|
Work item:
|
X.websec-8
|
|
Subject/title:
|
Secure protection guidelines of value-added service for operators
|
|
Status:
|
[Carried to next study period]
|
|
Approval process:
|
AAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
-
|
|
Liaison:
|
-
|
|
Supporting members:
|
China Mobile, ETRI, ZTE Corporation.
|
|
Summary:
|
With the rapid development of network and user-terminal capability, more and more telecom operators provide various services based on their network resources to the users. These services are called value-added services, which add additional value to basic telecommunication/data services (e.g., voice call, SMS, MMS and data access). Typical value-added services are including Mobile Office Automation, e-Reading, e-Commerce, etc.
In many cases, the value-added services will involve sensitive operations or critical dada, which will be the target of the malicious attackers. Malicious users may utilize the service vulnerabilities to get benefits or do harm to the service and other users. The negative effects of the malicious attacks may include subscribing service without user permission, using service without payment, getting users valuable information beyond user authorization, and etc.
Recommendation ITU-T X.websec-8 provides guidelines for security protection for value-added service for telecommunication operators. Service scenarios, security threats and typical attack methods are analysed, and technical measures to encounter the threats are provided. This will help the operators to assure the security of the value-added service, and will also protect the users' benefits.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2015-09-22 09:51:19
|
|
Last update:
2016-09-16 15:01:11
|
|
