Skip to content

Telecom Network Security: SS7, Diameter & 5G Core Training Course

Examines vulnerabilities in SS7, Diameter and 5G Core signalling, showing how to detect threats, secure interconnection and protect mobile networks.

TCS · Telecommunications CybersecurityAll Levels#2802ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Course Overview

This course provides practical knowledge of telecommunications network security, focusing on vulnerabilities, threat detection, and protection mechanisms across SS7, Diameter, and 5G Core architectures. Participants examine signalling protocols, interconnection risks, authentication procedures, and security controls used in modern mobile networks. The programme covers signalling security, subscriber identity protection, roaming security, network function protection, and the role of the 5G Service-Based Architecture (SBA). Practical exercises focus on threat analysis, security configuration review, incident investigation, and developing mitigation measures for telecom network environments.

Learning Objectives

  • Understand SS7, Diameter, and 5G Core architectures and signalling procedures.
  • Identify common signalling vulnerabilities and telecom-specific attack scenarios.
  • Assess risks associated with roaming, interconnection, and third-party connectivity.
  • Apply security controls to protect signalling interfaces and network functions.
  • Evaluate subscriber authentication, identity protection, and access controls.
  • Analyse signalling logs and security events to identify suspicious activity.
  • Develop incident response and mitigation procedures for telecom networks.
  • Apply security assessment principles to evolving 5G environments.

Who Should Attend

Telecom network security engineers. Core network and signalling engineers. Mobile network operations professionals. Security operations centre (SOC) analysts. Telecom fraud and risk management specialists. Network architects and technical consultants. Incident response and cybersecurity professionals working with telecom infrastructure.

Learning Outcomes

  • Explain the security implications of SS7, Diameter, and 5G Core signalling.
  • Identify common protocol-level weaknesses and interconnection risks.
  • Assess security controls for roaming and signalling traffic.
  • Explain 5G authentication, subscriber privacy, and service-based interface security.
  • Analyse signalling records and security alerts.
  • Recommend appropriate monitoring, filtering, and access control measures.
  • Develop incident response procedures for signalling-related threats.
  • Prepare a prioritised security improvement plan for a mobile network.

Course Outline

Day 1

Telecom Signalling Architecture and Security Fundamentals

  • Mobile network architecture and the role of signalling in service delivery.
  • SS7 architecture, signalling links, and key protocols such as MAP and TCAP.
  • Diameter architecture, agents, routing, and authentication and charging applications.
  • Signalling interconnection, roaming relationships, and trust boundaries.
  • Common security weaknesses involving excessive trust, inadequate filtering, and exposed interfaces.
  • Telecom threat modelling, risk assessment, and security control principles.
  • Practical Exercise: Map the signalling architecture of a sample mobile network, identify trust boundaries, and document key security risks.
Day 2

SS7 and Diameter Vulnerabilities and Protection

  • SS7 security risks involving subscriber information exposure, location privacy, and unauthorised signalling requests.
  • Diameter security concerns involving peer authentication, message validation, and interconnect trust.
  • Risks associated with roaming hubs, signalling transfer points, and external network connections.
  • Signalling firewalls, message filtering, screening rules, and protocol validation.
  • Monitoring abnormal signalling patterns and identifying suspicious requests.
  • Security policies for interconnection partners and roaming interfaces.
  • Practical Exercise: Review simulated SS7 and Diameter signalling events, classify suspicious activity, and recommend filtering and mitigation controls.
Day 3

5G Core Architecture and Security Controls

  • 5G Core components and functions, including AMF, SMF, UPF, AUSF, UDM, and PCF.
  • Service-Based Architecture (SBA), service interfaces, and network function communication.
  • 5G authentication using 5G-AKA and EAP-AKA′ at an architectural level.
  • Subscriber identity protection using SUCI and the role of SUPI.
  • Security considerations for HTTP/2-based service interfaces, API access, and mutual authentication.
  • Network slicing, access control, segmentation, and protection of management interfaces.
  • Security implications of virtualised and cloud-native network functions.
  • Practical Exercise: Assess a sample 5G Core architecture, identify exposed interfaces and trust boundaries, and propose appropriate authentication, segmentation, and access controls.
Day 4

