Top Banner

of 21

Enterprise Telecom Security Threats Draft 10-12-04

Apr 07, 2018

Download

Documents

Sandeep Nair
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    1/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{

    H Ka~ra~h}i Tfj}irhri~ nzLh~o M% Kaggji~'

    Kfjic ]ikfejkhg Accjki~ hemSjki R~i{jmie} ac Iedjeii~jed

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    2/21

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    3/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 8

    Iviky}jsi [yllh~z

    Ka~ra~h}jae{ h~i }zrjkhggz kaeeik}im }a }ta ryngjk'ye}~y{}im ei}ta~o{0 }fi Ryngjk [tj}kfim ]igirfaeiEi}ta~o &R[]E*? hem Tjmi H~ih Ei}ta~o{ &THE{* a~ }fiJe}i~ei}% ]~hmj}jaehg rfaei {}h}jae{ a~ ri~jrfi~hg{ kaeeik}}a }fi R[]E }a iehngi sajki khgg{' lamil hem chvkallyejkh}jae{' hem sjmia }igikaeci~iekjed% Ka~ra~h}i

    kalry}i~{ kaeeik} }a THE{ a~ }fi Je}i~ei} ca~ mh}hkallyejkh}jae{ hem hkki{{ }a jeca~lh}jae% Je}i~ei}R~a}akag &JR* rfaei{ hem {ac} rfaei{ ij}fi~ kaeeik} }a }fiR[]E sjh h limjh dh}ithz' a~ k~a{{ }fi ka~ra~h}iri~jli}i~ }a kaeeik} }a THE{ a~ }fi Je}i~ei}% Hg}faydfeih~gz hgg ka~ra~h}jae{ {iky~i }fi Je}i~ei} kaeeik}jae }a}fij~ je}i~ehg mh}h ei}ta~o{ tj}f JR cj~ithgg{ hem ~igh}im}ikfeagadji{' la{} ka~ra~h}jae{ fhsi zi} }a gako mate }fij~sajki kaeeik}jae }a }fi ye}~y{}im R[]E' a~ tfie r~i{ie}'n~jed he ixyhg gisig ac {iky~j}z }a }fij~ JR }igirfaezkaeeik}jae{%

    He h~~hz ac sygei~hnjgj}ji{ je je}i~ehg mh}h ei}ta~o{' }fi}~hmj}jaehg rfaei iesj~aelie}' hem a}fi~ k~j}jkhg ka~ra~h}ijec~h{}~yk}y~i h~i hkki{{jngi }f~aydf he ie}i~r~j{i{ye{iky~im }~hmj}jaehg rfaei ei}ta~o% Hg}faydf h}}hko{hdhje{} he ie}i~r~j{i{ Je}i~ei} kaeeik}jae ~ikijsi }fila{} ryngjk h}}ie}jae' h}}hko{ hdhje{} he ie}i~r~j{i}f~aydf }fi }~hmj}jaehg sajki ei}ta~o h~i kallae% Je hmh}h ei}ta~o h}}hko ri~ri}~h}im }f~aydf }fi }~hmj}jaehgrfaei ei}ta~o' je}~ymi~{ nzrh{{ Je}i~ei},~igh}im micie{i{nz y{jed }fi R[]E }a hkki{{ yehy}fa~jpim hem raa~gz{iky~im lamil{% H}}hkoi~{ ivrgaj} lamil{ h{je}i~kaeeik}jae misjki{ ni}tiie ie}i~r~j{i sajki hem mh}hei}ta~o{ }fh} iehngi k~a{{,ei}ta~o h}}hko{%

    Yehy}fa~jpim lamil y{i j{ r~ishgie} je lhezka~ra~h}jae{' myi }a }fi gaddjed hem cjg}i~jed ac Gakhg H~ihEi}ta~o &GHE*,nh{im Je}i~ei} {i{{jae{ nz JR cj~ithgg{% ]fiaegz lihe{ nz tfjkf he ilrgazii khe jej}jh}i h r~jsh}iJe}i~ei} {i{{jae' j{ }f~aydf he ye,laej}a~im ie}i~r~j{irfaei gjei kaeeik}jae }a }fij~ ri~{aehg Je}i~ei} [i~sjkiR~asjmi~ &J[R*% Aeki kaeeik}im asi~ }fi R[]E' y{i~{ khehkki{{ hez kae}ie}' iedhdi je hez }~he{hk}jae' a~ yrgahmhem mategahm hez jeca~lh}jaekalrgi}igz jesj{jngi }a }fiie}i~r~j{i {iky~j}z a~ ei}ta~ojed }ihl% ]fi sh{} lh`a~j}zac yehy}fa~jpim lamil{ h~i eae,{iky~i hem raa~gzkaecjdy~im' nikhy{i hkki{{ }a r~jsh}i Je}i~ei} y{hdi j{ }fiilrgazii{ dahgea} {iky~j}z ac }fi ka~ra~h}i GHE% Nizaem}fi{i yehy}fa~jpim lamil{' eih~gz hgg ie}i~r~j{i{ fhsi hkaggik}jae ac hy}fa~jpim lamil{ ca~ y{i{ {ykf h{ siema~lhje}ieheki ra~} hkki{{ je}a oiz ei}ta~ojed jec~h{}~yk}y~ihem nyjgmjed {z{}il{% H }zrjkhg ie}i~r~j{i' isie aei tj}f~i{}~jk}im lamil y{hdi ragjkji{ hem r~akimy~i{' fh{ {alieylni~ ac yehy}fa~jpim hem!a~ raa~gz {iky~im lamil{arie nhko maa~{ je}a }fij~ mh}h ei}ta~o%

    ]fi }~hmj}jaehg sajki ei}ta~o j{ {gatgz ljd~h}jed }a Sajkiasi~ Je}i~ei} R~a}akag &j%i%' SaJR' a~ JR }igirfaez*' tfi~isajki j{ h k~j}jkhg {i~sjki ~yeejed ae }fi JR ei}ta~o% H} }fj{}jli' hrr~avjlh}igz 8) }a >) ac }igirfaei {}h}jae{ h~inh{im ae SaJR% ]fj{ ljd~h}jae tjgg }hoi lhez zih~{' tj}fla{} ie}i~r~j{i{ {gatgz ~aggjed ay} }fi eit }ikfeagadz nzy{jed h fzn~jm ei}ta~o kae{j{}jed ac na}f }~hmj}jaehg kj~kyj},{tj}kfim hem SaJR ixyjrlie}% My~jed }fj{ }~he{j}jae' }fiivj{}jed kj~kyj},{tj}kfim sajki {iky~j}z }f~ih}{ {ykf h{h}}hko{ ae hy}fa~jpim hem yehy}fa~jpim lamil{' }agg c~hym'hem ihsi{m~arrjed je }fi R[]E tjgg kae}jeyihem SaJR tjggje}~amyki ie}j~igz eit sygei~hnjgj}ji{ ac j}{ ate%

    [iky~j}z j{ ~ixyj~im ca~ ~igjhngi SaJR mirgazlie}%Yeca~}yeh}igz' {iky~jed SaJR j{ la~i mjccjkyg} }fhe {iky~jed}~hmj}jaehg' kj~kyj},{tj}kfim sajki ei}ta~o{% Tj}f sajki h{ h{i~sjki ae }fi JR ei}ta~o' j} jefi~j}{ na}f }fi hmshe}hdi{hem }fi mj{hmshe}hdi{ ac }fi JR ei}ta~o% Eat sajki j{sygei~hngi }a ta~l{' sj~y{i{' hem Miejhg ac [i~sjki &Ma[*hgg }f~ih}{ }fh} mjm ea} ivj{} ae }fi kj~kyj},{tj}kfimei}ta~o% Ca~ ivhlrgi' he h}}hkoi~ khe y{i ~idj{}~h}jae

    fj`hkojed' r~avz jlri~{aeh}jae' li{{hdi }hlri~jed' a~{i{{jae }ih~ mate }a khy{i Ma[ ae hez SaJR ei}ta~okalraeie}' h{ tigg h{ ]jli Mjsj{jae Lyg}jrgiv &]ML*{z{}il{% He h}}hkoi~ khe hg{a ivrgaj} kallae hem tigg,oeate tihoei{{i{ je hy}fie}jkh}jae? jlrgilie}h}jae cght{je {ac}th~i' r~a}akag{' hem sajki hrrgjkh}jae{? tihoei{{i{je JR RNV{ diei~hg,ry~ra{i hem eae,{iky~i ari~h}jed{z{}il{ hem {yrra~}jed {i~sjki{? h{ tigg h{ gjlj}h}jae{ jeri~jli}i~ {iky~j}z misjki{%

    SaJR j{ hg{a fh~mi~ }a {iky~i }fhe a}fi~' }~hmj}jaehg JR{i~sjki{% SaJR j{ si~z {y{kir}jngi }a Ma[ h}}hko{' j{kalr~j{im ac kalrgiv' ~hrjmgz jlrgilie}im {}hemh~m{'hem myi }a Ei}ta~o Hmm~i{{ ]~he{gh}jae &EH]*' mzehljkra~}jed' hem ri~ca~lheki ~ixyj~ilie}{' SaJR ra{i{ hr~angil ca~ kaesie}jaehg ri~jli}i~ {iky~j}z misjki{%

    ]fi sygei~hnjgj}ji{ jefi~ie} je SaJR {i~sjki{ ivra{i }fiie}i~r~j{i }a {ali agm }f~ih}{ r~i{ie} ae }fi }~hmj}jaehgsajki ei}ta~o {ykf h{ }agg c~hym hem ihsi{m~arrjed' ny}}fiz hg{a je}~amyki eit }f~ih}{' {ykf h{ h}}hko{ ae JRRNV{' Ma[ ae {jdehgjed hem limjh' Ma[ ae dh}ithz{ hem]ML {z{}il{' r~a}akag h}}hko{' khgg ngakojed' mh}h }yeeigjedhem Xyhgj}z ac [i~sjki &Xa[* }fic}' hem h}}hko{ hdhje{} JRrfaei{' eaei ac tfjkf ti~i r~i{ie} tj}f }~hmj}jaehg sajkijlrgilie}h}jae{%

    ]fj{ makylie} r~asjmi{ nhkod~ayem ae sygei~hnjgj}ji{ jena}f }~hmj}jaehg kj~kyj},{tj}kfim hem SaJR jlrgilie}h}jae{'h{ tigg h{ fat mjcci~ie} SaJR mirgazlie} {kieh~ja{ h~ijlrhk}im nz }fi }f~ih}{% Sygei~hnjgj}ji{ je h fzn~jm ei}ta~okae{j{}jed ac na}f gidhkz kj~kyj},{tj}kfim hem SaJR

    ixyjrlie} h~i hg{a mj{ky{{im%

    ]hngi ac Kae}ie}{

    8% Je}~amyk}jae

    >% ]~hmj}jaehg Sajki Sygei~hnjgj}ji{ hem ]f~ih}{

    ;% SaJR Sygei~hnjgj}ji{ hem ]f~ih}{

    =% Fzn~jm Kj~kyj},[tj}kfim!SaJR Sygei~hnjgj}ji{ hem

    ]f~ih}{

    9% [yllh~z

    8% Je}~amyk}jae

    ]fi sh{} lh`a~j}z ac ie}i~r~j{i{ lhje}hje h r~i{ieki ae }fiJe}i~ei} je a~mi~ }a kaemyk} ny{jei{{ hem r~asjmi Je}i~ei}hkki{{ ca~ ta~o,~igh}im hk}jsj}ji{% ]a {iky~i }fi kaeeik}jae}a }fi Je}i~ei} hem r~a}ik} je}i~ehg ei}ta~o{' ie}i~r~j{i{mirgaz h sh~ji}z ac {iky~j}z misjki{' jekgymjed cj~ithgg{'Sj~}yhg R~jsh}i Ei}ta~o{ &SRE{*' Je}~y{jaeMi}ik}jae!R~isie}jae &JMR*' he}j,sj~y{' hem kae}ie}laej}a~jed% Tfie r~ari~gz mirgazim hem kaecjdy~im' }fi{ir~amyk}{ figr }a r~a}ik} }fi je}i~ehg JR ei}ta~o c~alh}}hko{ hdhje{} }fi ie}i~r~j{i{ Je}i~ei} kaeeik}jae%Fatisi~' eaei ac }fi{i Je}i~ei},~igh}im {iky~j}z}ikfeagadji{ r~a}ik} }fi je}i~ehg JR ei}ta~o c~al h}}hko{

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    4/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi >

    hdhje{} }fi }~hmj}jaehg sajki ei}ta~o kaeeik}jae{ k~ih}imnz yehy}fa~jpim a~ eae,{iky~i lamil{ hem raa~gzkaecjdy~im sajki {z{}il{%

    Cy~}fi~la~i' kaesie}jaehg lih{y~i{ }hoie }a {iky~i }fimh}h ei}ta~o h~i jehmixyh}i ca~ sajki }~hccjk ae }fi JRei}ta~o' tfjkf kheea} ni {yn`ik} a mighz{ gjoi }fa{ikhy{im nz {}hemh~m cj~ithgg{% J} j{ jlra~}he} ca~ kalrheji{

    }a }hoi }fi eiki{{h~z {}ir{ }a r~asjmi h {iky~iiesj~aelie} }fh} hmm~i{{i{ }fi yejxyi sygei~hnjgj}ji{ ac JR}igirfaez% _8\

