GISFI_SP_201203192 GISIF#8, 26 - 28, March 2011 1

GISFI#8 Security & Privacy Working Group: Report

Company: NEC CorporationAuthor(s): Anand R. Prasad, Chair Security and

Privacy working groupContact: anand@bq.jp.nec.comPurpose: ApprovalDocument#: GISFI_SP_201203192

2GISFI_SP_201203192 GISIF#8, 26 - 28, March 2011

GISFI#8 Agenda

• GISFI_SP_201203178 Approach Note on proposed GISFI’s activity on Network Security, Krishna Sirohi and NEC Corporation

• GISFI_SP_201203176 Proposals for activity on network security requirements of India, NEC Corporation

• GISFI_SP_201203190 Proposals for security testing framework, Huawei

• GISFI_SP_201203191 Security update, gap analysis and recommendations, Ericsson

• Number to be assigned if docs can be made available officially by Ericsson:– GISFI_SP_201203xyz Security update, gap analysis and recom

mendations, Ericsson– GISFI_SP_201203abc 3GPP SAP draft input, Ericsson

3GISFI_SP_201203192 GISIF#8, 26 - 28, March 2011

Security & Privacy WG Meeting Report　 1/3• Secretary appointment: Cmdr. Balvant R. Sharma, Director of BIT Noida• GISFI_SP_201203182 Security & Privacy working group agenda approved• Membership given summary of TEC discussion on 22 March, 2012, Delhi (documents

shown to TEC were GISFI_SP_201203183 and GISFI_SP_201203176• GISFI_SP_201203178 Approach Note on proposed GISFI’s activity on Network Secu

rity, Krishna Sirohi and NEC Corporation– Gave a proposal to do gap analysis in GISFI regarding Indian network security requirements– Proposal on doing gap analysis was approved– Telecommunication Security Council of India (TSCI) formation proposal:

• Mr. Dua to check TSCI creation elsewhere in India and inform GISFI membership by 5 April, 2012• Mr. Sirohi, Huawei, Ericsson and NEC will discuss on how/what on TSCI formation in GISFI. A half pa

ger proposal is expected

• GISFI_SP_201203176 Proposals for activity on network security requirements of India, NEC Corporation

– Gave details about gap analysis, issues etc. and proposed to start a (1) work item, (2) launch TSCI, (3) develop security testing details in GISFI, (4) start activity on making GISFI a bridge between TEC and market / Telecom Service Providers (TSPs) and (5) provide input to government regarding items to be finalized by May 2012.

– Work item description (WID) on study regarding Indian network security requirements will be brought next meeting by Anand R. Prasad, NEC. Thus proposals 1, 2 and 5 were agreed and approved.

– Proposal 4 was also approved • As part of agreement with TEC to have a workshop• Meeting will be held with TSPs before next GISFI meeting. . Professors giving advice to TSPs will also

be invited.

4GISFI_SP_201203192 GISIF#8, 26 - 28, March 2011

Security & Privacy WG Meeting Report 2/3• GISFI_SP_201203190 Proposals for security testing framework, Huawei

– This document discussed about penetration resting– Agreed to add framework study in the also in the WID agreed under GISFI_SP_201203176

• GISFI_SP_201203191 Security update, gap analysis and recommendations, Ericsson

– The document proposes to send comments to TEC/DoT regarding the Indian national network security requirements

– There was disagreement– The document was noted

• Two 3GPP SA-Plenary draft input were presented by Ericsson– These document propose to start a new working group in 3GPP on security testing of 3GPP

based products and their certification– Input appreciated by membership– Mini, Ericsson, to check whether the draft inputs can be uploaded officially in GISFI website

• Check how liaison can be set with 3GPP• Agreed to send LS to

– CJK working group on security and – TEC with result of meeting, documents and dates for

• Meeting with TEC with report about discussions during GISFI#8 and • Workshop with TEC

5GISFI_SP_201203192 GISIF#8, 26 - 28, March 2011

Security & Privacy WG Meeting Report 3/3• Participate in TEC national working group on SG-17• Send liaison to following groups:

– TEC: share information regarding status of GISFI activity• Drafting: 1st draft 5 April, Comments 6 April, Final 9 April and Send

10 April

– 3GPP: inform about current activity and offer collaboration regarding Indian national security requirements

• Come back in June meeting (GISFI#9)– Action to Anand R. Prasad, NEC

• Action: Setup liaison relation with 3GPP

– CJK: inform about current activity of security and privacy working group

• Drafting by Anand: 1st draft 5 April, Comments 6 April, Final 9 April and Send 10 April

6GISFI_SP_201203192 GISIF#8, 26 - 28, March 2011

Actions

1. LS to TEC, see slide 5 for details, deadline for sending LS is 10 April

2. LS to CJK, see slide 5 for details, deadline for sending LS is 10 April

3. Meeting with TEC to give an update of Patna meeting, week of 16 April, date to be fixed

4. Workshop with TEC on Indian national network security requirements, week of 11 April, date to be fixed

5. 3GPP documents upload to GISFI website, see slide 4, action is on Mini Vasudevan, Ericsson, 5 April

6. Check about TSCI activities in India, action on Mr. Dua, 5 April

7. WID on activities regarding Indian national network security requirements, Anand, NEC, GISFI#9