ABSTRACT: Next Generation Network Network Elements (NEs) have been emerging in the marketplace to enable the convergence of voice and data services on common communications networks. These NEs are based on a distributed system model using common computing platforms and interfaces as opposed to the traditional centralized telecommunications NEs. GR-815, Issue 2, is the first commercial view of security for these types of new NEs.

The introduction of Internet Protocol (IP)-based packet networks along side of conventional Public Switched Telephone Network (PSTN) circuit-switched networks raises concerns for potential new security threats and vulnerabilities associated with interoperability and convergence of both networks. Topics covered in this document include the following.

• Section 2, Threats and Vulnerabilities, introduces the primary models of intrusion, and identifies attack points that all NE/NS's have in common. It also outlines common attack techniques.
• Section 3, Security Feature Requirements, describes the generic NE/NS security services required for protecting equipment in communications networks. It includes requirements for identification and authentication, confidentiality, system and resource access control, security audits, data and system integrity, and more.
• Section 4, Development Life Cycle Requirements, defines the generic requirements for Vendor Development Life Cycle, e.g., various phases of design, development, testing, installation, etc.