    >% ]~hmj}jaehg Sajki Sygei~hnjgj}ji{ hem]f~ih}{

    [iky~jed }fi ie}i~r~j{i{ Je}i~ei} kaeeik}jae j{ }fi caky{ ach d~ih} mihg ac {iky~j}z h}}ie}jaehem h th~~he}imjesi{}lie}' nikhy{i h gh~di eylni~ ac h}}hko{ kali c~al}fi Je}i~ei}% Fatisi~' tj}f {a lykf ~any{} }ikfeagadzr~a}ik}jed }fi Je}i~ei} kaeeik}jae' lhez h}}hkoi~{ {ih~kfca~ rh}fthz{ ac riei}~h}jae }fh} h~i gi{{ gjoigz }a nimi}ik}im% Yehy}fa~jpim hem eae,{iky~i lamil{ acci~ heh}}hkoi~ }fh} ih{z' yelaej}a~im li}fam ac an}hjejed

    hkki{{ }a }fi je}i~ehg mh}h ei}ta~o' {a }fiz ra{i h {i~jay{}f~ih} }a {iky~j}z%

    Yehy}fa~jpim hem Eae,{iky~i Lamil{

    Tfie he h}}hkoi~ hkki{{i{ he yehy}fa~jpim a~ eae,{iky~ilamil' }fi JR ei}ta~o,nh{im {iky~j}z r~amyk}{ kheea} {iia~ mi}ik} }fi je}~y{jae% ]zrjkhggz' ea ~ika~m ac }fih}}hkoi~{ hkki{{ j{ gaddimivkir} ri~fhr{ h gaed khgg~ika~mim ae }fi RNVhem isie }fj{ ~ika~m ivj{}{ aegz jc }fihkki{{im lamil gjei ~ay}i{ }f~aydf }fi RNV% Gad{ ae }fih}}hkoim {z{}il lhz ~ika~m }fi hkki{{ny} }fiz h~iih{jgz migi}im nz }fi h}}hkoi~% ]fi h}}hkoi~ khe kae}jeyi }a~i,y{i }fj{ eitcayem sygei~hnjgj}z ca~ cy}y~i hkki{{' a~je{}hgg hea}fi~ nhko maa~' tfjkf hggat{ hkki{{ }f~aydfhea}fi~ lihe{' jekgymjed }fi Je}i~ei}%

    H{ {}h}im je [ir}ilni~ >222 je }fi [HE[ Je{}j}y}i^i{ay~ki{' Je{iky~i lamil{' hy}fa~jpim a~ ea}' h~isygei~hngi }a {ykf h}}hko{ hem riei}~h}jae ac }fi{ilamil{ tjgg {ynsi~} }fi r~a}ik}jae ac cj~ithgg{% _;\

    ]fi caggatjed {ik}jae{ mi{k~jni {isi~hg {j}yh}jae{ ivrgaj}jedyehy}fa~jpim hem eae,{iky~i lamil{ tj}fje he ie}i~r~j{i%

    Th~ Mjhgjed

    Ea~lhggz' he h}}hkoi~ y{i{ th~ mjhgjed' }fi r~aki{{ ac{kheejed h gh~di {i} ac rfaei eylni~{ tj}fje he ie}i~r~j{i}a rjeraje} yehy}fa~jpim hem eae,{iky~i lamil{% ]fih}}hkoi~ ih{jgz an}hje{ }fi ie}i~r~j{i{ rfaei eylni~{y{jed h rfaei naao' {akjhg iedjeii~jed' ny{jei{{ kh~m{' a~isie }fi Je}i~ei}% Aeki }fi ie}i~r~j{i{ ~hedi ac eylni~{

    h~i an}hjeim' }fi th~ mjhgi~ mjhg{ }fi eylni~{ hem{ih~kfi{ ca~ he{ti~jed lamil{' ~ika~mjed }fi rfaeieylni~{ ac }fi he{ti~jed lamil{ ca~ gh}i~ h}}hko% [alith~ mjhgi~{ khe jmie}jcz }fi {z{}il kae}~aggjed }fi lamilhem h}}ilr} }a dyi{{ rh{{ta~m{% Hez je}i~i{}im jemjsjmyhgkhe mategahm c~ii th~ mjhgi~{ c~al }fi Je}i~ei}% [ali ac}fi la~i kallae c~iith~i th~ mjhgi~{ jekgymi ]aei Gak']FK' D~jl [kheei~' [yri~ Mjhg' Tjgm Mjhgi~' hem Yg}jlh}iTh~ mjhgi~ ;>% He h}}hkoi~ khe isie di} h th~ mjhgi~ }fh}~ye{ ae h Ri~{aehg Mjdj}hg H{{j{}he} &RMH* tj}f h tj~igi{{lamil%

    Tfie h th~ mjhgi~ cjem{ h lamil hem dyi{{i{ }fiy{i~ehli!rh{{ta~m' }fi h}}hkoi~ fh{ dhjeim heyelaej}a~im hkki{{ raje} je}a }fi ie}i~r~j{i% C~al }fj{raje}' }fi h}}hkoi~ khe mhlhdi a~ lhejrygh}i }fi jej}jhg{z{}il' a~ {jeki }fi {z{}il y{yhggz ~i{jmi{ ae h ei}ta~o'}fi h}}hkoi~ khe hkki{{ hez a}fi~ {z{}il je }fi ei}ta~o%

    ]a cy~}fi~ jggy{}~h}i }fi r~angil' je }fi 8::: Kalry}i~

    K~jli hem [iky~j}z [y~siz kaemyk}im nz }fi Kalry}i~[iky~j}z Je{}j}y}i &K[J* hem }fi Cimi~hg Ny~ihy acJesi{}jdh}jae &CNJ*' ac }fi hgla{} 322 ~i{raemie}{' >6)~ira~}im lamil,~igh}im {iky~j}z n~ihkfi{% _=\

    Ri}i~ [fjrgiz hlrgz milae{}~h}im }fi r~angil ra{im nzeae,{iky~i lamil{ tj}f h th~ mjhgjed ivri~jlie} }fh} fikaemyk}im hem gh}i~ mj{ky{{im h} MICKAE &he heeyhg

    fhkoi~ kaesie}jae*% Je }fi ivri~jlie}' fi je{}~yk}im fj{kalry}i~ }a mjhg 9%; ljggjae rfaei{ je }fi [he C~hekj{kaNhz h~ih gaaojed ca~ kalry}i~{ kaeeik}im }a lamil{% Ficayem eyli~ay{ lamil{' jekgymjed }fa{i }fh} hggatim fjlhkki{{ }a iesj~aelie}hg kae}~ag{ hem a}fi~ k~j}jkhg {z{}il{%Fi cy~}fi~ {}h}im }fh} 49) ac }fi kalry}i~ {z{}il{hkki{{jngi sjh lamil ti~i eae,{iky~i ieaydf ca~ heje}~ymi~ }a riei}~h}i }fi {z{}il%

    Cjdy~i 8 r~asjmi{ h d~hrfjk c~al [jdehg lhdhpjei tfjkfjggy{}~h}i{ }fi mjcci~ieki ni}tiie tfh} {iky~j}z lhehdi~{ri~kijsi }a ni }fi d~ih}i{} }f~ih} }a }fij~ ei}ta~o hem }fi~ihgj}z }fh} j{ ac}ie ~isihgim nz h sygei~hnjgj}z h{{i{{lie}j{ ri~ca~lim% ]fi hk}yhg }f~ih} h{{akjh}im tj}f lamil{ j{'je ~ihgj}z' lykf fjdfi~ }fhe diei~hggz ~ihgjpim% _>\

    Cjdy~i 8 ]f~ih} Gisig c~al Yehy}fa~jpim Lamil

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    5/21

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    6/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi =

    Tfie h y{i~ hkki{{i{ }fi Je}i~ei} }f~aydf he J[R' }fizje}ie}jaehggz a~ jehmsi~}ie}gz k~ih}i h kalrgi}igz

    yelaej}a~im kaeeik}jae }fh} khe0

    R~asjmi he h}}hkoi~ tj}f yer~a}ik}im hkki{{ ca~ h k~a{{,ei}ta~o h}}hko ae }fi je}i~ehg mh}h ei}ta~o% ]fikaeeik}jae j{ cayem' hem sygei~hnjgj}ji{ h~i ivrgaj}im

    y{jed JR ra~} {kheejed%

    ]~he{ci~ r~ar~ji}h~z a~ kgh{{jcjim mh}h }a }fij~ J[R%

    Hkki{{ h eae,ie}i~r~j{i ilhjg hkkaye} hem mategahmta~l{!sj~y{i{ hem a}fi~ {ac}th~i tj}f lhgjkjay{

    kae}ie}%

    Hkki{{ an`ik}jaehngi lh}i~jhg hem rghki j} ae }fiie}i~r~j{i ei}ta~o%

    ]ji yr ivrie{jsi sajki kfheeig nhemtjm}f my~jed }fi{i{{jae%

    [riem yer~amyk}jsi }jli y{jed }fi Je}i~ei} ca~ eae,ta~o~igh}im hk}jsj}ji{%

    Ilrgazii hny{i ac Je}i~ei} hkki{{ r~jsjgidi{ j{ xyhe}jcjimje }fi >22= K[J!CNJ Kalry}i~ K~jli hem [iky~j}z [y~siz%Ac }fi hgla{} 922 ~i{raemie}{ &r~jlh~jgz cjehekjhgje{}j}y}jae{' gh~di ka~ra~h}jae{ hem dasi~elie} hdiekji{*'9:) mi}ik}im ilrgazii hny{i ac Je}i~ei} hkki{{r~jsjgidi{' ca~ he i{}jlh}im ga{{ ac -82'328'299% _6\

    Aei dasi~elie} {iky~j}z hmljej{}~h}a~ cayem }fh}yehy}fa~jpim J[R hkki{{ kae{ylim >6%9) ac }fi gakhghkki{{ sajki kj~kyj}{ my~jed riho fay~{% Je }fj{ kh{i'

    yehy}fa~jpim J[R hkki{{ kae{ylim hgla{} }f~ii cygg ]8kj~kyj}{ &4> }a}hg sajki kfheeig{*% [iky~j}z kaeki~e{ h{jmi'}fj{ j{ h }~iliemay{ th{}i ac ivrie{jsi sajki nhemtjm}f%]zrjkhggz' sajki ]8 kj~kyj}{ ka{} -8'222 ri~ lae}f%Igjljeh}jae ac }fj{ {a~} ac yehy}fa~jpim hk}jsj}z {hsim }fi{j}i hrr~avjlh}igz -;3'222 ri~ zih~%

    Hea}fi~ eidh}jsi iccik} ac yehy}fa~jpim J[R hkki{{ akky~{

    tfie he ie}i~r~j{i }~ji{ }a ~jm j}{igc ac h sj~y{ a~ ta~l%Y{i~{ ~ije}~amyki }fi sj~y{ sjh }fij~ ri~{aehg hkkaye}{ asi~}fij~ lamil kaeeik}jae{' {a }fi sj~y{!ta~l kae}jeyi{ }a~ihrrih~ mi{rj}i yrd~hmi{ }a }fij~ ei}ta~o,nh{im lhjg{kheejed {ac}th~i hem ghna~jay{ RK hem {i~si~ ry~djed{%

    ]~ygz {i~jay{ kaemj}jae{ akky~ je fjdfgz {iky~i h~ih{ tfi~iJe}i~ei} hkki{{ j{ r~afjnj}im' ny} }fi ~i{}~jk}jae kheea} niiccik}jsigz ieca~kim% Yemi~ }fi{i kj~kyl{}heki{' y{i~{ dhjeyehy}fa~jpim hkki{{ }a }fi Je}i~ei} nz kaeeik}jed lamil{}a }igirfaei gjei{% Je majed {a' }fi y{i~ rghki{ h fjdfgz{iky~i {z{}il hem j}{ ei}ta~o ae }fi Je}i~ei}% ]fi y{i~khe yrgahm {ie{j}jsi a~ kgh{{jcjim lh}i~jhg }a }fij~ J[R a~jehmsi~}ie}gz r~asjmi he Je}i~ei},nh{im h}}hkoi~ tj}fhkki{{ }a }fij~ {z{}il%

    Cjdy~i ; jggy{}~h}i{ }fi y{i ac yehy}fa~jpim lamil{ ca~J[R hkki{{% Nz hkki{{jed }fi Je}i~ei} tj}f he yehy}fa~jpimlamil' }fi y{i~ kj~kylsie}{ }fi JR cj~ithgg hem rghki{}fij~ {z{}il hem }fi ie}i~r~j{i{ ei}ta~o mj~ik}gz ae}a }fiJe}i~ei}%

    Cjdy~i ; Yehy}fa~jpim J[R Hkki{{

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    7/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 9

    Ye{iky~im Hy}fa~jpim Lamil{

    Hgg ie}i~r~j{i{ fhsi {ali eylni~ ac hy}fa~jpim lamil{%K~j}jkhg {z{}il{ {ykf h{ gh~di kalry}jed' sajki' hemjec~h{}~yk}y~i {z{}il{ ac}ie y{i lamil{ }a r~asjmi~ila}i hkki{{ ca~ }ikfejkjhe{ a~ mh}h hkxyj{j}jae!kae}~ag ca~h [yri~sj{a~z Kae}~ag hem Mh}h Hkki{{ &[KHMH* {z{}il%

    Hg}faydf lhez ie}i~r~j{i{ r~a}ik} }fij~ k~j}jkhg {z{}illamil{' la{} ma ea}% Gh~di ie}i~r~j{i{ ac}ie fhsifyem~im{ ac hy}fa~jpim lamil{' hem j} j{ mjccjkyg} }aiccjkjie}gz ieca~ki h ka~ra~h}i ragjkz hk~a{{ h gh~di eylni~ac lamil{% Hg}faydf {}~aed rh{{ta~m{' mjhgnhko khrhnjgj}z'hem a}fi~ }ikfejxyi{ h~i y{im }a }~z }a r~a}ik} hy}fa~jpimlamil{' }fi{i h~i jemjsjmyhggz lhehdim raje} {agy}jae{}fh} h~i mjccjkyg} hem ivrie{jsi }a lhehdi ae h gh~di {khgi'hem jeisj}hngz gihm }a {ali eylni~ ac raa~gz r~a}ik}imlamil{%

    Eae,{iky~i' hy}fa~jpim lamil{ h~i he j{{yi ea} aegznikhy{i ac }fij~ gh~di eylni~{' ny} hg{a nikhy{i ac }fik~j}jkhgj}z ac }fi {z{}il{ y{jed }fi lamil{% ]fi lamil{h~i r~i{ie} }a r~asjmi lhje}ieheki a~ hkki{{!kae}~ag ca~tfh} j{ }zrjkhggz h kalrgiv hem k~j}jkhg {z{}il% ]fi~ica~i'hez yehy}fa~jpim hkki{{ khe fhsi {i~jay{ ~i{yg}{% Heh}}hkoi~ khe mj{hngi h RNV a~ y{i j} ca~ }agg c~hym' {}ihg mh}hc~al {i~si~{' lhejrygh}i iesj~aelie}hg {z{}il{' hccik}k~j}jkhg jec~h{}~yk}y~i' i}k% ]fi ra}ie}jhg ca~ mhlhdi hemlj{y{i j{ he j{{yi isie jc }fi h}}hkoi~ kheea} y{i }fi{z{}il h{ h `ylrjed raje} }a hea}fi~ {z{}il a~ h k~a{{,ei}ta~o h}}hko%

