and UP downlink ciphering at the eNB    
  • Map a UE NR security capability    
  • UE NR security capability is only sent to  a SgNB    
  • Bidding down prevention in X2-handovers  when target eNB receives a NR security capability

NESAS SCAS 3GPP TS 33.250 - PGW

  • Per-user based  packet filtering    
  • Charging ID Uniqueness    
  • TEID UNIQUENESS    
  • Mobility binding    
  • Inactive emergency PDN connection release    
  • Unpredictable GTP TEID    
  • IP Address reallocation interval    
  • MS/UE-Mutual Access Prevention    
  • Traffic separation    
  • User Plane Traffic Differentiation

TBD - UE

  • Under development

Product Details

Operating System 

  • ‍Protocol Engine (Linux-based) 

User Interface 

  • ‍Browser-based, touch-optimized graphical user interface 

Automation 

  • ‍HTTP API 

Note:

Actual throughput levels over radio may vary based on the 3rd party device manufacturer and software versions. Valid8 product specifications are subject to change at any time without notice.

Valid8 exports its products strictly in accordance with all US Export Control laws and regulations which shall apply to any purchase or order. Specifications are subject to change without notice.

500 West Cummings Park, Suite 6550 Woburn, MA 01801
p: +1-855-482-5438
f: +1-781-996-3708
welcome@valid8.com
VALID8.COM

Ordering Information

Product Code:
sw-testsuite-security-4g

Test Suites:
mme-3gpp-33-116

enb-3gpp-33-126

pgw-3gpp-33-250


(others on request)

Datasheet Page

Related Video

Related Solutions

M5 Mobile UE Emulator

M5 Hardware

m5-ue-emulator-064-lite
m5-ue-emulator-064-base
m5-ue-emulator-064-plus
m5-ue-emulator-e-256-pro
m5-ue-emulator-mbs-256-ultra

Note

  • Actual throughput levels over radio may vary based on the 3rd party device manufacturer and software versions. Valid8 product specifications are subject to change at any time without notice.

Datasheet Page
5G Security Test Suite

Product Code:
sw-testsuite-security-5g

Test Suites:
gnb-3gpp-33-511

amf-3gpp-33-512

upf-3gpp-33-513

udm-3gpp-33-514

smf-3gpp-33-515

ausf-3gpp-33-516

sepp-3gpp-33-517

nrf-3gpp-33-518

nef-3gpp-33-519

3gpp-33-117


(others on request)

Datasheet Page