Presentation Transcript

1. Telco Basics, Convergence and Total Network Connectivity

   Lesson 3
2. Some interesting numbers from CNN From: http://money.cnn.com/2003/08/28/pf/saving/hotjobsnow/index.htm
3. Review:What are our goals in Security? The “CIA” of security Confidentiality Integrity Availability (authentication) (nonrepudiation)
4. Access Controls Encryption Firewalls Intrusion Detection Incident Handling Computer Security Operational Model Protection = Prevention + (Detection + Response) Textbook uses Prevention, Detection and Remediation
5. Is an ROI from Security Possible? Security as an ROI Improved Security ROI Security that provides savings in the budget Security that provides additional revenue
6. Switching Systems - Manual Early telephone switchboards used flexible lines with plugs on each end to connect two jacks. To make a connection: The operator picked up a cord and plugged it into the jack for the person making the call The operator obtained the name or number from the caller for who they wanted to connect to The operator then plugged the other end of the cord into the correct jack to complete the connection. The plug had a couple parts referred to as the “tip” and “ring”, terms later used to denote the different wires in a pair of phone wires (the “tip” wire was connected to the tip of the plug, the “ring” to the ring)
7. Early Switchboard
8. 1884 Central Office
9. Early Telephone Switchboard
10. Early phone lines
11. A Toll Switchboard
12. Information Operators
13. Why are no men/young men working the switchboards? From “Information Warfare and Security” by Dorothy Denning, pg. 44: “In 1878 – long before the invention of digital computers – AT&T hired teenage boys to answer switchboards and handle office chores. It did not take long, however, before the company realized that putting boys in charge of the phone system was like putting a rabbit in charge of the lettuce. Bell’s chief engineer characterized them as ‘Wild Indians.’ In addition to being rude to customers and taking time off without permission, the boys played pranks with switchboard plugs. They disconnected calls and crossed lines so that people found themselves talking to strangers. A similar phenomenon took place in the United Kingdom. A British commentator remarked, ‘No doubt boys in their teens found the work not a little irksome, and it is also highly probable that under the early conditions of employment the adventurous and inquisitive spirits of which the average healthy boy of that age is possessed, were not always conducive to the best attention being given to the wants of the telephone subscribers.’”
14. Tip and RingNewton’s Telecom Dictionary Telephone terminology Old fashioned way of saying “plus” and “minus” or ground and positive in electrical circuits Derive their names from the operator’s cordboard plug The tip wire was connected to the tip of the plug The ring wire was connected to the slip ring around the jack Today, tip refers to the first wire in a pair of phone wires, ring is the second wire. Together they constitute the circuit that carries speech or data.
15. Tip and Ring
16. Switching Systems – Step-by-step The Step-by-step (or Strowger, the name of the undertaker who invented the switch) switch connects pairs of telephone wires by progressive step-by-step operation of a series of switches. Replaced the manual switchboard Required frequent maintenance and generated large amounts of electrical and mechanical noise
17. Almon B.Strowger – the legend Strowger moved into telephony from the undertaking business because, as the near-legend has it, he was convinced that some local telephone operators, their power over him having gone to their heads, were deliberately giving wrong numbers and busy signal reports to his customers in order to drive him out of business. Strowger determined to find a way to rid the world of those pesky operators, once and for all. The first Strowger office could serve only 99 telephones, used buttons instead of a dial and each telephone needed a strong battery and five wires to connect it to the central office. During the next few years, however, these and other problems were solved. In 1896 the first system, this time using a dial, was built by the Automatic Electric Company of Chicago, based on Strowger's patents. It went into operation at the City Hall in Milwaukee, Wisconsin. From http://www.bellsystemmemorial.com/capsule_bell_system.html
18. Strowger sounds
19. Switching Systems – Crossbar Works on principle of Common Control A method of switching in which the control equipment is responsible for routing calls through the network (as opposed to step device responsible only for the next step in the connection). Depends on a crossing or intersection of two points to make a connection. The switching matrix, or crosspoint array, depends on energizing a vertical line and a horizontal line and the point where they intersect represents the connection made.
20. Crossbar sound
21. Switching - Electronic The next evolutionary step in switching technology was the electronic switching system (ESS). Early electronic switches were still analog (the “reed switch”), now replaced with digital switches. Use stored program control as the next step to common control. Systems are much more fault tolerant. Tremendous increase in speed of switching with the new digital switches.
