Doc. numberGISFI#19, January , Security & Privacy Working Group: Closing Session Company:NEC Corporation Author(s):Chairman Contact Purpose:Approval Document nr.:

Conclusions and Actions Action to doc authors: All documents of GISFI should develop test-cases as for 3GPP MME and other SCAS TRs 1.SGSN security, Discussion, Mayur Dave Document for comments Proposal to add NFV security testing as well under security testing work item 2.eNodeB security, Discussion and Approval, NEC Action all: Offline review and comments 3.MME security, Discussion and Approval, NEC Document is approved, new threats and requirements will be added to Rel. 2 Action: Compare with MME TR of 3GPP and highlight the difference 4.HSS/HLR security, Discussion and Approval, NEC Action all: Offline review and comments Action: Add additional attacks, e.g. iPhone and M2M related Action: Re-organize document based on Releases (Rel. 8 onwards IP, pre-Rel-8 non-IP i.e. SS7). Discuss offline on re-organization before GSSM#20. Doc. numberGISFI#19, January , 20142

Conclusions and Actions 5.Deep packet analysis tool, Information, RIT Lot of interest shown Steps of tool development: –user interface to visualize, –analysis of data, –visualization of analyzed data, –control based on analysis 6.NFV security requirements, Information, NEC Further work to be done Doc. numberGISFI#19, January , 20153

Conclusions and Actions Security Testing: –Work with DoT, formulate project. Expected February. Cyber Security: –Communication with Japanese partner regarding the PRACTICE project on next steps –Develop recommendations –Connect with DeitY NFV Security: –Develop security testing specs for NFV NWG Security, February –Update of overall GISFI activities –GISFI – ARIB/TTC cyber security project (PRACTICE) overview Potential collaboration with other stakeholders, Krishna Doc. numberGISFI#19, January , 20154