WiMax Operator's Manual

CHAPTER 9
■ ■ ■
Network Security
Security is not part of operations support systems (OSS) proper, but it is an integral part
of managing a broadband access network. Indeed, security, in terms of the integrity of the
network’s own infrastructure, the safety of its customers, and the nation itself, is becoming
increasingly important in network operations today and cannot be considered optional at
this point.
Network security is a broad subject covering a number of areas. The most significant of
those areas have to do with securing the network elements themselves. These encompass
securing vital databases, including those concerned with customer records, network inventories,
transactions with other service providers and carriers, and general business financial
records; preventing unauthorized access onto the network and, in particular, preventing entry
into customer virtual private networks (VPNs) or customer local area networks (LANs); preventing
or limiting denial-of-service (DoS) attacks; and finally meeting CALEA reporting
requirements imposed by the federal government in addition to other related regulatory
mandates.
■Note CALEA is the Communications Assistance for Law Enforcement Act.
As well as securing network elements, software platforms, and customer and business
databases, one has to consider securing a whole other area of security dealing with facilities
management. Because of the prominence accorded to hackers in the news media and in trade
publications, the emphasis today is on data security, primarily on protecting network elements
and the information they store from malicious code, but such concerns should not blind the
network operator to the entire range of security concerns. Safeguarding the network from
hacks performed over the Internet is certainly a worthy objective but is far from the only area
upon which the network operator should focus.
Security Policies
Every business today, including a public service network, requires a security policy that will be
rigorously monitored. Also, all aspects of security administration should follow that policy. The
policy should be holistic, including threats involving physical intrusions into the facilities and
not just remote attacks over the Internet.
187