22. Private Branch Exchange (PBX) A privately owned (usually scaled-down) switching system for a company. A phone company central office was originally referred to as a public exchange thus a PBX is just a small version of the phone company’s larger central switching office. May also be called a Private Automatic Branch Exchange (PABX) Original PBX’s were manual, then systems introduced without the need for an operator – you would simply dial a ‘9’ for an outside line. Thus the term automatic was added to PBX. Today this distinction is obsolete.
23. Transmission Two broad categories of transmission media: Conducted Copper wire, coax, fiber optic Radiated Microwave, satellite Numerous considerations when discussing transmission media: Distance a signal will travel on a media, speed, requirement of line of sight, delay, susceptibility to interference/noise, cost, reliability, and of course, security
24. Transmission Media (cont.) Conducted Media Copper Wire Twisted pair Coaxial Cable Fiber Optics Radiated Media Microwave Satellite
25. Encoding and Decoding Since voice is inherently analog, there is a conversion process that must take place to change the signal from analog to digital (and back). Pulse Code Modulation (PCM) is the most common method of encoding an analog voice signal into a digital bit stream. The amplitude is first sampled and then coded (quantized), and then converted into a binary number. Based on Nyquist theorem, sampling should be at a rate twice the highest frequency on the channel to be effective. Thus, since highest frequency on voice channel is 4kHz, sampling should be done 8,000 times per second.
26. PCM
27. Encoding and Decoding Sampling – records the voltage level in time intervals along an analog wave. Quantizing – rounding to the nearest discrete value Encoding – Converting the numeric amplitude voltage levels into binary 8-bit code Decoding – Converting the 8-bit code into the voltage level Reconstruction – reproduces the original analog wave from the voltage levels Filtering – strips noise out.
28. Multiplexing The process of combining many signals into one composite signal – thus several calls can be transmitted at once over a single line. Three types of multiplexing in use Frequency Division Multiplexing (FDM) Time Division Multiplexing (TDM) Statistical Time Division Multiplexing (STDM)
29. FDM Frequency Division Multiplexing The oldest method of multiplexing Limited to analog transmissions Possible when useful bandwidth exceeds the required bandwidth of signals to be transmitted Splits bandwidth into multiple smaller pieces of bandwidth. e.g. 14,400 Hz can be divided into 6 channels of 2,400 HZ
30. TDM Time Division Multiplexing Can be used to transmit digital signals Uses time not frequency to achieve greater utilization of line Allocates a time slot for each device on the line transmitting Similar to timesharing in an operating system
31. FDM –vs- TDMData and Computer Communications by Stallings, p. 186
32. STDM Statistical Time division multiplexing Also known as asynchronous TDM and intelligent TDM Variation of TDM In TDM, if time slot not used, it is idle and wasted STDM assigns time slots dynamically, if time slot for one device is idle it can be used for another Requires address information to assure proper delivery
33. Call Trace Please Deposit… 2600 tone Quarter tone Some other ”phun phone sounds”
34. 2600 Hz tone “Until the late 1960’s, America’s telephone network was run 100% by AT&T and used 100% in-band signaling, whereby the circuit you talked over was the circuit used for signaling. For in-band signaling to work there needs to be a way to figure when a channel is NOT being used. You can’t have nothing on the line, because that “nothing” might be a pause in the conversation. So, in the old days, AT&T put a tone on its vacant long distance lines, those between its switching offices. That tone was 2600 Hertz. If its switching offices heard a 2600 Hz, it knew that that line was not being used.” From Newton’s Telecom Dictionary, 15th ed
35. Blue Boxes “Blue boxes are nothing more then a device to generate pairs of tones, and a single 2600 Hz tone. They had 12 keys, plus a single button (or a key). Each key was numbered 0 - 9, and had a "KP" key and "ST"key. The button emitted a pure 2600 Hz tone. A toll free number is dialed, and just as the number is ringing, the 2600 Hz tone is sent to clear or "Blow off" the call. A "Ker-chink" sound is heard, which is the switch signaling back indicating its ready to receive the tones. A "KP" is sent, followed by the 10 digit number, and ending with an "ST" tone. Call goes through, and the only indication was that an 800 number was dialed. This was how it was done more than 15 years ago. Since then, all of the American and Canadian phone companies have all but ditched this older "in-band" signaling equipment.” From: http://www.webcrunchers.com/crunch/FAQ.html
