SS7 Security of Iran, Islamic Republic of

Country Mobile Network Worldwide Rank 122 / 164

Tweet about Iran, Islamic Republic of SS7 security:


Scores for 3 operators surveyed

[+] Show all details [-] Hide all details
+ Global Risk level 122 / 164
2660.8

Iran, Islamic Republic of is the 122nd best country in the world for SS7 security.

Global Risk level combines Privacy Leaks (subscriber informations leaks) and Network Exposure (operators exposure), giving more importance to Privacy Leaks.

+ Privacy Risk level 126 / 164
1938.4

Iran, Islamic Republic of is the 126th best country to protect its customers against privacy leaks.

Privacy Leaks represents all subscriber privacy leaks from all operators of specific country. This includes subscribers location, subscriber private data and subscriber encryption keys.

+ SS7 messages disclosing subscriber city location 4

Iran, Islamic Republic of allows 4 SS7 MAP messages to leak subscriber city location.

+ SS7 messages disclosing subscriber street location 2

Iran, Islamic Republic of allows 2 SS7 MAP messages to leak precise street-level subscriber location (200m).

+ SS7 messages disclosing private informations 10

Iran, Islamic Republic of allows 10 SS7 MAP messages to leak subscriber IMSI.

+ Leak of subscriber keys 3

Iran, Islamic Republic of has 3 operators that leak subscriber keys.

Leak of subscriber keys allows an attacker to decrypt calls and SMS of subscriber, by impersonating the network using a fake base station.

+ Leak of prepaid/postpaid status 3

Iran, Islamic Republic of has 3 operators that leak subscriber prepaid/postpaid status.

Leak of subscriber prepaid/postpaid status allows an attacker to gather informations about the status of a subscriber from the operators databases, to prepare for fraud.

+ Leak subscriber location through Home Routing bypass ?
+ Network Exposure level 28 / 164
950.8

Iran, Islamic Republic of is the 28th best protected SS7 network in the world.

Network Exposure includes Network Elements exposed and security mechanism implemented by operators of a given country. It shows the attack surface of the Telecom Network of a country from the SS7 perspective.

+ SCCP discovery attack surface 91

Iran, Islamic Republic of has 91 Core Network Elements identified over SS7 SCCP.

The more Core Network Elements are exposed (reachable directly from the International SS7 Network), the more entry points an attacker has on operators SS7 Core Network.

+ Network Elements fingerprint 91

Iran, Islamic Republic of has 91 Core Network Elements successfully fingerprinted over SS7 SCCP.

Precise identification of Core Network Elements allows attackers to have a better understanding of the internals of operators networks, allowing easier further attacks.

+ Potential change of prepaid/postpaid status (fraud) 3

Iran, Islamic Republic of has 3 operators susceptible to fraud via change of prepaid/postpaid status.

+ Home Routing* 1.5

Iran, Islamic Republic of has 1.5 operators implementing Home Routing.

Home Routing is a Operator Network feature that hides the MSC (city location) and IMSI of the subscriber in several SS7 MAP messages.

*Home Routing detection in SS7map is still in BETA phase.

+ Leak of internal topology through Home Routing bypass ?

For more explanations about the ratings, see our blog post.


Operators tested
0 well secured
1 with medium security
2 badly secured
3 surveyed operator / 5 operators

SS7map project is research in progress: the data is purely indicative and subject to change.