    Cjdy~i = jggy{}~h}i{ he h}}hkoi~ hkki{{jed eae,{iky~ihy}fa~jpim lamil{% H{ {fate je }fi cjdy~i' eae,{iky~ihy}fa~jpim lamil{ khe r~asjmi hkki{{ }a mh}h ei}ta~o{'sajki ei}ta~o{' hem a}fi~ nyjgmjed {z{}il{%

    [KHMH {z{}il{ h~i i{rikjhggz sygei~hngi% Ca~ ivhlrgi'y}jgj}ji{ y{i lamil{ ca~ hkki{{ hem kae}~ag ac }fij~ ~ila}i{}h}jae{% Hkki{{ }a }fi{i {z{}il{ khe ~i{yg} je mj{~yr}jae acigik}~jkhg rati~' dh{ ~i{ay~ki{' th}i~ {yrrgz' hem a}fi~k~j}jkhg {i~sjki{% ]fj{ j{ h si~z {i~jay{ j{{yi' hem h}}hkoi~{h~i gjoigz }a ivrgaj} j} fihsjgz je }fi cy}y~i h{ fijdf}ieim{iky~j}z r~isie}{ a}fi~ lihe{ ac h}}hko%

    ]fi Y%[% Mirh~}lie} ac Iei~dz kaemyk}im h milae{}~h}jaeh} {isi~hg [KHMH {j}i{ je Hr~jg >22=% Mi}hjgim mh}h j{{ie{j}jsi' ny} }fi {iky~j}z hehgz{j{ {yllh~z {}h}i{ }fh}yer~a}ik}im ~ila}i hkki{{ lamil{ acci~ hgla{} eamicie{i hdhje h}}hko{ hem h~i ih{jgz jmie}jcjhngi nz easjkih}}hkoi~{ y{jed }aag{ c~iigz hshjghngi ae }fi Je}i~ei}% J}dai{ ae }a {hz }fh} h}}hko{ hdhje{} ~ila}i hkki{{ lamil{kaygm ih{jgz gihm }a ivra{y~i a~ kalr~alj{i ac {ie{j}jsijeca~lh}jae' hem isie}yhggz' kalrgi}i hkki{{ }a }fihy}alh}jae {z{}il ~i{ay~ki{%

    H}}hko{ Hdhje{} ]~hmj}jaehg Sajki [z{}il{

    hem [i~sjki{

    ]agg C~hym

    Hg}faydf lamil{ h~i ea} mj~ik}gz jesagsim' }fi sajkiei}ta~o r~asjmi{ he hsieyi ac h}}hko hdhje{} k~j}jkhg sajki{z{}il{% H}}hkoi~{ khe rghki h {}hemh~m khgg hem y{i Myhg]aei Lyg}j,C~ixyiekz &M]LC* }aei{ }a hkki{{ hemlhejrygh}i RNV{' Je}i~hk}jsi Sajki i{rae{i &JS^{*'Hy}alh}jk Khgg Mj{}~jny}jae &HKM{*' hem a}fi~ {z{}il{ jea~mi~ }a kallj} }fic} ac gaed,mj{}heki {i~sjki{' a~ k~ih}ia}fi~ j{{yi{% Nz th~ mjhgjed' h}}hkoi~{ cjem gjei{ hem kami{}fh} r~asjmi h {ikaem mjhg }aei' tfjkf }fiz y{i }a kallj}}agg c~hym%

    Cjdy~i = Eae,[iky~i Hy}fa~jpim Lamil{

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    8/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 3

    [ali ie}i~r~j{i{ iehngi Mj~ik} Jeth~m [i~sjki Hkki{{&MJ[H*' tfjkf hggat{ h khggi~ }a dhje he ay}nayem mjhg }aei%Rh{{ta~m{ khe ni iehngim tj}f MJ[H' ny} }fiz h~i ac}ietiho hem aeki mi}i~ljeim' khe ni {agm }a chkjgj}h}i }aggc~hym% J} j{ hg{a ra{{jngi }a th~ mjhg he ie}i~r~j{i hem {kheca~ MJ[H }aei{' tfjkf khe }fie ni ih{jgz ivrgaj}im%

    ]fj{ j{ ea} h eit r~angil' hem j} kae}jeyi{ }a jlrhk}

    ny{jei{{ ari~h}jae{ ca~ ie}i~r~j{i{% A}fi~ h}}hko{ jekgymiy{i ac M]LC }a dyi{{ rh{{ta~m{ hem hkki{{ sajki lhjg hema}fi~ sajki {z{}il{% Kae{jmi~ }fi ivhlrgi tj}f Fitgi}}Rhkoh~m' tfi~i he iv}~iligz {ie{j}jsi sajki lhjg th{iv}~hk}im c~al he iviky}jsi{ sajki lhjgnav%

    Je >22;' }fi Kallyejkh}jae{ C~hym Kae}~ag H{{akjh}jae&KCKH* i{}jlh}im heeyhg }igikal c~hym ga{{i{ ta~gmtjmi }ani je }fi ~hedi ac -;9,-=2 njggjae Y%[% maggh~{yr c~al }fir~isjay{gz i{}jlh}im -8> njggjae% ]fi i{}jlh}i th{ nh{imae }fi ~i{yg}{ ac h kalr~ifie{jsi arjejae {y~siz ac}igikal kalrheji{ je >3 kaye}~ji{% Ac }fi >2 }a ;2mjcci~ie} c~hym }zri{ jmie}jcjim nz }fi ~i{raemie}{'RNV!RHNV!Sajki Lhjg!KRI c~hym &j%i%' }fic} ac gaed mj{}heki{i~sjki{ nz he ye~igh}im }fj~m rh~}z nz riei}~h}jae a~lhejrygh}jae ac Ky{}ali~ R~ilj{i Ixyjrlie}* th{ ~heoim

    +> hem jek~ih{jed% _:\

    Cjdy~i 9 jggy{}~h}i{ he h}}hkoi~ hkki{{jed hem ivrgaj}jed}fi sh~jay{ sajki {z{}il{ hem {i~sjki{ }fh} h~i sygei~hngi}a h}}hko%

    Ihsi{m~arrjed

    ]fi sh{} lh`a~j}z ac sajki }~hccjk j{ ea} iek~zr}im je hezthz' {a j} j{ ra{{jngi }a je}i~kir} hem ihsi{m~ar aekaesi~{h}jae{ je }fi R[]E% Cy~}fi~la~i' }fj{ sygei~hnjgj}zj{ jek~ih{jed je {isi~j}z tj}f }fi ~hrjm }~he{j}jae ac }fiR[]E c~al h kj~kyj},{tj}kfim ei}ta~o }a h rhkoi},nh{imei}ta~o%

    Kgih~gz' }fi Y%[% Dasi~elie} ~ikadejpi{ }fj{ sygei~hnjgj}z'nikhy{i j} fh{ kaye}i~im }fi }f~ih} nz nyjgmjed mimjkh}imsajki ei}ta~o{ hem y{jed hrr~avjlh}igz 922'222 {iky~irfaei{ }a iek~zr} sajki khgg{% ]fi{i {iky~i rfaei{ h~iraje},}a,raje} iek~zr}jae misjki{ khggim [iky~i ]igirfaeiYej}{ &[]Y{* hem [iky~i ]igirfaei Ixyjrlie} &[]I{*% ]fi[]Y{ hem []I{ h~i iccik}jsi tfie lheyhggz hk}jsh}im nz}fi y{i~' ny} chgg {fa~} h{ he iccik}jsi asi~hgg {agy}jae' {jekiihkf ri~{ae kaemyk}jed h kgh{{jcjim a~ {ie{j}jsikaesi~{h}jae ly{} fhsi hkki{{ }a h misjki%

    ]fi {hli ihsi{m~arrjed sygei~hnjgj}z }fh} }fi Y%[%Dasi~elie} ~ikadejpi{ hg{a ivj{}{ ca~ kalli~kjhgie}i~r~j{i{% Kalli~kjhg {iky~i rfaei{ h~i y{im }a iek~zr}kaesi~{h}jae{ ca~ ie}i~r~j{i{' hem iviky}jsi{ y{i }fi{irfaei{ ca~ je}i~eh}jaehg khgg{' {iky~i chvi{' hem {iky~isjmia kaeci~iekjed%

    Cjdy~i 9 Sajki [z{}il H}}hko{

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    9/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 4

    ;% SaJR Sygei~hnjgj}ji{ hem ]f~ih}{

    SaJR j{ }fi cy}y~i ca~ sajki kallyejkh}jae{' ny} {ykki{{cygSaJR mirgazlie} ~ixyj~i{ {}~aed {iky~j}z% Jc }fi SaJRei}ta~o j{ ea} {iky~i' }fi ivrik}im gisig{ ac xyhgj}z hem~igjhnjgj}z kheea} ni lhje}hjeim% ]fi kfhggiedi{ jefi~ie} je{iky~jed {i~sjki{ ae h {fh~im JR ei}ta~o lhoi {iky~jed hSaJR ei}ta~o lykf la~i kalrgiv hem h~myay{ }fhe

    {iky~jed h }~hmj}jaehg kj~kyj},{tj}kfim sajki ei}ta~o% Ca~je{}heki' SaJR j{ sygei~hngi }a }~hmj}jaehg JR h}}hko{ta~l{' sj~y{i{' hem Ma[hem j{ aegz h{ {iky~i h{ }fitihoi{} gjeo ae }fi ei}ta~o% SaJR {i~sjki{ h~i r~asjmim sjhJR RNV{ ~yeejed ae eae,{iky~i ari~h}jed {z{}il{ tj}feae,{iky~i {yrra~}jed {i~sjki{ &{ykf h{ mh}hnh{i{ hemtin {i~si~{*% ]fi{i ari~h}jed {z{}il{ hem {i~sjki{ h~i{y{kir}jngi }a }fi {hli h}}hko{ }fh} ~idygh~gz oeako ay}a}fi~ }zri{ ac {i~si~{' lhojed }fi JR RNV{ la~i sygei~hngi}fhe }~hmj}jaehg RNV{%

    [iky~jed SaJR j{ hg{a la~i kalrgiv hem h~myay{ nikhy{i j}jesagsi{ la~i kalraeie}{ hem {ac}th~i }fhe h }~hmj}jaehgkj~kyj},{tj}kfim sajki ei}ta~o% Je chk}' SaJR fh{ }fira}ie}jhg }a mayngi }fi eylni~ ac JR misjki{ ae }fiei}ta~o' }fi~inz mayngjed }fi eylni~ ac hkki{{ raje}{ je}a}fi ei}ta~o% SaJR kalraeie}{ jekgymi JR RNV{' {yrra~}jed{i~si~{' limjh dh}ithz{' {tj}kfi{' ~ay}i~{' cj~ithgg{'khngjed' hem JR rfaei{!{ac}rfaei{% La~i kalraeie}{ liheh d~ih}i~ ra}ie}jhg ca~ sygei~hnjgj}zhem SaJR kalraeie}{ac}ie y{i diei~hg,ry~ra{i ari~h}jed {z{}il{' tfjkf }iem}a fhsi la~i sygei~hnjgj}ji{ }fhe ry~ra{i,nyjg} ari~h}jed{z{}il{% Jc ea} r~ari~gz {iky~im' ihkf iemraje}' JR rfaei'hem {ac}rfaei j{ {y{kir}jngi }a h}}hko{ {ykf h{ ~idj{}~h}jaefj`hkojed' }agg c~hym' ihsi{m~arrjed' hem lhgjkjay{ kamic~al na}f ay}{jmi hem je{jmi he ie}i~r~j{i%

    SaJR j{ hg{a h d~ih}i~ kfhggiedi }a {iky~i }fhe a}fi~' la~i}~hmj}jaehg JR {i~sjki{% ]fi~i h~i {isi~hg kfh~hk}i~j{}jk{ hem~ixyj~ilie}{ yejxyi }a SaJR }fh} lhoi r~asjmjed {iky~j}z

    lykf la~i mjccjkyg}% Ca~ ivhlrgi' SaJR fh{ yejxyi ~ihg,}jli hem ~igjhnjgj}z ~ixyj~ilie}{ }fh} lhoi j} fjdfgz{y{kir}jngi }a Ma[ h}}hko{' zi} je}agi~he} ac hez {iky~j}zcih}y~i }fh} hmm{ gh}iekz% Hez mighz ac }fi limjh nz h{lykf h{ %9 ac h {ikaem lhoi{ h kaesi~{h}jae yey{hngi%

    Yeca~}yeh}igz' }~hmj}jaehg mh}h {iky~j}z misjki{ h~i ea}mi{jdeim }a hmixyh}igz hmm~i{{ }fi ~ihg,}jli ~ixyj~ilie}{

    ac sajki kallyejkh}jae{% La{} cj~ithgg{ {gat mh}h }~he{ci~'jlrimjed }fi cgat ac }~hccjk hem hmmjed he yehkkir}hngigh}iekz }a ^]R rhkoi}{% SaJR ~ixyj~i{ yr }a {jv hmmj}jaehgra~}{ }a ni arieim ca~ }fi my~h}jae ac ihkf khgg0 }ta tigg,oeate {jdehgjed ra~}{ &aei ca~ ihkf mj~ik}jae*' h{ tigg h{}ta ra~}{ ca~ }fi limjh' hem' ar}jaehggz' }ta la~i ra~}{ ca~^]KR' tfjkf laej}a~{ ri~ca~lheki% Kaesie}jaehg cj~ithgg{ti~i ea} mi{jdeim }a fhemgi }fj{ }zri ac kalrgiv }~hccjk%Ea~ h~i }fiz mi{jdeim }a laej}a~ SaJR {jdehgjed ca~ h}}hko{hdhje{} }fi sajki ei}ta~o% Tj}fay} je{rik}jae h} }fihrrgjkh}jae ghzi~' cj~ithgg{ fhsi }a arie }fi{i {isi~hg ra~}{ri~ khgg tj}fay} mi}i~ljejed tfi}fi~ }fi rhkoi}{ h~igidj}jlh}i' gihsjed }fi JR RNV{ hem JR rfaei{ sygei~hngi }aiv}i~ehg h}}hko{ {ykf h{ Ma[ hem }agg c~hym%

