Level Advanced
COURSES

GSM Security

How GSM is attacked and defended, for telecom security professionals working under authorisation. An offensive-minded course that stays within a strict ceiling: it explains attack mechanisms, named tooling and published research, and authorised-assessment methodology, then lands every topic on detection and mitigation.

CLR-03 REQUIRED You can read every lesson in this course, but quizzes and lesson completion unlock at 6000 XP — you currently have 0 XP.
RFS
Overview

GSM Security builds on GSM Fundamentals and GSM Architecture and adds the security layer those courses leave out. It opens with the GSM threat model and the authorised-assessment frame: the trust assumptions GSM was built on, where they break, and how a lawful, scoped assessment against your own controlled range is run. It then works through the attack surfaces module by module: the air interface and false base stations; authentication and the COMP128 weakness class; ciphering and cipher downgrade; identity exposure and IMSI catching; the core and signalling surface with MAP and SS7; SMS and supplementary-service abuse; and the tooling used in an authorised lab. The last modules cover detection, monitoring and incident response, and the governance and modern context, including lawful interception versus abuse, NIS2, and the 2G sunset. Every module follows the same shape: threat, mechanism, named tooling and research, authorised methodology, and the detection and mitigation a defender actually deploys. It ends with an interactive authorised-assessment decision walkthrough.

Learning Objectives
Describe the GSM trust model, the assumptions it was built on, and where each one breaks
Run a GSM security assessment lawfully: scoping, authorisation, a controlled range, and reporting
Explain the air interface, authentication, ciphering and identity attack surfaces as mechanisms, not recipes
Analyse the MAP and SS7 signalling attack surface and the signalling-security controls that mitigate it
Name the tools and published research used in an authorised GSM assessment and the weakness class each exercises
Design detection, monitoring and incident response for GSM threats in a mobile operator
Place GSM security in its governance context: lawful interception versus abuse, NIS2, and the move to 3G, 4G and 5G
Prerequisites
GSM Fundamentals
GSM Architecture

>>> Clearance required

Unlock with Professional

This content is included with the Professional plan.

View plans