Table of Contents

• Title and Copyright Information
• My Oracle Support
• What's New in This Guide
• 1 Introduction
  • 1.1 References
  • 1.2 Overview of DSA Tasks
  • 1.3 Intended Scope and Audience
  • 1.4 Acronyms
• 2 Understanding DSA Functionality and Logic
  • 2.1 DSA Overview
  • 2.2 Understanding DSA Functionality
  • 2.3 DSA Logic Process
    • 2.3.1 DSA Mandatory Configuration
  • 2.4 DSA Stateless Countermeasure Logic
    • 2.4.1 Application-ID Whitelist Screening (AppIdWL)
    • 2.4.2 Application-ID and Command-Code Consistency Check (AppCmdCst)
    • 2.4.3 Origin Realm and Destination Realm Whitelist Screening (RealmWLScr)
    • 2.4.4 Origin Host and Origin Realm Consistency Check (OhOrCstChk)
    • 2.4.5 Destination-Realm and Origin-Realm Match Check (DrOrMatch)
    • 2.4.6 Visited-PLMN-ID and Origin-Realm Consistency Check (VplmnORCst)
    • 2.4.7 Realm and IMSI Consistency Check (RealmIMSICst)
    • 2.4.8 Subscriber Identity Validation (SubsIdenValid)
    • 2.4.9 Specific AVP Screening (SpecAVPScr)
    • 2.4.10 AVP Multiple Instance Check (AVPInstChk)
    • 2.4.11 AVP Whitelist Screening (AVPWLScr)
    • 2.4.12 Origin Host and Origin Realm Format Check (OhOrFrmChk)
    • 2.4.13 Session Id Validation Check (SesIdValChk)
    • 2.4.14 Destination Host and Destination Realm Format Check (DhDrFrmChk)
  • 2.5 DSA Stateful Countermeasure Logic
    • 2.5.1 Message Rate Monitoring (MsgRateMon)
    • 2.5.2 Time-Distance Check (TimeDistChk)
    • 2.5.3 Previous Location Check (PreLocChk)
    • 2.5.4 Source Host Validation HSS (SrcHostValHss)
    • 2.5.5 Source Host Validation MME (SrcHostValMme)
    • 2.5.6 Session Integrity Validation Check (SesIntValChk)
• 3 Configuring Comagent with UDR as Remote Server
  • 3.1 ComAgent Configuration on DSR
  • 3.2 Comagent Configuration on UDR
  • 3.3 Comagent Connection Status Validation
• 4 UDR Configuration
  • 4.1 Enabling Security Profile on Active UDR NOAM for DSA Application
  • 4.2 Auditing Time Configuration on Active UDR NOAM
  • 4.3 Configure DSA Fields in UDR
  • 4.4 UDR Protection Against Excess Shared Memory (SHM) usage for DSA Calls
• 5 Upgrade
• 6 Configuring DSA
  • 6.1 DSA Pre-Activation Activities
  • 6.2 Activating DSA
  • 6.3 Configuring DSA Business Logic and Database Schema
  • 6.4 Configuring DSA Mandatory Options
  • 6.5 ART Configuration for DSA
  • 6.6 Enabling and Disabling DSA
  • 6.7 Deactivating DSA
• 7 DSA Tables
  • 7.1 Provisioning DSA Tables
  • 7.2 Configuring DSA Tables
  • 7.3 DSA Table Details
    • 7.3.1 Security_Countermeasure_Config Table
      • 7.3.1.1 Additional Provisioning Rules
    • 7.3.2 Foreign_WL_Peers_Cfg_Sets Table
      • 7.3.2.1 Additional Provisioning Rules
    • 7.3.3 System_Config_Options Table
      • 7.3.3.1 Additional Provisioning Rules
    • 7.3.4 TimeDistChk_Exception_List Table
    • 7.3.5 MCC_MNC_List Table
      • 7.3.5.1 Additional Provisioning Rules
    • 7.3.6 AppIdWL_Config Table
      • 7.3.6.1 Additional Provisioning Rules
    • 7.3.7 Realm_List Table
      • 7.3.7.1 Additional Provisioning Rules
    • 7.3.8 VplmnORCst_Config Table
      • 7.3.8.1 Additional Provisioning Rules
    • 7.3.9 SpecAVPScr_Config Table
      • 7.3.9.1 Additional Provisioning Rules
    • 7.3.10 TimeDistChk_Country_Config Table
      • 7.3.10.1 Additional Provisioning Rules
    • 7.3.11 AVPInstChk_Config Table
      • 7.3.11.1 Additional Provisioning Rules
    • 7.3.12 MsgRateMon_Config Table
      • 7.3.12.1 Additional Provisioning Rules
    • 7.3.13 AppCmdCst_Config Table
      • 7.3.13.1 Additional Provisioning Rules
    • 7.3.14 CreateAndSendMsg_Config Table
      • 7.3.14.1 Additional Provisioning Rules
    • 7.3.15 Exception_Rule_Config Table
      • 7.3.15.1 Additional Provisioning Rules
    • 7.3.16 IMSI_Exception_Config Table
      • 7.3.16.1 Additional Provisioning Rules
    • 7.3.17 MCC_MNC_Exception_Config Table
      • 7.3.17.1 Additional Provisioning Rules
    • 7.3.18 Origin_Host_Exception_Config Table
      • 7.3.18.1 Additional Provisioning Rules
    • 7.3.19 Realm_Exception_Config Table
      • 7.3.19.1 Additional Provisioning Rules
    • 7.3.20 VPLMN_ID_Exception_Config Table
      • 7.3.20.1 Additional Provisioning Rules
    • 7.3.21 RealmIMSICst_Config Table
      • 7.3.21.1 Additional Provisioning Rules
    • 7.3.22 AVPWLScr_Config Table
    • 7.3.23 MCC_MNC_Exception_list Table
• 8 DSA MEALs
  • 8.1 Configuring DSA MEALs
  • 8.2 Measurement
    • 8.2.1 ProcessedBy<Countermeasure ShortName>
    • 8.2.2 DetectedBy<Countermeasure ShortName>
    • 8.2.3 DroppedBy<Countermeasure ShortName>
    • 8.2.4 RejectedBy<Countermeasure ShortName>
    • 8.2.5 FailedExec<Countermeasure ShortName>
    • 8.2.6 CreateAndSendMsg
  • 8.3 SysMetric
    • 8.3.1 VulnerableBy<Countermeasure ShortName>
    • 8.3.2 MsgRatePerPeer
  • 8.4 <Countermeasure ShortName>ExecFailed Alarm
• 9 Support for Visualization of DSA Vulnerable Message Logs
  • 9.1 DSA Vulnerable Message Logging Details
  • 9.2 Configuring the Visualization Server for Vulnerable Message Logging
• 10 Security Exception Function for CounterMeasure
  • 10.1 Configuring Security Exception List
• A General Recommendations
• B Configuring Visualization Server