>>> Knowledge Base // FAQ
Technical Knowledge Base
Authoritative answers regarding Academy tracks, ProLabs sandboxes, 3GPP protocol research, and enterprise penetration testing.
Academy & Paths
We recommend basic familiarity with Linux CLI and networking fundamentals (IP/TCP/UDP). The free Telecom Fundamentals course covers signals, transmission and the carrier network before the specialist courses move on to signaling, mobile networks and broadband access.
Telecom Foundations is the entry path: five courses (Telecom Fundamentals, PSTN, ADSL, GSM and SIM cards), 50 modules and around 67 hours of study. At a few hours a week alongside a full-time job, most engineers finish it in two to three months.
Complete every course in a certification path - and, where the path has one, its hands-on lab capstone - and the certificate is issued automatically. Courses award badges along the way. Certificates are publicly verifiable and can be shared to LinkedIn.
ProLabs & Sandboxes
Each ProLab provisions a dedicated, isolated environment for you: a 4G LTE/EPC stack with an srsRAN eNodeB, or a 5G Standalone core via Open5GS and UERANSIM. You work against your own network, so nothing you do touches live telecom traffic.
Not as a standalone upload tool. Hands-on capture and signaling analysis happens inside ProLabs: each lab provisions a dedicated environment with its own traffic and tooling, so you work on live SIP, Diameter and GTP flows rather than uploaded files.
The Academy and the lab guides run in any modern browser (Chrome, Firefox, Safari, Edge). Labs that need network access to your environment use a private WireGuard VPN, so you install the free WireGuard client for your OS; the lab page gives you the config.
5G & Signaling
Our research covers 3GPP Release 15 through Release 18+ specifications, including 5G-AKA (TS 33.501), Diameter S6a/Cx (RFC 6733 / TS 29.272), SS7 MAP/CAMEL (TS 29.002), and SEPP N32 protection with PRINS (TS 29.573).
5G SA introduces HTTP/2 REST APIs with JSON payloads in the Service Based Architecture (SBA), SUCI concealment of the subscriber identity on the air interface against IMSI catchers, and SEPP interconnect proxies protected with TLS or PRINS.
Enterprise Audits
Yes. Our enterprise division (telco-sec.com) delivers operator-level SS7/Diameter vulnerability assessments, GTP firewall validation, and private 5G core network red teaming.
Enterprise engagements follow GSMA FS.11 / FS.19 guidelines with predefined black-box and white-box signaling injection test plans, followed by remediation workshops and firewall rule hardening.
NIS2 & Standards
TelcoSec provides dedicated compliance mapping for NIS2 Article 21 (risk management, supply chain security, cryptography and encryption under Art. 21(2)(h)) and Article 23 (24h early warning / 72h incident reporting timelines) at nis2.telcosec.net.
All vulnerability taxonomies and mitigation matrices directly cross-reference GSMA FASG documents (FS.07, FS.11, FS.19, FS.36) and ENISA 5G Cybersecurity Standards.
STILL HAVE UNRESOLVED SIGNALING QUESTIONS?
Get in touch directly for enterprise inquiries or custom lab scenarios. We reply within 1 business day.