    Cjdy~i 3 jggy{}~h}i{ }fh} }~hmj}jaehg mh}h cj~ithgg{ kae}~ag

    tfjkf {i~sjki{ rh{{ }f~aydf }fi ka~ra~h}i ri~jli}i~' ny}nz chjgjed }a laej}a~ SaJR }~hccjk h} }fi hrrgjkh}jae gisig'gihsi h {iky~j}z dhr }f~aydf tfjkf JR RNV{' JR rfaei{' hema}fi~ kalraeie}{ h~i ivra{im }a h}}hko%

    Nh{im ae je}i~sjit{ tj}f kalrheji{ }fh} fhsi je{}hggim JR]_JR ]igirfaez\' Ca~~i{}i~ cayem }fh} la{} kalrheji{ chjg }akae{jmi~ }fi yejxyi sygei~hnjgj}ji{ khy{im nz je}id~h}jedsajki je}a h kaesi~dim ei}ta~o r~ja~ }a mirgazlie}%Hg}faydf la{} kalrheji{ }hoi lh`a~ {}ir{ }a ~idygh~gzyrd~hmi }fij~ mh}h ei}ta~o{ }a r~isie} h}}hko{' lhez chjg}a ~ikadejpi }fi eiim }a hmm hmmj}jaehg {iky~j}z lih{y~i{tfie hmmjed sajki }~hccjk }a }fi mh}h ei}ta~o{% Aegz >9)ac }fi kalrheji{ je}i~sjitim yrd~hmim a~ ~irghkim

    Cjdy~i 3 [iky~j}z Dhr Gic} nz ]~hmj}jaehg Mh}h Cj~ithgg

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    10/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 6

    cj~ithgg{ hem `y{} >>) kfhedim }a {iky~i dh}ithz{%Kalrheji{ }fh} ma ea} hmm~i{{ {iky~j}z ~ixyj~ilie}{~j{oivra{jed }fij~ mh}h ei}ta~o{ }a lhgjkjay{ h}}hko{ c~aliv}i~ehg a~ je}i~ehg {ay~ki{% _8\

    SaJR j{ hg{a la~i mjccjkyg} }a {iky~i }fhe a}fi~' la~i}~hmj}jaehg JR {i~sjki{ nikhy{i SaJR kae{j{}{ ac lhezkalrgiv {}hemh~m{ }fh} h~i na}f mzehljk hem' myi }a h

    ~y{f }a lh~oi}' ac}ie raa~gz jlrgilie}im% ]fi~i h~ilhez SaJR {}hemh~m{' jekgymjed }fi [i{{jae Jej}jh}jaeR~a}akag &[JR*' F%;>;' LDKR' F%>=6' hem siema~,r~ar~ji}h~z r~a}akag{!si~{jae{% F%;>; hem [JR h~i }tagihmjed r~a}akag{ y{im ca~ SaJR% F%;>; j{ }fi la{}kallaegz y{im }amhz' ny} [JR j{ kae{jmi~im }fi cy}y~ir~a}akag ca~ SaJR? }fi yejsi~{hg r~a}akag }a je}id~h}i }fisajki ei}ta~o hem r~asjmi }fi cayemh}jae ca~ eithrrgjkh}jae{%

    Fatisi~' j} j{ si~z mjccjkyg} }a {iky~i h [JR {z{}il tj}f }fiky~~ie} {}h}i ac [JR jlrgilie}h}jae{% H{ he ili~djed hem~igh}jsigz jllh}y~i {}hemh~m' [JR mai{ ea} fhsi kgih~gzmicjeim {iky~j}z ~ixyj~ilie}{% ]fi ghko ac cj~l{rikjcjkh}jae{ ae [JR {}hemh~m{ hggat{ siema~{ }a mi}i~ljeifat lykf {iky~j}z }a nyjgm je}a }fi {z{}il% Yeca~}yeh}igz'

    [JR mai{ ea} acci~ hez nyjg},je {iky~j}z% La{} [JRmisigarlie} fh{ caky{im ae cih}y~i {i}{ hemje}i~ari~hnjgj}z' tj}f gjlj}im h}}ie}jae rhjm }a {iky~j}z%Isie jc aei siema~{ kalraeie}{ ma {yrra~} {iky~j}z' hgga}fi~ rh~}jkjrh}jed kalraeie}{ ly{} hg{a {yrra~} {iky~j}zje a~mi~ ca~ j} }a ni y{im%

    SaJR {}hemh~m{ h~i kalrgiv' hem lhez jlrgilie}h}jae{fhsi cght{ &j%i%' r~ad~hlljed lj{}hoi{*' tfjkf gihm }asygei~hnjgj}ji{% Ca~ je{}heki' he jlrgilie}h}jae cght {ykfh{ ea} r~ari~gz kfikojed }fi {jpi ac h r~a}akag ~ixyi{} kheni ivrgaj}im nz he h}}hkoi~ }a hkfjisi yehy}fa~jpim ~ila}ihkki{{ a~ h Ma[ h}}hko%

    Sygei~hnjgj}ji{ h~i hg{a h ~i{yg} ac siema~ ~y{f }a lh~oi}%R~a}akag{ khe ni ij}fi~ jlrgilie}im nz }fi siema~ &j%i%' j}

    j{ yr }a }fi siema~ }a caky{ ae nyjgmjed h {iky~ijlrgilie}h}jae*' a~ ry~kfh{im c~al h {}hko siema~ &jetfjkf kh{i sygei~hnjgj}ji{ h~i {fh~im hlaed hez {z{}ily{jed }fi {}hko*%

    He ivhlrgi ac sygei~hnjgj}ji{ ~i{yg}jed c~al hejlrgilie}h}jae cght }fh} th{ {fh~im hlaed lyg}jrgisiema~{hem isie h siema~{ lyg}jrgi r~amyk}{j{ h{iky~j}z cght je h tjmigz ~irgjkh}im jlrgilie}h}jae ac }fi

    F%;>; r~a}akag }fh} th{ mj{kasi~im nz ~i{ih~kfi~{ h} }fiYejsi~{j}z ac Aygy je Cjeghem% Je @heyh~z >22=' Ljk~a{ac}kaekimim }fh} y{i~{ ac }fi Ei}Lii}jed {ac}th~i ti~ir~anhngz sygei~hngi }a }fi nycci~ asi~cgat nyd{ cayem jejlrgilie}h}jae{ ac }fi F%;>; SaJR r~a}akag' tfjkf kaygmhggat h ~ila}i h}}hkoi~ }a }hoi kae}~ag ac hccik}im {z{}il{%&]fi cght th{ r~isjay{gz hmm~i{{im je Ljk~a{ac}{ Je}i~ei}[iky~j}z hem Hkkigi~h}jae {i~si~ {ac}th~i%* Ljk~a{ac} th{

    aegz aei ac h gh~di eylni~ ac siema~{ jlrhk}im nz }fiF%;>; jlrgilie}h}jae cght% _82\

    Cjdy~i 4 jggy{}~h}i{ }fi nh{jk ghzi~{ ac {ac}th~i y{im je heJR RNVhez ac tfjkf khe fhsi sygei~hnjgj}ji{%

    ]fi hnasi kfhggiedi{ ie}hjgim je {iky~jed }fi SaJR ei}ta~ogihsi SaJR sygei~hngi }a {isi~hg }f~ih}{' jekgymjedihsi{m~arrjed' Ma[ ae {jdehgjed hem limjh {}~ihl{' Ma[ae dh}ithz hem ivj{}jed ]ML {z{}il{' h}}hko{ ivrgaj}jedtihoei{{i{ je }fi sh~jay{ r~a}akag{' mh}h }yeeigjed'h}}hko{ ivrgaj}jed tihoei{{i{ je JR RNV jlrgilie}h}jae'yehy}fa~jpim hkki{{ }a JR RNV{' hem h}}hko{ hdhje{} JRrfaei{!{ac}rfaei{% Hmmj}jaehggz ' SaJR j{ sygei~hngi }a la~i{isi~i h}}hko{ hdhje{} sh~jay{ sajki {i~sjki{' {ykf h{ }aggc~hym' sajki lhjg h}}hko{' hem khgg lhejrygh}jae% ]fi

    ~ilhjemi~ ac }fj{ {ik}jae caky{i{ ae }fi sygei~hnjgj}ji{cayem je }fi lh`a~j}z ac siema~ jlrgilie}h}jae{' h}}hko{}fh} ivrgaj} }fi sygei~hnjgj}ji{' hem }fi gisig ac }f~ih}jlrhk}jed kallae SaJR mirgazlie} {kieh~ja{%

    [JR Sygei~hnjgj}ji{

    [ali [JR!SaJR sygei~hnjgj}ji{ ~i{yg} c~al }fi yemi~gzjedkalry}i~ {z{}il rgh}ca~l' jlrgilie}h}jae nyd{' hem }fiJR ei}ta~o &limjh h}}hko{*% [JR {z{}il{ khe ni h}}hkoimmj~ik}gz a~ jemj~ik}gz nz sj~y{i{!ta~l{' tfjkf hccik} }fiyemi~gzjed ari~h}jed {z{}il' }fi mh}hnh{i' tin {i~si~' a~a}fi~ {yrra~}jed {ac}th~i% H [JR {z{}il khe ni h}}hkoim}f~aydf he jlrgilie}h}jae cght je hez {ac}th~ikalraeie}' jekgymjed }fi [JR {}hko a~ hrrgjkh}jae% ]fj{{ik}jae caky{i{ ae jefi~ie} [JR sygei~hnjgj}ji{ r~i{ie} ca~

    }fi lh`a~j}z ac siema~ jlrgilie}h}jae{' {ykf h{~idj{}~h}jae fj`hkojed' r~avz jlri~{aeh}jae' [JR li{{hdi}hlri~jed' {i{{jae }ih~ mate' Ma[' hem EH] j{{yi{%

    ^idj{}~h}jae Fj`hkojed

    H ~adyi misjki khe ~idj{}i~ j}{igc hem ~ikijsi jekaljed khgg{je}iemim ca~ h gidj}jlh}i rfaei% ^idj{}~h}jae fj`hkojedmi{k~jni{ tfie he h}}hkoi~ jlri~{aeh}i{ h shgjm Y{i~

    Cjdy~i 4 ]zrjkhg JR RNV [ac}th~i [}hko

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    11/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi :

    Hdie} &YH* }a h ~idj{}~h}jae {i~si~' hem }fie ~idj{}i~{j}{igc' khy{jed hgg ~ixyi{}{ je}iemim ca~ }fi gidj}jlh}i YH }ani mj~ik}im }a }fi h}}hkoi~ je{}ihm%

    ^idj{}~h}jae fj`hkojed khe ~i{yg} je }agg c~hym' tfi~i }aggkhgg{ h~i ~ighzim }a h limjh dh}ithz% He hy}alh}im h}}hkokaygm diei~h}i lhez khgg{' ~i{yg}jed je fydi kfh~di{ a~ hMa[ kaemj}jae hdhje{} h dh}ithz a~ RNV% H}}hkoi~{ khe hg{a

    ~imj~ik} hgg jekaljed &rfaei* a~ ay}dajed &dh}ithz* khgg{sjh }fij~ YH }a ihsi{m~ar a~ laej}a~ khgg{%

    ^idj{}~h}jae j{ kallaegz ri~ca~lim y{jed Y{i~ Mh}hd~hlR~a}akag &YMR*' tfjkf j{ eae,{iky~i% Hy}fie}jkh}jae j{ ac}ieea} ~ixyj~im' je chk}' ~idj{}~h}jae {i~si~{ h~i aegz

    ^IKALLIEMIM }a kfhggiedi YH{ ca~ hy}fie}jkh}jae% Isietfie hy}fie}jkh}jae j{ y{im' j} j{ ea~lhggz tiho &hy{i~ehli hem rh{{ta~m' {ie} je }fi kgih~*% [}~aedhy}fie}jkh}jae khe aegz ni y{im jc hgg rh~}jkjrh}jedkalraeie}{ {yrra~} j}%

    Kalr~alj{im [JR rfaei{ khe ni y{im }a ~ikasi~rh{{ta~m{ ca~ y{i je ~idj{}~h}jae fj`hkojed a~ dyi{{jedrh{{ta~m{% Kalr~alj{im {ac} rfaei{ lhz hg{a ni y{im }acjem rh{{ta~m{% Jc rh{{ta~m{ h~i ij}fi~ {i} }a h michyg} a~

    diei~h}im likfhejkhggz &i%d%' kalrhez,8>;= ca~iv}ie{jae 8>;=*' he h}}hkoi~ lhz ni hngi }a dyi{{ a}fi~YH rh{{ta~m{% Mjk}jaeh~z,{}zgi h}}hko{ h~i hg{a hngi }a~ikasi~ {}~aed rh{{ta~m{% Hmmj}jaehggz' he je}i~ehg a~iv}i~ehg h}}hkoi~ khe cj{f ca~ ~idj{}i~hngi YH hmm~i{{i{ }anyjgm h mj~ik}a~z%

    R~avz Jlri~{aeh}jae

    H rfaei a~ r~avz {i~si~ khe ni }~jkoim je}a kallyejkh}jedtj}f h ~adyi r~avz {i~si~% Ay}dajed khgg{ c~al h YH h~i{ie} ij}fi~ mj~ik}gz a~ sjh je}i~siejed r~avz!r~avji{ }a hr~avz je }fi malhje ac }fi khggim rh~}z% R~avzjlri~{aeh}jae mi{k~jni{ }fi {j}yh}jae tfi~i he h}}hkoi~{r~avz je}i~kir}{ }fi{i khgg{% R~avz jlri~{aeh}jae khe akky~}f~aydf rhkoi} je}i~kir}jae' malhje ~idj{}~h}jae fj`hkojed'hem Malhje Ehli [i~si~ &ME[* jlri~{aeh}jae' hggatjedhe h}}hkoi~ }a ihsi{m~ar' }~hko' ~imj~ik}' hem ngako khgg{%

