s normally not outsourced, but handled by the opera- tors themselves. 16.8 SECURITY MANAGEMENT Security in telecom management usually addresses two different issues: telecom manage- ment systems intrinsic security and security management of end-user traffic. Telecom management security is of particular concern for telecom operators regarding intentional damage and fraud detection and prevention. Telecom management has access and configuration capabilities to any network element in the network and is therefore an access point for security attacks. SNMP v3 provides an interesting set of security services, which include encryption to assure privacy, and manager-agent authentication to guarantee sender identity and message integrity. Both telecom management internal security and end-user security make use of two different types of protection. Protection against Unauthorized Access This protection is performed through AAA (authorization, authentication and accounting) servers in the control layer, and it is addressed via password handling, access databases, authentication and encryption. Understanding Changing Telecommunications - Building a Successful Telecom Business The main enabling technologies are LDAP allowing secure database access to the telecom management or the telecommunication system, and RADIUS, mostly used for cellular user access authorization in mobile systems. Data Transfer Protection Data transfer protection is mainly addressed through zonification, tunnelling and encryp- tion. Zonification is the determination of different boundaries between network segments called security zones. They usually correspond with natural boundaries observed in the network data flow or the network topology. The traffic flowing between different security zones is tunnelled using protocols like L2TP and L3TP. The tunnelling process encapsulates the TCP/UDP or the IP datagram providing special means of protection against spoofing (injection of hacker's IP packets in the data flow). The data can also be encrypted in the tun