NIST Special Publications · SP 800-187

SP 800-187: Guide to LTE Security

US National Institute of Standards and Technology (NIST) · cited in 5 of our lessons

Explanation

What it covers. NIST publication explaining the security architecture of LTE mobile networks, including authentication, encryption and integrity protection, and identifying threats and mitigations for LTE networks. It is aimed at those who build, operate or depend on such networks.

In practice. It helps network operators and organisations using private or public LTE understand which protections exist and which are optional, so they can confirm that encryption and integrity features are enabled and that core network interfaces are protected. It also supports risk assessments of mobile connectivity for critical services. Evidence includes network configuration reviews and assessments of operator security.

Common gaps. Common gaps are assuming all security features are enabled by default and not considering threats such as fake base stations. Later network generations are not covered.

Lessons that cite it

Real incidents where this item mattered.