    Nz jlri~{aeh}jed h r~avz aeki' he h}}hkoi~ khe ca~di ;28Lasim Ri~lheie}gz ~i{rae{i{' tfjkf khy{i{ }fi khggi~hem je}i~siejed r~avji{ }a y{i he h}}hkoi~${ r~avz je{}ihmac }fi a~jdjehggz je}iemim r~avz% Nz jlri~{aeh}jed hea~dhejph}jae{ r~avz' h}}hkoi~{ khe ~imj~ik} jekaljed [JRkhgg{ sjh }fij~ YH{ }a ihsi{m~ar hem }~hko khgg{' a~ ri~ca~l{igik}jsi hem tfagi{hgi Ma[%

    Li{{hdi ]hlri~jed

    Li{{hdi }hlri~jed akky~{ tfie he h}}hkoi~ je}i~kir}{ hemlamjcji{ rhkoi}{ ni}tiie r~avji{% YH{ lhz {iky~i [JRli{{hdi{ y{jed [iky~i Lyg}jry~ra{i Je}i~ei} LhjgIv}ie{jae &[!LJLI* }a hy}fie}jkh}i hem ar}jaehggz iek~zr}

    }fij~ }iv}' tj}f aegz }fa{i ra~}jae{ eiimim }a migjsi~ }firhkoi} ~ilhjejed je }fi kgih~% Isie tj}f [!LJLI' h}}hkoi~{lhz }hlri~ tj}f ~ay}jed jeca~lh}jae }a kaecy{i r~avji{&i%d%' }fiz lhz jekgymi n~ahmkh{} hmm~i{{i{ a~ gaar{ je heh}}ilr} }a asi~gahm {i~si~{*%

    Li{{hdi }hlri~jed khe khy{i y{i~{ }a ni njggim jeka~~ik}gzca~ khgg{' hem khe lh{o }agg c~hym h}}hko{% Nz lamjczjedrhkoi}{' h}}hkoi~{ khe ~imj~ik} hgg jekaljed khgg{ sjh }fij~YH{ }a ihsi{m~ar ae }fi khgg{% H}}hkoi~{ khe hg{a ngakokhgg{' a~ {iem yeivrik}im khgg{ }f~aydf limjh dh}ithz{'tfjkf khe }ji yr ]ML }~yeojed a~ {tj}kfi{% Hmmj}jaehggz'

    h}}hkoi~{ khe y{i li{{hdi }hlri~jed }a ~imj~ik} cy}y~i [JRkhgg{ sjh jlri~{aeh}jed r~avji{' tfjkf khe kae}jeyi }a }~hkokhgg{ hc}i~ }fi h}}hko j{ kalrgi}im a~ micih}im%

    [i{{jae ]ih~ Mate

    Aeki h khgg j{ i{}hngj{fim' ij}fi~ rh~}z khe lamjcz a~ iem j}%Jc h}}hkoi~{ an{i~si }fi jej}jhg li{{hdi{' }fiz khe ca~di hNZI a~ ~i,JESJ]I li{{hdi }a {fy} mate a~ hg}i~ }fi{i{{jae% ]fi gh}}i~ kh{i hggat{ }fi h}}hkoi~ }a ~imj~ik}limjh' tfjkf hggat{ ihsi{m~arrjed% Je diei~hg' }ih~mateli{{hdi{ c~al he h}}hkoi~ h~i jlra{{jngi }a r~isie}'nikhy{i }fi eiki{{h~z cjigm{ ly{} ni {ie} je }fi kgih~ }ahggat ~ay}jed%

    Ga{{ ac {i~sjki j{ }fi r~jlh~z hccik} ac {i{{jae }ih~matehem j{ h gjoigz ~i{yg} ac jeka~~ik}gz jlrgilie}im h}}ilr}{ }a~ii{}hngj{f {i{{jae{ }a jlrgilie} ihsi{m~arrjed%^imj~ik}jed limjh }a n~ahmkh{} hmm~i{{i{ kaygm khy{i hMa[ h}}hko% imj~ik}jed limjh {i{{jae{ }a h limjh dh}ithzkaygm khy{i h Ma[ h}}hko ae }fi dh}ithz%

    Ma[

    Miejhg ac {i~sjki akky~{ tfie he h}}hkoi~ {iem{ h tigg,

    k~hc}im rhkoi} }a }fi }h~di} {z{}il' khy{jed j} }a chjg'~i{yg}jed je h ga{{ ac cyek}jae ca~ he JR RNV a~ a}fi~ SaJRkalraeie}% Ma[ hg{a akky~{ tfie he h}}hkoi~ khy{i{ hcgaam ac rhkoi}{ }a ni {ie}' asi~tfigljed }fi }h~di} hemr~isie}jed j} c~al fhemgjed gidj}jlh}i ~ixyi{}{%

    Ma[ hdhje{} h [JR {z{}il j{ {jlrgi~ }a hkfjisi }fhe Ma[hdhje{} a}fi~ mh}h {z{}il{' myi }a }fi Xa[ ~ixyj~ilie}{ac SaJR% Ma[ hdhje{} h [JR {z{}il khe akky~ }f~aydf~idj{}~h}jae fj`hkojed' r~avz jlri~{aeh}jae' {i{{jae }ih~

    mate' li{{hdi }hlri~jed' a~ }fi{i hmmj}jaehg lihe{0

    Tiho hy}fie}jkh}jae ae r~avji{ ca~ki{ }fil }a fhemgi{jdehgjed rhkoi} cgaam{%

    Y{jed ME[ }a ~i{agsi ~ila}i fa{}{ j{ r~ara{im ca~ [JRhmm~i{{ ~i{agy}jae asi~ }fi Je}i~ei}% Jc }fi ME[ {i~si~

    fh{ jeka~~ik} mh}h a~ fh{ chjgim' h Ma[ kaemj}jae ~i{yg}{% Ma[ khe ~i{yg} je }h~di}im a~ gh~di,{khgi ga{{ ac cyek}jae

    ca~ }fi [JR {z{}il% H kalr~alj{im RK khe ca~di Sjh{hem k~ih}i ~imj~ik}jae }a h eae,ivj{}ie} fa{} a~ h kj~kyj}

    Sjh rh}f% Y{jed n~ahmkh{} hmm~i{{i{ khy{i{ }~hccjk

    hlrgjcjkh}jae%

    [JR ~ixyj~i{ cj~ithgg ra~}{ }a ni arieim ca~ YMR {}~ihl{'hggatjed ra{{jngi cgaamjed ac YH{% Tiho hy}fie}jkh}jaelikfhej{l{ ca~ki YH{ &jekgymjed limjh dh}ithz{* }afhemgi YMR cgaamjed% Cj~ithgg{ ly{} lhoi ch{}'je}iggjdie} mikj{jae{ hnay} tfjkf YMR ra~}{ h~i je y{i nz

    shgjm [JR khgg{%

    Cj~ithgg{ mi}i~ljejed tfjkf YMR ra~}{ h~i je y{i nz [JR}~hccjk hem tfjkf ra~}{ {faygm ni miejim kaygm ni {gatim

    jc YMR {}~ihl{ h~i {ie} }a ~hemal ra~}{' kae{yljed hggr~aki{{jed ~i{ay~ki{ nz ca~kjed }fi cj~ithgg }a mi}i~ljei}fi {}h}i ac hgg YMR ra~}{%

    ]fi >22; K[J!CNJ Kalry}i~ K~jli hem [iky~j}z [y~siz~ira~}im }fh} Ma[ fhm ~j{ie }a ni }fi {ikaem la{}ivrie{jsi kalry}i~ k~jli hlaed {y~siz ~i{raemie}{ % _4\Je }fi >22= {y~siz' Ma[ ili~dim h{ }fi la{} ivrie{jsikalry}i~ k~jli &~irghkjed }fic} ac r~ar~ji}h~z jeca~lh}jae'tfjkf fhm niie }fi gihmjed ga{{ ca~ 9 kae{iky}jsi zih~{*%]fi kalnjeim Ma[ ga{{i{ ca~ na}f zih~{ ivkiimim -:8ljggjae% _6\

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    12/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 82

    Kae{jmi~jed }fi ky~~ie}gz {lhgg ri~kie}hdi ac SaJRmirgazlie}{' Ma[ h}}hko{ hdhje{} SaJR {z{}il{ kheea} zi}ni h {jdejcjkhe} kae}~jny}a~ }a }fi{i {}h}j{}jk{% Fatisi~'kae{jmi~jed Ma[ hdhje{} h [JR {z{}il j{ {jlrgi~ }a hkfjisi}fhe Ma[ hdhje{} a}fi~ mh}h {z{}il{' }fi >22; hem >22={y~siz{ rhje} he aljeay{ rjk}y~i ac cy}y~i MA[ h}}hko{ aeeae,{iky~i sajki {i~sjki{%

    EH] ]~he{si~{hg J{{yi{EH] j{ he Je}i~ei} {}hemh~m }fh} iehngi{ h GHE }a y{i aei{i} ac JR hmm~i{{i{ ca~ je}i~ehg }~hccjk hem h {ikaem {i} achmm~i{{i{ ca~ iv}i~ehg }~hccjk' hggatjed }fi ie}i~r~j{i }a{fjigm je}i~ehg hmm~i{{i{ c~al }fi ryngjk Je}i~ei}% EH]}~he{gh}i{ }fi je}i~ehg gakhg hmm~i{{i{ }a dganhggz yejxyi JRhmm~i{{i{ nica~i {iemjed rhkoi}{ }a }fi ay}{jmi ei}ta~o%EH] j{ kallae je }fi ky~~ie} JRs= Je}i~ei}' hem j{i{{ie}jhg je mihgjed tj}f }fi gjlj}im hmm~i{{ {rhki r~angilr~i{ie} tj}f JRs=%

    [JR jdea~i{ }fi ivj{}ieki ac EH] hem h{{yli{ iem,}a,iemmigjsi~z ac rhkoi}{% ]fi [i{{jae Mi{k~jr}jae R~a}akag &[MR*ghzi~ ac [JR kallyejkh}i{ }fi JR hmm~i{{i{ ac limjhiemraje}{ ni}tiie YH{% Jc EH] lamjcji{ }fi JR hmm~i{{i{'kaeeik}jae{ kheea} ni lhmi' {a Nhko,}a,Nhko Y{i~ Hdie}{&N>NYH{* {}~hmmgi h EH] h} }fi ri~jli}i~ hem lamjcz [MR}a iehngi }fi kaeeik}jae%

    ]a ni hngi }a lamjcz JR hmm~i{{i{' N>NYH{ ~ixyj~i [MR }ani yeiek~zr}im hem yehy}fie}jkh}im% Tfie N>NYH{ h~iy{im' j} j{ jlra{{jngi }a y{i [!LJLI }a {iky~i {jdehgjed' {ah gh~di ~hedi ac h}}hko{ h~i ra{{jngi' jekgymjed ~idj{}~h}jaefj`hkojed' r~avz jlri~{aeh}jae' {i{{jae }ih~ mate'li{{hdi }hlri~jed' hem Ma[' rgy{ h}}hkojed }fi N>NYH }adh}fi~ }fi {jdehgjed mh}h j} r~aki{{i{%

    JR RNV Sygei~hnjgj}ji{

    JR,iehngim RNV{ h~i }~hmj}jaehg {z{}il{ y{jed h ]ML,nh{im{tj}kfjed chn~jk% JR RNV{ &hg{a mi{k~jnim h{ kgjie}!{i~si~'khgg lhehdi~{' limjh {i~si~{' i}k%* h~i {i~si~ rgh}ca~l{

    ~yeejed Tjemat{' Gjeyv' a~ {ali sh~jhe} ac Yejv' tfjkfr~asjmi sajki {i~sjki{ {agigz ae }fi JR ei}ta~o hem ~ixyj~ih limjh dh}ithz ca~ kallyejkh}jae }a }fi R[]E%Hmmj}jaehg {i~si~{ r~asjmi ~imyemhekz a~ a}fi~ hrrgjkh}jae{{ykf h{ sajki lhjg hem r~i{ieki%

    ]fi la{} k~j}jkhg sygei~hnjgj}ji{ h~i }fa{i r~i{ie} ae JRRNV{tfjkf h~i }fi fih~} ac hez SaJR ei}ta~o% Myi }ana}f }fij~ k~j}jkhg ~agi je r~asjmjed sajki {i~sjki hem }fikalrgivj}z ac }fi {ac}th~i ~yeejed ae }fil' JR RNV{ h~i}fi r~jlh~z }h~di} ca~ h}}hkoi~{% He JR RNV{ lyg}jrgisygei~hnjgj}ji{ h~i mj{ky{{im nigat%

    Eae,[iky~i Ari~h}jed [z{}il![yrra~} [i~sjki{

    JR RNV{ ~ye kalli~kjhg ari~h}jed {z{}il{ jekgymjedTjemat{ >222' Gjeyv' hem sh~jhe}{ ac Yejv' ihkf ac tfjkfkh~~z tigg,oeate sygei~hnjgj}ji{ }zrjkhggz hkki{{im }f~aydfei}ta~o {i~sjki{% ]fi eylni~ ac sygei~hnjgj}ji{ miriem{ ae}fi ari~h}jed {z{}il' j}{ si~{jae' hem tfjkf ei}ta~o{i~sjki{ h~i r~i{ie}!iehngim% Ca~ ivhlrgi' }fi Kj{ka KhggLhehdi~ ~ye{ ae Tjemat{ >222 hem fh{ h fj{}a~z acsygei~hnjgj}ji{%

    La{} JR RNV{ ~ye {yrra~}jed {i~sjki{' {ykf h{ h tin {i~si~a~ mh}hnh{i% ]fi{i {i~sjki{ h~i y{im asi~ }fi ei}ta~o' hemgjoi }fi ari~h}jed {z{}il' khe ni ivrgaj}im% Ca~ je{}heki'}fi Kj{ka Khgg Lhehdi~ y{i{ JJ[ hem [XG [i~si~' tfjkf

    fhsi oeate sygei~hnjgj}ji{% ]fi Kami ^im sj~y{ j{ heivhlrgi ac he h}}hko }fh} }h~di}{ JJ[' hem }fi [XG[ghlli~ ta~l j{ he ivhlrgi ac he h}}hko }fh} }h~di}{ [XG[i~si~%

