Towards a Baltic Sea Region Strategy in Critical ... - Helsinki.fi

CRITICAL INFRASTRUCTURE PROTECTION IN THE BALTIC SEA REGION
Table III—11 TETRA network security measures addressed in Modules 4-6 of the ITU-T X.805
security architecture.
Module
Module 4: Service
layer, management
plane
Module 5: Service
layer, control plane
Module 6: Service
layer, end-user plane
Security Measures
• Rights to administer and manage services (e.g. management
of group membership) restricted to dispatch and network
administration personnel.
• Maintenance of a log of service administrative and
management actions or events.
• Protection of service configuration, management and
administrative information.
• Backup content and protect connectivity to user service
databases.
• Protect identity of users, user groups and terminals (e.g.,
TEI, ITSI, GTSI etc.) utilizing a service.
• Maintenance of user activity log containing information
terminal. enabling/disabling, location updates vs. time, Call
Detail Records (CDR), supplementary services invoked and
so forth.
• Recovery mechanisms for component or link failures
causing service loss.
• Encryption of service control information transported
within the network.
• Error-correction coding to ensure the correct delivery of
service control information.
• Continuous monitoring and control of user calls.
• Restrict service usage (e.g. by checking subscription rights)
to only authorized users, user groups and terminals.
• Encryption of user traffic being transported by service over
the air interface and/or end-to-end.
• Protect user IP services against DoS attacks (e.g., using
firewalls, IPSec etc.)
• Retain records of recent service usage history in user
terminal.
• Jamming detection and countermeasures (e.g., switching to
a different frequency) to prevent service loss.
120 NORDREGIO REPORT 2007:5