Define what is meant by security in the telecom world Describe the main threats against security Explain the main methods for authentication Explain the function of a firewall and a DMZ (demilitarized zone) Explain encryption and tunnelling Charging, affordability Chapter 5 Telecom business actor 2 End-user 1 Roles segments Business plan Identify Processes revenue Technical plans oppor- tunities Services Security Chapter 5 Chapter 6 Chapter 7 4 Elaborate 7 Implement service plan service Crucial for user 5 Identify 6 Implement perception solutions infrastructure Network Figure 6.1 Position of the chapter Understanding Changing Telecommunications - Building a Successful Telecom Business. Edited by A. Olsson C 2004 John Wiley & Sons, Ltd ISBN: 0-470-86851-1 Understanding Changing Telecommunications - Building a Successful Telecom Business Explain IPsec Explain the terms AAA, RADIUS, LDAP, TLS Explain cryptography and encryption Describe what security protocols are found at different layers Understand what is important for designing the security policy and the problems that appear Discuss security in radio networks 6.2 THE GOALS OF THE USER AND ACTOR. TERMINOLOGY Security is classified as a fundamental plan in this book. Moreover it is classified as one of the success factors. Security is a process, not a product. Security can never be guaranteed to 100 %, because of the significant human impact. Therefore trust is important for users and actors. The fundamental security-related requirements of the user are: Integrity - data cannot be manipulated by unauthorized users. Confidentiality - data cannot be accessed by unauthorized users. Availability - data is accessible to authorized users. Often authenticity is mentioned as a fourth fundamental requirement. Otherwise it has been regarded as part of integrity. Authenticity means that we know with whom we are communicating: we authenticate ourselves and form an integrity-protected secure session between each other. For a company, the needs might be somewhat developed: Whi