    Ari~h}jed {z{}il hem {yrra~} {i~sjki sygei~hnjgj}ji{ khe niivrgaj}im }a khy{i h chjgy~i' a~ hggat yehy}fa~jpim hkki{{'iehngjed kaecjdy~h}jae lamjcjkh}jae hem hkki{{ }a {ie{j}jsi

    mh}h' jekgymjed sajki lhjg li{{hdi{ hem KM^%

    Yehy}fa~jpim Hmljej{}~h}jsi Hkki{{

    JR RNV{ h~i lhehdim }f~aydf h tin,nh{im je}i~chki a~ei}ta~o kgjie}% Jc }fi hy}fie}jkh}jae li}fam j{kalr~alj{im' he h}}hkoi~ fh{ hmljej{}~h}jsi hkki{{ }a }fiJR RNV% Jc h tin {i~si~ a~ kgjie} y{i{ h tiho r~a}akag }aivkfhedi hy}fie}jkh}jae jeca~lh}jae' j} j{ ra{{jngi }a kaggik}hem ivrgaj} j}%

    Sajki Hrrgjkh}jae Jlrgilie}h}jae H}}hko

    Sygei~hnjgj}ji{ hg{a ivj{} je }fi hk}yhg sajki hrrgjkh}jae{'tfjkf hkkir} {jdehgjed ~ixyi{}{ c~al }fi ei}ta~o &je {alikh{i{ he iv}i~ehg ei}ta~o*% Nikhy{i }fi sajki hrrgjkh}jae{h~i cih}y~i,~jkf' }fi~i tjgg ni }fi {jljgh~ }zri{ ac

    jlrgilie}h}jae sygei~hnjgj}ji{% ]fj{ tjgg kae}jeyi h{{}hemh~m{ isagsi hem d~at je {kari% Siema~{ tjgg nikae{}he}gz ta~ojed }a oiir yr tj}f }fi{i {}hemh~m{ hem}fij~ jlrgilie}h}jae{ tjgg jekgymi sygei~hnjgj}ji{% Gh~disiema~{ h~i gjoigz }a fhsi }fij~ ate jlrgilie}h}jae{ hem}fi {lhggi~ aei{ tjgg y{i r~a}akag {}hko{ c~al a}fi~siema~{ h{ nyjgmjed ngako{% Tfie h sygei~hnjgj}z j{ cayem' j}tjgg jlrhk} lhez y{i~{ hem ra{{jngz lyg}jrgi siema~jlrgilie}h}jae{%

    Sajki hrrgjkh}jae sygei~hnjgj}ji{ khe ni ivrgaj}im }a khy{i hMa[' r~asjmi yehy}fa~jpim hkki{{' a~ ri~ca~l yehy}fa~jpimhk}jae{ {ykf h{ }i~ljeh}jed h khgg' hggatjed h }agg khgg' a~jlrhk}jed h y{i~{ rfaei {i~sjki{% Jc yehy}fa~jpim hkki{{ j{an}hjeim' hkki{{ }a kaecjdy~h}jae hem mh}h j{ hg{a ra{{jngi%

    Sajki Hrrgjkh}jae Lhejrygh}jaeSajki hrrgjkh}jae{ tjgg hg{a ni sygei~hngi }a {jdehgjedlhejrygh}jae a~ h}}hko{ hdhje{} tiho hy}fie}jkh}jae% Ca~ivhlrgi' yehy}fa~jpim y{i~{ tjgg hkki{{ }agg gjei{' gj{}ie }asajki lhjg' hem lhejrygh}i r~i{ieki% La{} ac }fihy}fie}jkh}jae jeca~lh}jae c~al JR rfaei{ j{ ij}fi~ tihohem!a~ {ie} je }fi kgih~% Jc h}}hkoi~{ khe hy}fie}jkh}i}fil{igsi{ h{ h r~jsjgidim &a~ jlra~}he}* y{i~' }fiz tjggfhsi hkki{{ }a }fh} y{i~{ {i~sjki%

    Ei}ta~o hem Limjh Sygei~hnjgj}ji{

    SaJR }~he{ra~} j{ r~asjmim hk~a{{ }fi GHE' THE' hemJe}i~ei}% SaJR hmljej{}~h}jae' khgg kae}~ag {jdehgjed' hem }fisajki limjh }~hsig asi~ }fi {hli rfz{jkhg ei}ta~o h{ a}fi~JR {i~sjki{' kae{j{}jed ac {tj}kfi{' ~ay}i~{' cj~ithgg{' hem

    khngjed% JR rfaei{ ivkfhedi {jdehgjed tj}f JR RNV{ }ai{}hngj{f khgg{' ny} khgg limjh j{ ivkfhedim mj~ik}gzni}tiie JR Rfaei{% Hg}faydf j}{ kalraeie}{ h~i gi{{sygei~hngi }fhe JR RNV{' h{ mi{k~jnim nigat' }fi ei}ta~oj}{igc khe ni ivrgaj}im }a jlrhk} sajki {i~sjki{%

    Ma[ ae [jdehgjed

    SaJR ei}ta~o kalraeie}{ }fh} hkkir} {jdehgjed h~isygei~hngi }a Ma[% Jc he h}}hkoi~ diei~h}i{ h cgaam acki~}hje {jdehgjed ~ixyi{}{ &i%d%' khgg {i}yr ~ixyi{}{* }a h JRRNV' limjh dh}ithz' a~ JR Rfaei' }fi }h~di}im misjki tjgg

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    13/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 88

    ni yehngi }a iccjkjie}gz r~aki{{ gidj}jlh}i ~ixyi{}{% ]fihk}yhg gisig ac sygei~hnjgj}z miriem{ ae misjki {i} yr &j%i%'hy}fie}jkh}jae {kfili' tfi}fi~ Sj~}yhg GHE{ &SGHE{* h~iy{im' i}k%*% Jc JR {ac}rfaei{ h~i hggatim' h ~adyihrrgjkh}jae kaygm ivrgaj} }fj{ sygei~hnjgj}z%

    [jdehgjed Ma[ h}}hko{ ae limjh dh}ithz{ khe kae{yli hgghshjghngi ]ML nhemtjm}f' r~isie}jed a}fi~ ay}nayem hem

    jenayem khgg{ hem hccik}jed a}fi~ {j}i{ }fh} y{i ]ML% Ca~ivhlrgi' ki~}hje ie}i~}hjelie} r~asjmi~{ tfa {i} yr ]ML8,622 eylni~{ ca~ sa}jed ti~i jlrhk}im nz jemjsjmyhg{diei~h}jed fyem~im{ a~ }fay{hem{ ac SaJR ~ixyi{}{ }f~aydfh n~ahmnhem {i~sjki r~asjmi~' tfjkf je }y~e kaesi~}im }fil}a ]ML hem {ie} }fil ae%

    Ma[ ae Limjh [i{{jae{

    Ma[ ae limjh j{ h {i~jay{ r~angil% SaJR limjh' tfjkf j{ea~lhggz kh~~jim tj}f ^]R' j{ sygei~hngi }a hez h}}hko }fh}kaedi{}{ }fi ei}ta~o a~ {gat{ }fi hnjgj}z ac he iem misjki&rfaei a~ dh}ithz* }a r~aki{{ }fi rhkoi}{ je ~ihg }jli% Heh}}hkoi~ tj}f hkki{{ }a }fi ra~}jae ac }fi ei}ta~o tfi~ilimjh j{ r~i{ie} {jlrgz eiim{ }a je`ik} gh~di eylni~{ acij}fi~ ]R rhkoi}{ a~ fjdf Xa[ rhkoi}{' tfjkf tjgg kae}iemtj}f }fi gidj}jlh}i ^]R rhkoi}{%

    SaJR limjh {i{{jae{ h~i si~z {ie{j}jsi }a gh}iekz hem `j}}i~%]fiz h~i {ie} raje},}a,raje} hem' a}fi~ }fhe limjhdh}ithz{' ma ea} }zrjkhggz da }f~aydf JR RNV{% SaJR~ixyj~i{ Xa[ ae }fi ei}ta~o' tfjkf ~ixyj~i{ h {tj}kfimkaeeik}jae hem h {kfili ca~ r~ja~j}jpjed sajki }~hccjk%SGHE{ figr r~asjmi Xa[ hem hjm {iky~j}z%

    He h}}hkoi~ tj}f hkki{{ }a }fi ei}ta~o tfi~i }fi limjh{i{{jae{ h~i hk}jsi' hem tfa khe diei~h}i rhkoi}{ tj}ffjdf Xa[ ghnigjed' tjgg jlrhk} }fi limjh {i{{jae{% ]fi la{}sygei~hngi rh~}{ ac }fi ei}ta~o h~i {fh~im {idlie}{' {ykfh{ }fi THE a~ ye}~y{}im gaed,fhyg ei}ta~o% ]fi hlaye} acfjdf Xa[ }~hccjk hggathngi ae h {fh~im THE j{ cjej}i hemsygei~hngi }a Ma[%

    Ihsi{m~arrjed

    Y{i~{ ivrik} sajki khgg{ }a ni r~jsh}i' h{ arra{im }a ilhjga~ Je{}he} Li{{hdjed &JL*' tfi~i }fi~i j{ ea} y{yhggz heivrik}h}jae ac r~jshkz% Hg}faydf {ali SaJR khgg{ h~iiek~zr}im' la{} h~i ea}% Hmmj}jaehggz' iek~zr}jae tj}fay}{}~aed hy}fie}jkh}jae kheea} dyh~he}ii r~jshkz' nikhy{irh~}jkjrhe}{ khe} ni {y~i he h}}hkoi~ j{ ea} hkki{{jed }filimjh nz ri~ca~ljed h Lhje,Je,]fi,Ljmmgi &LJ]L* h}}hko%Jc he h}}hkoi~ dhje{ hkki{{ }a yeiek~zr}im limjh' {jlrgi}aag{ {ykf h{ SALJ]' tfjkf kaesi~}{ he JR rfaeikaesi~{h}jae je}a h %THS cjgi' khe ni y{im }a gj{}ie }a a~mj{}~jny}i hymja%

    Jc he h}}hkoi~ fh{ hkki{{ }a }fi ra~}jae ac }fi ei}ta~otfi~i h khgg j{ nijed }~he{ra~}im' }fi khgg khe ni ~ika~mim

    y{jed h rhkoi} {ejcci~ a~ LJ]L hrrgjkh}jae% H rhkoi} {ejcci~~ika~m{ rhkoi}{ hem {hsi{ }fil }a h cjgi% H }aag {ykf h{SALJ] kaesi~}{ }fi rhkoi}{ je}a h %THS cjgi }fh} khe nimj{}~jny}im hem rghzim% H rhkoi} {ejcci~ khe kaggik} limjhh{ tigg h{ {jdehgjed' tfjkf khe jekgymi }aei{' {ykf h{ M]LC}aei{ y{im ca~ hkkaye} kami{% ]fi lh`a~j}z ac SaJRje{}hggh}jae{ y{i {tj}kfim I}fi~ei} ei}ta~o{' ac}ie tj}fSGHE{' lhojed j} la~i mjccjkyg} }a {ejcc rhkoi}{%

    SaJR khgg{ }hojed rghki tj}fje }fi GHE h~i h{ sygei~hngi }aihsi{m~arrjed h{ a}fi~ kallyejkh}jae {i~sjki{' {ykf h{ilhjg hem JL% ]~hmj}jaehg sajki khgg{ h~i ri~kijsim }a ni

    la~i {iky~i hem la~i {yj}hngi ca~ {ie{j}jsikallyejkh}jae{ nikhy{i }~hmj}jaehg &hem SaJR* khgg{ y{i~ihg,}jli r~a}akag{' h{ arra{im }a {}a~i,hem,ca~th~mr~a}akag{%

    LJ]L h}}hko{ khe hg{a akky~ hem micih} iek~zr}jae ae }fiJR rfaei% Ca~ ivhlrgi' }fi LJ]L hrrgjkh}jae hk}{ h{ }fi JRRNV' je}i~hk}{ tj}f }fi ~ihg JR RNV' hem }~jko{ }fi {ay~ki

    hem mi{}jeh}jae JR rfaei{ je}a {iemjed }fi limjh }a hehrrgjkh}jae }fh} khe ~ika~m j}% Je }fj{ kh{i' }fi khgg {jdehgjedhem limjh khe ni ~ika~mim' laej}a~im' hem lhejrygh}im%

    Mh}h ]yeeigjed

    H{ SaJR kaeeik}jae{ h~i {i} yr }a he ye}~y{}im ei}ta~o'hmmj}jaehg ra~}{ ly{} ni arieim je }fi ri~jli}i~ cj~ithgg%H{ kallaegz akky~{ tj}f ra~} 62 &F]]R*' a}fi~ {i~sjki{tjgg }yeeig }f~aydf }fi eit SaJR ra~}{% ]fi{i hrrh~ie}

    sajki khgg{ tjgg ni mh}h khgg{' }yeeigjed }f~aydf }ficj~ithgg hem th{}jed fjdf Xa[ nhemtjm}f% ]fj{ {hli j{{yiivj{}{ ca~ }fi THE' tfi~i r~ikjay{ fjdf Xa[ nhemtjm}f j{th{}im nz mh}h khgg{% Nh{jkhggz' }fi{i h~i eit diei~h}jaelamil{' tfjkf ly{} ni mi}ik}im hem }i~ljeh}im je a~mi~}a lhje}hje Xa[%

    JR Rfaei![ac} Rfaei Sygei~hnjgj}ji{

    JR rfaei{ h~i {rikjhgjpim kalry}i~{ mi{jdeim }a r~asjmisajki {i~sjki asi~ }fi JR ei}ta~o hem y{i ilnimmimhrrgjkh}jae,{rikjcjk a~ diei~hg,ry~ra{i ari~h}jed {z{}il{%[ac}rfaei{ h~i hrrgjkh}jae{ }fh} ~ye ae RK{ hem r~asjmi hrfaei je}i~chki hem cyek}jaehgj}z% [rikjcjk sygei~hnjgj}ji{h~i nijed cayem ae JR Rfaei{ h} h ch{}i~ ~h}i }fhe ae JRRNV{' lhjegz nikhy{i }fi rfaei{ h~i chj~gz kfihr hem ih{zca~ fhkoi~{ }a {i} yr hem ivri~jlie} tj}f% [jljgh~sygei~hnjgj}ji{ ivj{} tj}f JR {ac}rfaei{ nikhy{i siema~{ac}ie y{i si~z {jljgh~ {ac}th~i%

