Telecom Security Glossary

V2.4.0

An authoritative index of Radio Access Network (RAN), Signaling, and Core network terminology for security researchers and network engineers.

#Radio Access Network (RAN)

gNodeB

The 5G NR base station component responsible for radio communication with high-speed UE.

ID: gNodeB
eNodeB

The 4G LTE hardware that communicates directly with mobile handsets.

ID: eNodeB
O-RAN

A movement toward disaggregated, multi-vendor RAN using open-source software and general-purpose hardware.

ID: O-RAN
Massive MIMO

High-capacity antenna technology using large arrays to focus signals and increase spectral efficiency.

ID: Massive_MIMO
CU/DU/RU Split

The functional decomposition of a base station into Centralized, Distributed, and Radio units.

ID: CU/DU/RU_Split
Beamforming

Precision signal processing that focuses radio energy toward specific users to reduce interference.

ID: Beamforming
CPRI/eCPRI

Protocols used for the high-bandwidth interface (fronthaul) between Radio Units and baseband units.

ID: CPRI/eCPRI

#Signaling Protocols

SS7

The legacy backbone of global telephony signaling, vulnerable to location tracking and SMS interception.

ID: SS7
Diameter

The 4G evolution of RADIUS, providing AAA (Authentication, Authorization, Accounting) for LTE.

ID: Diameter
HTTP/2 (SBI)

The transport protocol for the 5G Service-Based Architecture, replacing Diameter with RESTful APIs.

ID: HTTP/2_(SBI)
NAS

High-level signaling between the handset and the Core network (e.g., MME or AMF).

ID: NAS
RRC

Low-level signaling between the handset and the base station managing radio bearer setup.

ID: RRC
MAP

An SS7 protocol used for roaming management and subscriber authentication in 2G/3G.

ID: MAP
GTP

The tunneling protocol used to carry user data across 4G and 5G core networks.

ID: GTP
CAMEL

Intelligent network protocol enabling prepaid and advanced roaming services in legacy networks.

ID: CAMEL

#Mobile Core (The Brain)

5GC

The cloud-native heart of 5G, utilizing microservices and containerized network functions. Central to our [Corporate Training](/services/corporate-training/) modules.

ID: 5GC
EPC

The IP-based core infrastructure for 4G LTE networks, often simulated in our [Dedicated Labs](/services/dedicated-labs/).

ID: EPC
AMF

The single point of entry for control plane signaling in 5G.

ID: AMF
MME

The 4G legacy counterpart to the AMF, managing tracking and paging.

ID: MME
UPF

The high-performance gateway in 5G that handles all subscriber data traffic.

ID: UPF
HSS/UDM

Databases containing subscriber profiles, authentication keys, and service permissions.

ID: HSS/UDM
IMS

The framework responsible for delivering Voice over LTE (VoLTE) and advanced messaging.

ID: IMS
SGW/PGW

The 4G gateways responsible for routing traffic and assigning IP addresses to mobile devices.

ID: SGW/PGW

#Cloud-Native & Virtualization

Kubernetes

The orchestration platform for managing containerized network functions at scale.

ID: Kubernetes
NFV

The practice of replacing specialized hardware with software on commodity servers.

ID: NFV
SDN

An architecture that decouples network control from the data forwarding plane.

ID: SDN
CNF

A telecom application designed to run natively in containerized cloud environments.

ID: CNF
Service Mesh

A dedicated infrastructure layer for managing service-to-service communication (e.g., Istio).

ID: Service_Mesh

#Connectivity & IoT

NB-IoT

A low-power wide-area (LPWA) technology designed for small-data device connectivity.

ID: NB-IoT
eSIM

An embedded SIM that allows for remote carrier provisioning without physical card swapping.

ID: eSIM
LPWAN

A wide-area network designed to support long-range communication at low bit rates.

ID: LPWAN
MQTT

A lightweight messaging protocol designed for high-latency, low-bandwidth networks.

ID: MQTT

#Security Specifics (Telecom)

AKA

The core mechanism for mutual authentication between a device and the network.

ID: AKA
SUCI

An encrypted version of the IMSI, preventing passive identity theft in 5G.

ID: SUCI
SEPP

A high-security proxy located at the edge of the 5G Core to protect roaming interconnects.

ID: SEPP
KDF

Algorithms used to generate cryptographic keys from a shared secret anchor.

ID: KDF

#Hardware & Infrastructure

RRU

The equipment that transmits and receives radio signals, usually mounted on the cell tower.

ID: RRU
BBU

The "brain" of the base station that processes digital signals before sending them to the core.

ID: BBU
Fronthaul / Backhaul

The fiber or microwave links connecting RRUs to BBUs (fronthaul) and BBUs to the Core (backhaul).

ID: Fronthaul_/_Backhaul
Small Cells

Low-power radio nodes used to increase capacity in high-density urban areas or indoor environments.

ID: Small_Cells

#Research Tools & Environment

SDR

Hardware like USRP or BladeRF used by researchers to transmit/receive cellular signals.

ID: SDR
Open5GS / srsRAN

Open-source implementations of the 5G/4G core and radio stack used for security testing.

ID: Open5GS_/_srsRAN
Wireshark (pcap-nw)

The primary tool for analyzing captured telecom traffic with specialized dissectors.

ID: Wireshark_(pcap-nw)
GNU Radio

A software toolkit for signal processing used to build custom cellular transceivers.

ID: GNU_Radio

#Attack Methodologies

Smishing

The use of deceptive SMS messages to trick users into revealing sensitive data or installing malware.

ID: Smishing
Signaling Storm

An attack or failure where a massive number of control plane messages cripples the network core.

ID: Signaling_Storm
Roaming Fraud

Exploiting vulnerabilities in inter-carrier signaling to bypass billing or intercept traffic.

ID: Roaming_Fraud
Resource Starvation

Denial of Service (DoS) attacks targeting finite radio or compute resources in the RAN.

ID: Resource_Starvation
// STAGE IV ACTIVE VALIDATION

EXPAND YOUR TELECOM INTELLIGENCE

Deepen your understanding of these protocols with our hands-on labs and specialized research courses on the TelcoSec platform.

ACCESS NOW [→]
SYSTEMS READY