ABSTRACT

The adoption of Diameter protocol is increasing very fast especially in the telecommunication area, where 4G networks are being deployed. As the next-generation protocol for providing authentication, authorization, and accounting (AAA) services, the Internet Engineering Task Force has dedicated a lot of efforts to make this protocol secure. In spite of this fact, security is still one of the biggest challenges that mobile network operators need to further investigate. In this chapter, we will describe how Diameter can be utilized to carry out attacks against mobile networks. In addition to that, we will review current security efforts from standardization,

Contents 18.1 Introduction ....................................................................................................................374 18.2 Diameter: AAA Protocol and Beyond .............................................................................374 18.3 Challenge and Solution ...................................................................................................376