IMS Security Test Suite

Security Test Suites for IMS

4G-LTE

Core

IMS

SIGTRAN

M3UA

SS7

SCTP

CAMEL

ISUP

IMS Security Test Suite

Security Test Suites for IMS

Overview

The Valid8 Security Test Suites are suitable for auditing security of IMS network nodes including UE, CSCF, and AS, according to standards including NESAS SCAS, 3GPP.

What we Can Do For You

The solution is capable of simulating network elements either running standard or invalid / unexpected call-flows in order to wrap-around a device under test (DUT). It can simulate & test the following:

UE
CSCF
AS

‍

By testing each node you can be confident your DUT can perform well under unusual or adverse conditions.

Why we’re Different

Scalable software-based architecture can run on a range of hardware from COTS and high-end customer provided hardware to Virtual Machines and the Cloud (e.g. Amazon AWS) for maximum versatility and performance
Web-based UI is easy to learn
HTTP API enable integration with automation test systems and other equipment
Stateful modeling provides accurate emulation of network elements

Features

Pre-made test scenarios and procedures
PASS / FAIL analysis, including plain English diagnostic reason
Valid / Invalid testing
Customizable source-code
User-configurable proprietary messages, IEs, headers
Animated test results action-replay
Easy to configure
Automatic execution of test batches
UDP, TCP, SCTP transport layer IPv4/IPv6 support
Suitable for Development and QA test lab environments, verifying protocol compliance, negative and robustness testing, Regression testing and Reproducing customer issues in the field

Additional Videos

Subsystems

Valid8 Security Test Suites are comprised of multiple subsystems that can be activated as needed to test the DUT. Traffic can be captured through the use of a remote capture tool such as Wireshark.

KPIs

Test Verdict - Pass, Fail or Inconclusive
Detailed message field validation

Configurable Parameters

IP address and port
Network layer- IPv4 / IPv6
Transport layer- UDP / TCP / SCTP / TLS
Phone numbers
Authentication - username and password
Unexpected message handling - Stop / Continue

Automation API

User commands can be fully automated using an HTTP API. This includes all control functions as well as collection of results and metrics. It can be integrated into any CI system including Jenkins, CircleCI, Gitlab and others. Our Autom8 Python framework is included to ease integration.

Scripting

The application can be edited directly in the browser using VTDL using Composer, a powerful development environment that includes error checking and a graphical view easing the creation and modification of scenarios. Codec Studio can be used to quickly build message templates from raw PDUs, as captured by tcpdump for example, to use in the scenarios.

PRODUCT OPTIONS

M5 Mobile UE Tester

Base Station Emulator for 4G eNodeB, 5G gNodeB RAN and mobile core to test UE devices including CPE router, phone, modem & IoT devices

Use Cases

No items found.

Summary of Specifications

Specifications

V8 - UE

TC_003_Network_Initiated_Detach
TC_004_Battery_Test
TC_005_Fuzzing_S1AP_Bad_PLMN_Bad_Network_Name
TC_006_Force_IPv6
TC_007_Fail_Auth_and_Security
TC_008_SMS_Fuzzing
TC_010_Brute_Force_Authentication_Attack
TC_011_Reuse_Authentication_Credentials
TC_012_Access Without_Authentication
TC_014_Date_Time_Error_From_Network
TC_018_GTP_U_Security_Attack
TC_019_Rogue_Base_Station
TC_020_Security_Downgrade

V8 - IMS

TC_UE_Registration flood
TC_UE_Deregistration_flood

Product Details

Operating System

‍Protocol Engine (Linux-based)

User Interface

‍Browser-based, touch-optimized graphical user interface

Automation

‍HTTP API

Note:

Actual throughput levels over radio may vary based on the 3rd party device manufacturer and software versions. Valid8 product specifications are subject to change at any time without notice.