36. Voice Over NetworkNewton’s Telecom Dictionary Several potential benefits to moving voice over a data network You may save some money You may achieve some benefits of managing a voice and data network as one network If you have IP phones, moves, adds, and changes will be easier and cheaper Added, and integrated, new services including Integrated messaging Bandwidth on demand Voice emails
37. IP Telephony Overview H.323 Architecture Router MCU Gatekeeper Gatekeeper Packet-switched IP Network intranet, Internet, VPNs H.323 Terminal Ethernet Phone Ethernet Phone H.323 Terminal Gateway Router Gateway PBX-std. Phone Standard Phone PBX PBX Circuit-switched Networks PSTN, ISDN, wireless From: “Security Requirements and Constraints of VoIP” by Mika Marjalaakso
38. H.323 Components Terminal – a terminal, or a client, is an endpoint where H.323 data streams and signaling originate and terminate. It may be a multimedia PC with a H.323 compliant stack or a standalone device such as a USB (universal serial bus) IP telephone. A terminal must support audio communication; video and data communication support is optional. Gateway – a gateway is an optional component in a H.323-enabled network. When communication is required between different networks a gateway is needed at the interface. It provides data format translation, control signaling translation, audio and video codec translation, and call setup and termination functionality on both sides of the network.
39. H.323 Components (cont.) Gatekeeper – a gatekeeper is a very useful, but optional, component of an H.323-enabled network. Gatekeepers are needed to ensure reliable, commercially feasible communications. When a gatekeeper exists all endpoints (terminals, gateways, and MCUs) must be registered with it. A gatekeeper provides several services to all endpoints in its zone. These services include: Address translation Admission and access control of endpoints Bandwidth management Routing capability
40. H.323 Components (cont.) MCU – a multipoint control unit (MCU) enables conferencing between three or more endpoints. Although the MCU is a separate logical unit it may be combined into a terminal, gateway, or gatekeeper. The MCU is an optional component of an H.323-enabled network.The multipoint controller provides a centralized location for multipoint call setup. Call and control signaling are routed through the MC so that endpoints capabilities can be determined and communication parameters negotiated.
41. Video Audio Control Data G.711 G.722 G.723 G.728 G.729 H.261 H.263 (video Coding) H.245 H.225 Terminal to gatekeeper signaling H.225 Call signaling T.120 (Multipoint data transfer) RTP RTCP RTP RTCP Unreliable Transport (UDP) Reliable Transport (TCP) From: IP Telephony, by Goralski & Kolon Standards for IP Telephony H.323 for IP Telephony
42. H.225 and H.245 H.225 performs the signaling for call control uses H.245 to establish and terminate individual logical channels for communication Five phases of signaling process Call setup Initial communications and capability exchange Establishment of audiovisual communication Call services Call termination
43. Convergence & VoIP April 03, 2000, Issue: 807, http://www.internetwk.com/ Cisco Pushes VoIP To The Fore – Merrill Lynch, TI seek cost savings in new convergence products CHUCK MOOZAKIS Cisco last week beefed up its voice and data convergence arsenal with new enterprise-oriented voice-over-IP products. The new hardware and software, bundled under Cisco's Architecture for Voice, Video and Integrated Data (AVVID) nameplate, is an outgrowth of Cisco's plans to mesh its voice and data products under a single architecture. Both Merrill Lynch and Texas Instruments Inc. have been testing various components of AVVID for the past several months. "There are clear advantages to be gained in deploying this platform," said Don McFarlane, system architect at Merrill Lynch. "We expect costs to be reduced as we deploy unified messaging and have a uniform troubleshooting capability" for administering a single voice and data conduit, he said. Texas Instruments is using VoIP to link its overseas offices to trim telecommunications costs. The company is also using Cisco VoIP products as part of a trial with Expand Networks Inc. to push VoIP traffic over connections linking TI offices in Texas with remote facilities maintained by the company in Mexico.
