Law IV: Technology Transition RiskF8: Security Resilience Monitoringsolo

Signalling Attack Detection

Trigger

Passive probe detects anomalous SS7 location request volume — 400% above baseline — originating from a single interconnect partner.

Tools Required

Security team alerted. Interconnect traffic manually reviewed. Partner contacted.

Automated rate limiting applied to anomalous signalling source.

Interconnect traffic automatically filtered and quarantined. Security operations notified.

Autonomous threat response. Signalling attack blocked within seconds. Forensic evidence logged. Regulatory notification prepared.

Subscriber location data protected. Regulatory fine for SS7 breach avoided. Interconnect partner liability established.

GDPR fine for location data breach: up to 4% global revenue. For a €500M revenue MNO: up to €20M exposure per confirmed breach incident.

None — Emblasoft nScan (passive probe) is the primary instrument for signalling-layer security. Active probes cannot see inter-operator signalling.

Active test detects voice or data failure on 4G in cells where 2G/3G was recently decommissioned.

Regulator requests evidence of 5G SA population coverage meeting licence condition of 80% by end of year.

Active probe detects increasing call setup failures correlated with a single vDU vendor platform in three regional clusters.