Jakub Lengiewicz

Abstract: Over the years many standards were defined to solve the security vulnerabilities of the Signaling Systems No:7 (SS7) protocol. Yet, it still suffers from many security issues that make it vulnerable to attacks such as the disclosure of subscribers’ location, fraud, and interception of calls or SMS messages. Several security measures employ rule-based solutions for the detection of attacks in telecom core networks. However, they become ineffective when an attacker deploys sophisticated attacks that are not easily detected by filtering mechanisms. One particular solution to overcome those attacks is to use supervised machine learning solutions since they have demonstrated their ability to achieve promising results to detect anomalies in various applications. Nonetheless, they generally need to be trained with a large set of labeled data that cannot be obtained from the telecom operators due to the excessive resource allocation and cost of labeling the network traffic. Therefore, in this work, we propose an innovative approach based on semi-supervised learning, which combines the use of labeled and unlabeled data to train a particular model for the detection of SS7 attacks in telecom core networks. Our approach adapts the Convolutional Neural Network (CNN)-based semi-supervised learning scheme and an improved version of the feature engineering in previous works together with the hyperparameter optimization. Experiment results show that the proposed approach achieves up to 100\% accuracy on both the real world and simulated datasets, respectively.

Orhan Ermis is a postdoctoral researcher at Luxembourg Institute of Science and Technology.