P25 Security Test Suite

Security Test Suites for P25

SIP

Security Test Suites for P25

Overview

The Valid8 Security Test Suites are suitable for auditing security of P25 network nodes including Console, RFSS, IWF, according to standards including TIA.

What we Can Do For You

The solution is capable of simulating and testing various different devices including:

Radio & RFSS
Console
IWF

‍

The tool provides comprehensive checks and measurements including Request-Response times that are used to grade performance, which in conjunction with a user-configurable threshold can be used to determine a PASS/FAIL result.

Why we’re Different

Scalable software-based architecture can run on a range of hardware from COTS and high-end customer provided hardware to Virtual Machines and the Cloud (e.g. Amazon AWS) for maximum versatility and performance
Web-based UI is easy to learn
HTTP API enable integration with automation test systems and other equipment
Stateful modeling provides accurate emulation of network elements

Features

Pre-made test scenarios and procedures
PASS / FAIL analysis, including plain English diagnostic reason
Valid / Invalid testing
Customizable source-code
User-configurable proprietary messages, IEs, headers
Animated test results action-replay
Easy to configure
Automatic execution of test batches
UDP, TCP, SCTP transport layer IPv4/IPv6 support
Suitable for Development and QA test lab environments, verifying protocol compliance, negative and robustness testing, Regression testing and Reproducing customer issues in the field

Browser-based User Interface

Network Architecture

Additional Videos

Subsystems

Valid8 Security Test Suites are comprised of multiple subsystems that can be activated as needed to test the DUT. Traffic can be captured through the use of a remote capture tool such as Wireshark.

KPIs

Test Verdict - Pass, Fail or Inconclusive
Detailed message field validation

Configurable Parameters

IP address and port
Network layer- IPv4 / IPv6
Transport layer- UDP / TCP / SCTP / TLS
Phone numbers
Authentication - username and password
Unexpected message handling - Stop / Continue

Automation API

User commands can be fully automated using an HTTP API. This includes all control functions as well as collection of results and metrics. It can be integrated into any CI system including Jenkins, CircleCI, Gitlab and others. Our Autom8 Python framework is included to ease integration.

Scripting

The application can be edited directly in the browser using VTDL using Composer, a powerful development environment that includes error checking and a graphical view easing the creation and modification of scenarios. Codec Studio can be used to quickly build message templates from raw PDUs, as captured by tcpdump for example, to use in the scenarios.

PRODUCT OPTIONS

M5 Mobile UE Tester

Base Station Emulator for 4G eNodeB, 5G gNodeB RAN and mobile core to test UE devices including CPE router, phone, modem & IoT devices

Use Cases

P25 Console (CSS) Under Test

For testing the P25 Console (CSS), the Valid8 Tester can generate SIP/RTP/Floor Control calls on CSSI to test conformance, performance and stability.

Supported Scenarios:

Client Server single-ended
Client end-to-end

P25 RFSS Under Test

For testing the P25 RFSS, the Valid8 Tester can generate SIP/RTP/Floor Control calls on ISSI to test conformance, performance and stability.

Supported Scenarios:

Client Server single-ended
Client end-to-end

Summary of Specifications

Specifications

V8 TS P25.0823 - General Security Assurance Requirements

Registration (Console to Home RFSS)
Registration Response flood 2xx / 4xx
TC_REG_CONSOLE_TO_HOME_RFSS_REG_RES_FLOOD_001- Send a flood (100 per second) of bad 4xx sip register responses for 30s then prove one good one (200) can succeed and measure the response time for the console to show group active and measure response to emergency alarm.
TC_REG_CONSOLE_TO_HOME_RFSS_REG_RES_FLOOD_002Send a flood (100 per second) of good (200) can succeed and an Invite call can still be made, measure the response time
Deregistration
Console to Home RFSS
Deregistration Response flood 2xx / 4xx
Send a flood (100 per second) of bad 4xx sip register responses then prove one good one (200) can succeed and measure the response time.
Send a flood (100 per second) of good (200) can succeed and an Invite call can still be made, measure the response time.
Home RFSS to Console
Deregistration Request flood 2xx / 4xx
Send a flood (100 per second) of bad 4xx sip register responses then prove one good one (200) can succeed and measure the response time.
Send a flood (100 per second) of good (200) can succeed and an Invite call can still be made, measure the response time.
Group call (Console to Home RFSS)
Invite Response flood 2xx / 4xx
Send a flood (100 per second) of bad 4xx sip invite responses then prove one good one (200) can succeed and measure the response time.
Send a flood (100 per second) of good (200) can succeed and the call can still be made, measure the response time.
Mess up the tia-p25-groupcallstring
Group call (Home RFSS to Console)
InviteRequest flood
Send a flood (100 per second) of invites and check an outbound call can still be made, measure the response time.
Unit to Unit call
Torture Tests RFC4475, RFC5118
PROTOS_Test-Suite_C07
Including Invalid payload length – too long
Invalid payload length – too short

Product Details

Operating System

‍Protocol Engine (Linux-based)

User Interface

‍Browser-based, touch-optimized graphical user interface

Automation

‍HTTP API

Note:

Actual throughput levels over radio may vary based on the 3rd party device manufacturer and software versions. Valid8 product specifications are subject to change at any time without notice.