    JR Rfaei{ hem {ac}rfaei{ h~i }fi gih{} k~j}jkhg rh~} ac }fiSaJR ei}ta~o' ny} }fiz h~i hg{a }fi la{} kallae hemgih{} kae}~agghngi kalraeie}{% ]fj{ j{ i{rikjhggz }~yi ca~ JR

    {ac}rfaei{' tfjkf h~i hrrgjkh}jae{ ~yeejed ae RK{%

    Tfjgi JR Rfaei{ h~i chj~gz eit' }fi~i h~i lhezsygei~hnjgj}ji{ r~i{ie}' sj~}yhggz hgg ac tfjkf h~i kallae aea}fi~ JR misjki{% ]fj{ j{ hgh~ljed' nikhy{i j} jemjkh}i{{iky~j}z fh{ ~ikijsim h gat r~ja~j}z% Rfaei{ ~ye diei~hg,ry~ra{i ari~h}jed {z{}il{ hem ly{} {yrra~} ~jkf {jdehgjedh{ h nh{j{ ca~ eit hrrgjkh}jae{% ]fiz h~i hg{a jeivrie{jsi&kfiko iNhz ca~ JR rfaei{* hem ih{z ca~ h}}hkoi~{ }ahkxyj~i hem ivri~jlie} tj}f% [}ymji{ {ykf h{ }fi aei h}ttt%{z{,{iky~j}z%kal' hg}faydf {gjdf}gz mh}im' hkky~h}igzjggy{}~h}i{ }fi }zri{ ac j{{yi{ r~i{ie} tj}f {ali rfaei{%

    ]fi {rikjcjk sygei~hnjgj}ji{ mj{ky{{im je }fj{ {ik}jae fhsiniie a~ khe ni cjvim' ny} }fi y{i~ j{ ~ixyj~im }a rh}kf }fi{ac}th~i ae }fi JR Rfaei% [jljgh~ sygei~hnjgj}ji{ ivj{} tj}f

    JR {ac}rfaei{ nikhy{i siema~{ ac}ie y{i si~z {jljgh~{ac}th~i% JR rfaei![ac} rfaei sygei~hnjgj}ji{ jekgymi0

    Yehy}fa~jpim ^ila}i Hkki{{

    Lyg}jrgi JR Rfaei{' jekgymjed }fa{i c~al Kj{ka &tfie y{jed[ojeez* hem Rjed}ig' r~asjmi h tin {i~si~ ca~hmljej{}~h}jae% ]fi tin {i~si~{ y{i nh{i3= iekamimy{i~ehli!rh{{ta~m rhj~{' tfjkf jc ~i}~jisim c~al }fiei}ta~o' h~i ih{jgz mikamim%

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    14/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 8>

    ]fi Rjed}ig JR Rfaei {fjr{ tj}f ea hmljej{}~h}a~ rh{{ta~mca~ }fi hmlje hkkaye}' hem }fi hkkaye} ehli kheea} nikfhedim% Jc h rh{{ta~m j{ ea} jlrgilie}im' he h}}hkoi~ khedhje na}f ~ila}i hem gakhg hmljej{}~h}jsi hkki{{%

    Lyg}jrgi JR Rfaei{' jekgymjed }fa{i c~al Kj{ka hem Rjed}ig'r~asjmi h ]igei} {i~si~% Ca~ na}f }zri{ ac rfaei{' hny{i ac}fi ]igei} cih}y~i r~asjmi{ ari~h}jed {z{}il gisig hkki{{%

    ]igei} hny{i gihm{ }a cygg hkki{{ ac }fi JR Rfaei ari~h}jed{z{}il%

    Hmljej{}~h}jsi hkki{{ }a }fi JR Rfaei hggat{ h}}hko{nizaem Ma[% Ca~ ivhlrgi' tfie y{jed [JR' h LJ]L r~avzkhe ni kaecjdy~im' djsjed }fi h}}hkoi~ hkki{{ }a }fi{jdehgjed hem limjh {}~ihl{' tfjkf j{ h la~i gjoigz lihe{ac an}hjejed {jdehgjed hem limjh }fhe {ejccjed%

    ]fi Kj{ka H]H,863 hehgad }igirfaei hmhr}i~ je}i~chki{hehgad rfaei{ }a h SaJR ei}ta~o' hem khe ni kaecjdy~imsjh h tin je}i~chki% Aei si~{jae ac }fj{ misjki mj{rghz{ j}{kaecjdy~h}jae {k~iietj}f rh{{ta~mjc {ie} h {jedgi nz}iF]]R RA[]% [ykf kallhem{ khe ni y{im }a ~ikaecjdy~i}fi misjki%

    Ma[Ca~ lyg}jrgi JR Rfaei{' he hy}fie}jkh}im y{i~ khe kfhedi{i}}jed{ }a k~ih}i h Ma[ kaemj}jae ca~ }fi JR Rfaei% Ca~ivhlrgi' Kj{ka JR Rfaei{ khe ni ca~kim }a ~i{}h~} nz y{jedkallae Ma[ hrrgjkh}jae{' jekgymjed `ag}' frjed>'

    }~h{f' i}k% Kj{ka JR Rfaei{ khe hg{a ni lhmi }a ~i{}h~} jc{ie} h {rikjcjkhggz kae{}~yk}im Fzri~]iv} ]~he{ci~ R~a}akag&F]]R* ~ixyi{}% Hez hk}jsi khgg tjgg ni }i~ljeh}im je }fj{kh{i%

    Ca~ {rikjcjk Rjed}ig JR Rfaei{' he hy}fie}jkh}im y{i~ khe~i{i} }fi rfaei' tfjkf ~ixyj~i{ =9 {ikaem{ }a ~i{i}%Ki~}hje shgyi{ khe ni {i} tfjkf r~isie} }fi JR rfaei c~al~inaa}jed' tfjkf ~ixyj~i{ h gakhg yrmh}i% Jc ivrgaj}im ca~fyem~im{ a~ }fay{hem{ ac rfaei{ tj}fje he ie}i~r~j{i' hd~ih} mihg ac icca~} taygm ni ~ixyj~im }a ~ikasi~%

    Yehy}fa~jpim Gakhg Hkki{{

    JR Rfaei{ h~i si~z sygei~hngi jc he h}}hkoi~ fh{ rfz{jkhghkki{{ }a }fi rfaei j}{igc% La{} JR Rfaei{ hy}fie}jkh}i}fil{igsi{ ij}fi~ aegz aeki a~ ri~jamjkhggz' hem ma ea}~ixyj~i hy}fie}jkh}jae ca~ ihkf y{i &tfjkf taygm niyehkkir}hngi ca~ }fi hsi~hdi y{i~ hem ca~ :88 {j}yh}jae{*%

    JR Rfaei{ h~i fjdfgz r~ad~hllhngi' {a he hy}fie}jkh}imy{i~ khe }~he{ci~' ngako' ca~th~m khgg{' i}k% Hmmj}jaehggz' heh}}hkoi~ tj}f gakhg hkki{{ khe je{}hgg h fyn ni}tiie }fi JRRfaei hem }fi {tj}kf hem ihsi{m~ar ae rhkoi}{%

    ]fi Kj{ka JR Rfaei{ gakhggz {}a~i }fij~ kaecjdy~h}jae% La{}ac }fj{ mh}h j{ hkki{{jngi sjh }fi [i}}jed{ ny}}ae% Nzmichyg}' }fi{i {i}}jed{ h~i gakoim' ny} khe ni lamjcjim sjh h

    makylie}im' ny} eae,kaecjdy~hngi {rikjhg oiz kalnjeh}jae+%

    ]fi Rjed}ig JR Rfaei{ khe ni ~i{i} }a michyg}{' kfhedjedei}ta~o {i}}jed{ tj}fay} ~ixyj~jed hy}fie}jkh}jae% My~jedhy}fie}jkh}jae' h ra}ie}jhg h}}hkoi~ khe sjit }fi rh{{ta~m'tfjkf j{ mj{rghzim r~ja~ }a nijed ~irghkim nz he h{}i~j{o%

    R~a}akag Jlrgilie}h}jae H}}hko

    H{ r~isjay{gz mj{ky{{im' r~a}akag{ {ykf h{ [JR fhsijefi~ie} sygei~hnjgj}ji{% Ca~ ivhlrgi' he h}}hkoi~ tfa dhje{sj{jnjgj}z je}a }fi {jdehgjed ni}tiie }ta JR Rfaei{ khe j{{yiKHEKIG a~ NZI ~ixyi{}{' tfjkf iccik}jsigz k~ih}i Ma[hdhje{} aei a~ na}f rfaei{% ]fi h}}hkoi~ khe hg{a r~asjmiki~}hje ~i}y~e kami{ tfjkf k~ih}i h Ma[ a~ hggat h LJ]Lh}}hko% ]fi{i sygei~hnjgj}ji{ khe aegz ni y{im jc }fi

    h}}hkoi~ fh{ sj{jnjgj}z je}a }fi {jdehgjed' {a h{ }a oeattfie }a diei~h}i }fi hrr~ar~jh}i ~ixyi{}{ a~ ~i{rae{i{%

    Yehy}fa~jpim Cj~lth~i Yrd~hmi{

    Sj~}yhggz hgg JR rfaei{ h~i r~ad~hllhngi hem khe niyrd~hmim tj}f eit cj~lth~i% Ca~ je{}heki' Kj{ka rfaei{h~i yrd~hmim }f~aydf ]~jsjhg Cjgi ]~he{ci~ R~a}akag &]C]R*'tfjkf j{ ea} {iky~i hem hggat{ h }~a`he a~ ~aa}oj} }a nirghkim ae}a }fi JR Rfaei%

    ]fi Rjed}ig [JR,nh{im rfaei mategahm{ hrrgjkh}jae{ c~al hkaecjdy~im gakh}jae% ]fi michyg} hrrgjkh}jae{ h~i ~i}~jisimc~al f}}r0!!hrr{~s%rjed}ig%kal tfie }fi rfaei cj~{} naa}{%Nz hg}i~jed }fi ME[ {i}}jed{ }a raje} }a h lhgjkjay{ {i~si~'j} j{ ra{{jngi }a khy{i }fi rfaei }a mategahm hem je{}hgg h

    lhgjkjay{ rhkohdi c~al he hg}i~eh}i gakh}jae% Hmmj}jaehggz'}fi rfaei{ cj~lth~i khe ni yrd~hmim tj}fay}hmljej{}~h}jsi r~jsjgidi{%

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    15/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 8;

    SaJR Mirgazlie} [kieh~ja{

    ]fi hk}yhg gisig ac }f~ih} ra{im }a he ie}i~r~j{i SaJRei}ta~o sh~ji{ nh{im ae }fi ei}ta~o{ mirgazlie}kaecjdy~h}jae' {isi~hg ac tfjkf h~i mj{ky{{im nigat%

    Khlry{!je}i~ehg SaJR

    ]fi sh{} lh`a~j}z ac SaJR mirgazlie}{ h~i khlry{ gisig'

    tfi~i JR sajki j{ kaesi~}im }a ]ML nz h limjh dh}ithz ca~hkki{{ }a }fi R[]E% SaJR {i~sjki{ ma ea} kaeeik} }a }fiJe}i~ei} a~ hez a}fi~ ye}~y{}im ei}ta~o% La{} ac }fi{iiesj~aelie}{ y{i {tj}kfim ei}ta~o{ hem SGHE{' tfjkfcy~}fi~ {idlie} }fi SaJR% Je }fi{i je{}hggh}jae{' SaJR j{nh{jkhggz he j{ghem tj}f h ]ML ri~jli}i~% Ac kay~{i' }fiSaJR mai{ je}i~hk} tj}f }fi GHE' tfjkf j{ kaeeik}im }a }fi

    Je}i~ei}' {a j} j{ ra{{jngi ca~ he h}}hkoi~ }a dhje hkki{{ }a}fi GHE% [jeki he h}}hko ae }fi SaJR ei}ta~o ly{}a~jdjeh}i tj}fje }fi je}i~ehg ei}ta~o' }fi }f~ih} j{kae{jmi~im lami~h}i%

    Cjdy~i 6 jggy{}~h}i{ }fi ~j{o{ jesagsim tj}f hkhlry{!je}i~ehg SaJR mirgazlie}% ]fi je}i~ehg }f~ih} &j%i%'he je}i~ehg ta~oi~ a~ h ta~oi~!siema~ tj}f ~ila}i hkki{{

    }a }fi ei}ta~o* khe hkki{{ hem ivrgaj} }fi JR RNV{% ]aggc~hym a~ Ma[ h}}hko{ lhz ni jej}jh}im hdhje{} ~i{ay~ki{ay}{jmi }fi ie}i~r~j{i' k~ih}jed gjhnjgj}z hem ka{} j{{yi{ ca~}fi ie}i~r~j{i% ]fi gidhkz sajki ei}ta~o kae}jeyi{ }ar~asjmi ~ila}i hkki{{ je}a }fi ie}i~r~j{i GHE' h{mj{ky{{im tj}f ~ici~ieki }a Cjdy~i{ >' ;' hem =%

    Cjdy~i 6 Khlry{!Je}i~ehg SaJR ^j{o{

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    16/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 8=

    JR Kie}~iv!Fa{}im JR

    Hkka~mjed }a C~a{} hem [yggjshe' }fi JR Kie}~iv lh~oi} j{ivrik}im }a d~at }a 82 ljggjae gjei{ nz >226% _88\ Je }fj{{kieh~ja' }fi JR RNV{ h~i gakh}im h} hem lhehdim nz h{i~sjki r~asjmi~' lasjed }fi ~i{rae{jnjgj}z ca~ {iky~j}z }a}fi {i~sjki r~asjmi~tfjkf {faygm jek~ih{i {iky~j}z%Fatisi~' SaJR ly{} eat }~hsi~{i ni}tiie }fi }~y{}im hem

    ye}~y{}im ri~jli}i~ ac }fi ie}i~r~j{i hem rh{{ }f~aydf }fiie}i~r~j{i cj~ithgg% H{ mj{ky{{im r~isjay{gz' }~hmj}jaehg mh}hcj~ithgg{ h~i jehmixyh}i }a lii} }fi yejxyi ~ihg,}jli'

    ~igjhnjgj}z' {iky~j}z' hem {i{{jae lhehdilie} ~ixyj~ilie}{ac SaJR% ]fi je}i~ehg }f~ih} cayem je h khlry{ mirgazlie}{}jgg ivj{}{ tj}f JR Kie}~iv' je hmmj}jae }a h }f~ih} c~al }fi{i~sjki r~asjmi~{ {fh~im!ye}~y{}im ei}ta~o? }fi~ica~i' }fi}f~ih} gisig j{ kae{jmi~im fjdf%