Threat Detection, Monitoring, and Incident Response

  • Establishing baseline signalling behaviour and identifying deviations.
  • Analysing signalling logs, protocol messages, and security alerts.
  • Detecting suspicious subscriber queries, unusual routing patterns, and unauthorised requests.
  • Correlating signalling events with subscriber activity and network performance indicators.
  • Security monitoring, alert prioritisation, and incident escalation.
  • Incident response procedures, evidence preservation, containment, and recovery.
  • Coordination between network operations, SOC teams, fraud management, and external partners.
  • Practical Exercise: Investigate a simulated signalling security incident, correlate available logs, determine the likely risk, and prepare an incident response report.
Day 5

Security Assessment, Hardening, and Continuous Improvement

  • Developing a structured security assessment for SS7, Diameter, and 5G Core environments.
  • Reviewing signalling firewall policies, peer configurations, access controls, and interface exposure.
  • Assessing roaming and interconnection security requirements.
  • Applying secure configuration and change management principles.
  • Prioritising remediation according to risk, service impact, and operational constraints.
  • Defining security KPIs, monitoring requirements, and periodic review procedures.
  • Developing a telecom signalling security roadmap aligned with network architecture and operational needs.
  • Practical Exercise: Prepare a prioritised security improvement plan covering SS7, Diameter, and 5G Core, including identified risks, recommended controls, implementation priorities, and verification measures.

Upcoming Dates

Selected date

Bangkok · 8 – 12 Mar 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
KigaliScheduled
9 – 13 Nov 2026€7,700—
Kuala LumpurScheduled
16 – 20 Nov 2026€4,700—
LisbonScheduled
23 – 27 Nov 2026€6,000€5,400until 2 Nov
LondonScheduled
30 Nov – 4 Dec 2026€5,800€5,220until 9 Nov
MadinahScheduled
30 Nov – 4 Dec 2026€4,800€4,320until 9 Nov
MadridScheduled
7 – 11 Dec 2026€6,000€5,400until 16 Nov
ManamaScheduled
14 – 18 Dec 2026€5,300€4,770until 23 Nov
MilanScheduled
21 – 25 Dec 2026€7,000€6,300until 30 Nov
MunichScheduled
28 Dec 2026 – 1 Jan 2027€6,000€5,400until 7 Dec
MuscatScheduled
4 – 8 Jan 2027€6,300€5,670until 14 Dec
OnlineScheduled
10 – 14 Jan 2027€2,700€2,430until 21 Dec
ParisScheduled
11 – 15 Jan 2027€6,700€6,030until 21 Dec
RiyadhScheduled
18 – 22 Jan 2027€4,800€4,320until 28 Dec
RomeScheduled
25 – 29 Jan 2027€7,000€6,300until 4 Jan
ViennaScheduled
1 – 5 Feb 2027€6,400€5,760until 11 Jan
AbujaScheduled
8 – 12 Feb 2027€7,700€6,930until 18 Jan
AccraScheduled
15 – 19 Feb 2027€7,700€6,930until 25 Jan
AmmanScheduled
21 – 25 Feb 2027€4,000€3,600until 1 Feb
BakuScheduled
1 – 5 Mar 2027€5,300€4,770until 8 Feb
AmsterdamScheduled
1 – 5 Mar 2027€6,000€5,400until 8 Feb
BangkokScheduled
8 – 12 Mar 2027€6,700€6,030until 15 Feb
BarcelonaScheduled
15 – 19 Mar 2027€6,000€5,400until 22 Feb
CairoScheduled
22 – 26 Mar 2027€3,800€3,420until 1 Mar
Cape TownScheduled
29 Mar – 2 Apr 2027€7,700€6,930until 8 Mar
CasablancaScheduled
5 – 9 Apr 2027€4,700€4,230until 15 Mar
DammamScheduled
12 – 16 Apr 2027€4,800€4,320until 22 Mar
DohaScheduled
12 – 16 Apr 2027€4,700€4,230until 22 Mar
DubaiScheduled
25 – 29 Apr 2027€4,700€4,230until 5 Apr
IstanbulScheduled
26 – 30 Apr 2027€5,300€4,770until 5 Apr
JeddahScheduled
2 – 6 May 2027€4,800€4,320until 12 Apr

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.