cal distribution. Usually, most of the data originates from the CDR. CDR analysis can show many different things, ranging from the end-user call destinations and times (suitable to promote personalized telecommunication plans), to the existence of illegal practices like fraud. A lot is won if the operator can discover customer needs or act upon problems before the customers or competing operators discover them. This will prevent other operators from seducing the customers with an attractive personal proposal. This type of information, just as the customer database (customer management), is business critical. Therefore it is normally not outsourced, but handled by the opera- tors themselves. 16.8 SECURITY MANAGEMENT Security in telecom management usually addresses two different issues: telecom manage- ment systems intrinsic security and security management of end-user traffic. Telecom management security is of particular concern for telecom operators regarding intentional damage and fraud detection and prevention. Telecom management has access and configuration capabilities to any network element in the network and is therefore an access point for security attacks. SNMP v3 provides an interesting set of security services, which include encryption to assure privacy, and manager-agent authentication to guarantee sender identity and message integrity. Both telecom management internal security and end-user security make use of two different types of protection. Protection against Unauthorized Access This protection is performed through AAA (authorization, authentication and accounting) servers in the control layer, and it is addressed via password handling, access databases, authentication and encryption. Understanding Changing Telecommunications - Building a Successful Telecom Business The main enabling technologies are LDAP allowing secure database access to the telecom management or the telecommunication system, and RADIUS, mostly used for cellular user access authorization in mobile systems. Data Transfer Protecti