    Cjdy~i : jggy{}~h}i{ }fi sh~jay{ ~j{o{ h{{akjh}im tj}f he JRKie}~iv mirgazlie}% ]fi GHE j{ hkki{{jngi nz he h}}hko

    }f~aydf }fi {i~sjki r~asjmi~{ {fh~im ei}ta~o% H}}hko{ghyekfim c~al tj}fje }fi ie}i~r~j{i' h{ tigg }fa{i }f~aydf}fi gidhkz rfaei ei}ta~o kae}jeyi }a ni j{{yi{%

    Cjdy~i : JR Kie}~iv SaJR ^j{o{

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    17/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 89

    Iem,}a,Iem SaJR

    Gaed }i~l' SaJR khgg{ tjgg ni }~he{ra~}im h{ JR iem,}a,iem%[i~sjki r~asjmi~{ tjgg lhehdi }fi limjh dh}ithz{ }fh}}~he{gh}i ni}tiie SaJR hem gidhkz ]MLhem ]ML tjgg ni}fi j{ghem' ~h}fi~ }fhe SaJR nijed }fi j{ghem% ]fj{mirgazlie} khe acci~ iefhekim hrrgjkh}jae{ hem gi{{ivrie{jsi khggjed% La{} ie}i~r~j{i{' i{rikjhggz gh~di aei{'

    tjgg lhehdi }fij~ ate JR RNV{ hem hkkir} SaJR c~al heye}~y{}im ei}ta~o% Je he iem,}a,iem SaJR mirgazlie}' }fi

    sajki ei}ta~o khe ni h}}hkoim mj~ik}gz c~al }fi ye}~y{}imiv}i~ehg sajki ei}ta~o? }fi~ica~i' }fi }f~ih} gisig j{ fjdf%

    Cjdy~i 82 jggy{}~h}i{ }fi lyg}jrgi ~j{o{ r~i{ie}im tfieisi~SaJR {i~sjki{ h~i ~ikijsim c~al he ye}~y{}im JR ei}ta~o%Je}i~ehg h}}hko{ hdhje{} }fi JR RNV{' ay}nayem h}}hko{hdhje{} iv}i~ehg ~i{ay~ki{' hem jenayem h}}hko{ mj~ik}gzc~al }fi iv}i~ehg sajki ei}ta~o h~i hgg khrhngi ac

    ivrgaj}jed sygei~hnjgj}ji{%

    Cjdy~i 82 Iem,}a,Iem SaJR ^j{o{

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    18/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 83

    =% Fzn~jm Kj~kyj},[tj}kfim!SaJRSygei~hnjgj}ji{ hem ]f~ih}{

    My~jed }fi }~he{j}jae c~al }~hmj}jaehg kj~kyj},{tj}kfim sajki}a SaJR' la{} ie}i~r~j{i{ tjgg {gatgz mirgaz SaJR}ikfeagadz nz y{jed h fzn~jm ei}ta~o kae{j{}jed ac na}fgidhkz kj~kyj},{tj}kfim hem SaJR ixyjrlie}% Isie hc}i~ he

    ie}i~r~j{i nikali{ hgg,SaJR' j{ j} gjoigz }fh} ]ML,nh{im{i~sjki{ {ykf h{ mh}h lamil{' chv lhkfjei{' mjhg,jelhje}ieheki ra~}{' hgh~l {z{}il{' hem nhkoyr ili~diekzkaeeik}jae }a }fi R[]E tjgg kae}jeyi }a ni {yrra~}im jerh~hggig tj}f }fi eit SaJR ei}ta~o% ]fi {iky~j}z j{{yi{tj}f kj~kyj},{tj}kfim ei}ta~o{ tjgg ri~{j{}' eit j{{yi{ tj}fSaJR tjgg ni je}~amykimhem sh~jh}jae{ ae }fi kj~kyj},{tj}kfim hem SaJR j{{yi{%

    9% [yllh~z

    ]fi }~hmj}jaehg sajki ei}ta~o' }fi ili~djed SaJR ei}ta~o'hem }fi JR mh}h ei}ta~o chki {jdejcjkhe} }f~ih}{ }f~aydf }fiye{iky~im }igikal iesj~aelie}% Yehy}fa~jpim hem eae,{iky~i lamil{ k~ih}i }fi lh`a~j}z ac }fi }f~ih} c~al }fi}~hmj}jaehg sajki ei}ta~o% Hg}faydf }fi{i j{{yi{ fhsi

    ivj{}im ca~ zih~{' }fiz fhsi nikali la~i hky}i myi }a }fi~hrjm d~at}f ac }fi Je}i~ei} hem }fi lh}y~j}z ac }fi }aag{y{im }a r~a}ik} }fi ie}i~r~j{i{ kaeeik}jae }a }fi Je}i~ei}%

    ]f~ih}{ c~al }fi }~hmj}jaehg sajki ei}ta~o tjgg ea}mj{hrrih~ tj}f SaJR jlrgilie}h}jae% Isie hc}i~ }filjd~h}jae ri~jam j{ asi~' ie}i~r~j{i{ tjgg kae}jeyi tj}f hfzn~jm ljv ac gidhkz {i~sjki{ hem JR {i~sjki{%

    SaJR j{ }fi cy}y~i ca~ sajki kallyejkh}jae{% Fatisi~' j} j{kgih~ }fh} }fi SaJR ei}ta~o tjgg ni gi{{ {iky~i }fhe }fi}~hmj}jaehg sajki ei}ta~o% ]fi{i sygei~hnjgj}ji{ jekgymi

    }fa{i kallae }a hez JR {i~sjki' hem }fa{i }fh} h~iyejxyigz h ~i{yg} ac }fi kalrgivj}z hem ~ihg,}jli~ixyj~ilie}{ ac }fi sajki {i~sjki%

    H{ gaed h{ SaJR j{ r~jlh~jgz jlrgilie}im h{ he je}i~ehg{i~sjki' j}{ jefi~ie} sygei~hnjgj}ji{ ~ir~i{ie} h ~j{o {jljgh~}a a}fi~ je}i~ehg JR hrrgjkh}jae{% Fatisi~' tfie }fiie}i~r~j{i kaeeik}{ SaJR }a }fi ye}~y{}im ei}ta~o' }fi}f~ih} tjgg jek~ih{i {jdejcjkhe}gzhem kaesie}jaehgri~jli}i~ {iky~j}z misjki{ h~i ea} mi{jdeim }a hmixyh}igz{yrra~} }fi yejxyi ~ixyj~ilie}{ ac sajki kallyejkh}jae{%

    Sajki lhehdi~{ eiim }a ni hngi }a kae}~ag {iky~j}z hk~a{{ hljv}y~i ac na}f kj~kyj},{tj}kfim hem SaJR ei}ta~o{% ]fizeiim }a na}f {iky~i }fij~ ie}j~i sajki {i~sjki hem hmhr} h{}fij~ ei}ta~o ljd~h}i{ }a SaJR% Sajki lhehdi~{ eiim h

    {agy}jae }fh} j{ hdea{}jk }a }fi yemi~gzjed }~he{ra~} }zri'fh{ h ~any{} lhehdilie} jec~h{}~yk}y~i' hem h y{i~je}i~chki }fh} je{ygh}i{ }fil c~al }fi lz~jhm mi}hjg{ ac }fiyemi~gzjed fh~mth~i' }~he{ra~}' hem r~a}akag{%

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    19/21

    Ie}i~r~j{i ]igikal [iky~j}z ]f~ih}{ Rhdi 84

    Hk~aezl{

    HKM Hy}alh}jk Khgg Mj{}~jny}jae

    N>NYH Nhko,}a,Nhko Y{i~ Hdie}

    KM^ Khgg Mi}hjg ^ika~mjed

    KRI Ky{}ali~ R~ilj{i Ixyjrlie}

    MJ[H Mj~ik} Jeth~m [i~sjki Hkki{{

    ME[ Malhje Ehli [i~si~

    Ma[ Miejhg ac [i~sjki

    M]LC Myhg ]aei Lyg}j,C~ixyiekz

    F]]R Fzri~]iv} ]~he{ci~ R~a}akag

    JMR Je}~y{jae Mi}ik}jae!R~isie}jae

    JL Je{}he} Li{{hdjed

    JR Je}i~ei} R~a}akag

    JR{ik JR [iky~j}z

    JR] JR ]igirfaez

    J[R Je}i~ei} [i~sjki R~asjmi~

    JS^ Je}i~hk}jsi Sajki i{rae{i

    GHE Gakhg H~ih Ei}ta~o

    LJ]L Lhe,Je,]fi,Ljmmgi

    EH] Ei}ta~o Hmm~i{{ ]~he{gh}jae

    RHNV R~jsh}i Hy}alh}jk N~hekf iVkfhedi

    RNV Ryngjk N~hekf iVkfhedi

    RK Ri~{aehg Kalry}i~

    RMH Ri~{aehg Mjdj}hg H{{j{}he}

    R[]E Ryngjk [tj}kfim ]igirfaei Ei}ta~o

    Xa[ Xyhgj}z ac [i~sjki

    ^H[ ^ila}i Hkki{{ [i~si~{

    ^]KR ihg ]jli Kaeci~iekjed R~a}akag

    ^]R ^ihg,}jli ]~he{ra~} R~a}akag

    [!LJLI [iky~i Lyg}jry~ra{i Je}i~ei} Lhjg Iv}ie{jae

    [KHMH [yri~sj{a~z Kae}~ag hem Mh}h Hkki{{

    [MR [i{{jae Mi{k~jr}jae R~a}akag

    [JR [i{{jae Jej}jh}jae R~a}akag

    [L]R [jlrgi Lhjg ]~he{ci~ R~a}akag

    []I [iky~i ]igirfaei Ixyjrlie}

    []Y [iky~i ]igirfaei Yej}

    ]ML ]jli Mjsj{jae Lyg}jrgiv

    ]C]R ]~jsjhg Cjgi ]~he{ci~ R~a}akag

    ]G[ ]~he{ra~} Gisig [iky~j}z

    YH Y{i~ Hdie}

    YMR Y{i~ Mh}hd~hl R~a}akag

    SGHE Sj~}yhg GHE{

    SRE Sj~}yhg R~jsh}i Ei}ta~o

    SaJR Sajki asi~ Je}i~ei} R~a}akag

    THE Tjmi H~ih Ei}ta~o

    ^ici~ieki{

    _8\ Fi~~igg' Igjphni}f' ^i{agsjed [iky~j}z j{o{ ca~ JR]igirfaez? Tfh} Kalrheji{ Eiim }a Kae{jmi~ tfieMirgazjed Sajki ae Mh}h Ei}ta~o{% Ca~~i{}i~ i{ih~kf'Jek%' Hydy{} >;' >22=%

    _>\ Daddhe{' Kf~j{' [jdehg Lhdhpjei' Accjkjhg Ryngjkh}jae ac

    HCKIH% Hydy{} >222%

    _;\ @afe{ae' [ka}}' [HE[ Je{}j}y}i ^i{ay~ki{% [ir}ilni~>222%

    _=\ Kalry}i~ [iky~j}z Je{}j}y}i' 8::: K[J!CNJ Kalry}i~K~jli hem [iky~j}z [y~siz% 8:::%

    _9\ Jeca~lh}jae [iky~j}z Lhdhpjei% @yei 8:::%

    _3\ Gjsjed{}ae' @ai' ]fi Mi{o}ar Lamil ]f~ih}% [HE[Je{}j}y}i ^i{ay~ki{' @ygz >222%

    _4\ Kalry}i~ [iky~j}z Je{}j}y}i' >22; K[J!CNJ Kalry}i~K~jli hem [iky~j}z [y~siz% >22;%

    f}}r0!!ttt%sj{jaehig%kal!r~amyk}{!{iky~j}zQhymj}!CNJQK[J

    Q>22;%rmc

    _6\ Kalry}i~ [iky~j}z Je{}j}y}i' >22= K[J!CNJ Kalry}i~K~jli hem [iky~j}z [y~siz% >22=%

    f}}r0!!j%klrei}%kal!dak{j!mnQh~ih!rmc{!cnj!CNJ>22=%rmc

    _:\ Kallyejkh}jae{ C~hym Kae}~ag H{{akjh}jae &KCKH*'Nhkod~ayem hem hmmj}jaehg jeca~lh}jae ca~ eit{ t~j}i~{ hemimj}a~{ kae{jmi~jed t~j}jed h {}a~z ae KCKH{ ~ikie}}igikal c~hym {y~siz%Lh~kf 8=' >22;%

    f}}r0!!ttt%kckh%a~d!Makylie}{!c~hymga{{Qnhkod~ayem%rmc

    _82\ D~hz' Rh}~jko' F%;>; SaJR fagi{ ~ilhje arie% PMEI]'@heyh~z 83' >22=%

    f}}r0!!eit{%pmei}%kal!>822,822:,98=>8;>%f}lg

    _88\ C~a{} hem [yggjshe' Y%[% ]~hmj}jaehg hem Eiv},Diei~h}jae Kie}~iv [i~sjki{ Lh~oi}{% Hydy{} >22>%

    [iky~iGadjv' [iky~iGadjv Ka~ra~h}jae' hem }fi [iky~iGadjv Mjhlaem Ilngilh~i }~hmilh~o{ a~ ~idj{}i~im }~hmilh~o{ ac [iky~iGadjv Ka~ra~h}jae je }fi

    Y%[%H% hem a}fi~ kaye}~ji{% Hgg a}fi~ }~hmilh~o{ lie}jaeim fi~ije h~i nigjisim}a ni }~hmilh~o{ ac }fij~ ~i{rik}jsi atei~{%

    Karz~jdf} >22>,>22= [iky~iGadjv Ka~ra~h}jae% Hgg jdf}{ ^i{i~sim%

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    20/21

  • 8/6/2019 Enterprise Telecom Security Threats Draft 10-12-04

    21/21

    8;492 [he Rim~a' [yj}i >;2 [he He}aeja' ]ivh{ 46>;> RF0 >82%=2>%:33: CV0 >82%=2>%3::3 ]C0 622%684%=6;4ttt%{iky~igadjv%kal