44. VoIP (cont.) Among the products rolled out by Cisco were enhanced call processing management software, second-generation IP phones, more advanced support of VoIP in its Catalyst 6000 line of switches, as well as a new media server supporting converged voice/data networks. The products will be available later this spring. Among the new products: the 7910 and 7960 IP phones are priced from $145 to $495; the Cisco MCS server, an NT platform that supports transmission of voice, video and data across Cisco switches and routers, is priced at $14,995. CallManager software, which runs on the server, is offered free to existing customers and is preinstalled on the MCS server. The latest version of the software, compatible with Windows 2000, is capable of handling up to 100,000 users in a cluster made up of up to five media servers. "Cisco's move is a further endorsement of IP telephony within the enterprise,“ said analyst Tere Bracco of Current Analysis. "With a player like Cisco aiming products at large companies, it's telling IT managers that VoIP isn't a toy anymore; it's an inducement for businesses to take a look at this technology. What Will Drive VoIP? Still, Bracco said convergence isn't necessarily what will drive enterprises to sample VoIP. "It's the management that will drive deployment," she said. "Managing these IP devices is much simpler and can help a company save a lot of money for moves, adds and changes."
45. Convergence & VoIP (April 2000)
46. Why Converge? $ Savings Eliminate long distance toll charges Eliminate duplicate infrastructures Increased competition in the industry Enhancement of current applications and development of new applications Collaborative tools The industry has been heading there for a while now anyway…
47. Communication Networks Switched Networks – data transferred through series of intermediate nodes Circuit-switched networks Packet-switched networks Broadcast networks – no intermediate switching nodes, each station communicates over a shared medium Packet radio networks Satellite networks Local networks E.g. bus or ring
48. Circuit Switching Basic premise is that an uninterrupted connection exists between the endpoints Constant bandwidth dedicated to this session Resources for this session reserved for the entire duration of the call Blocking is possible as a circuit may not be available Initial connection requires considerable work but once established, minimal to maintain it The PSTN is a circuit switched network “Addressing” is geographically based
49. Packet Switching Data network is a packet switched network Designed for “bursty” traffic Normal data traffic not as sensitive to delays Voice highly sensitive to delays In packet switched network, data is fragmented into discrete units (packets) Each packet contains information about its source and destination A complete message may consist of 1000’s of packets Packets may actually take different routes and may arrive out of order, or not at all Packet switched networks do not reserve bandwidth for each connection Addressing is organizationally based
50. Circuit –vs– Packet Switching Call request signal Pkt 1 Pkt 2 Pkt 1 Time spent Hunting for An outgoing trunk Pkt 3 Pkt 2 Pkt 1 Time Pkt 3 Pkt 2 Pkt 3 data AB trunk BC trunk CD trunk A B C D A B C D
51. Circuit –vs– Packet Switching Circuit Switching Packet Switching Dedicated Bandwidth Yes No Quality of Service Voice Quality Toll-quality Non-toll-quality Delay Latency Minimal Variable Utilization Level Poor High Economics of Utilization Low High Call management features Numerous Few
52. Analog –vs– Digital Signaling At one point, the entire voice session utilized analog signaling, today it is only analog at the endpoints. Analog voice signal now converted to digital for transmission Digital transmissions preferred over Analog Digital equipment cheaper to produce Digital signals provide higher quality communication Digital less susceptible to ‘noise’ Digital signals easy to compress to reduce required bandwidth Thus – digital transmission facilities developed for PSTN to take advantage of these benefits: The T-Carrier system is born!!
53. Voice Energy Frequency
54. Multiplexing Frequency Signals
55. The T1-Carrier . . . . . . . . . . The U.S. T1-Carrier system can handle 24 digitized voice channels multiplexed together. A voice channel of 4-kHz must be sampled at an 8-kHz rate to render clear representation with one sample thus taken every 125 microseconds. With 193 bits (8*24channels plus 1 framing bit) taken every 125 microseconds, the data rate is 1,544,000 bits/second, or 1.544 megabits/second. This can be used for voice, or… CH 1 8 bits CH 24 CH 2 CH 3 CH 4 CH 5 CH 6 CH 7
56. Integrated Services Digital Network (ISDN) Telephone industry has gathered statistics for years on average length of call, average number of calls, etc. to be able to design a network that can handle the load. With the introduction of calls made for computer connections, their statistics went out the window – avg. length, for example, no longer applied. In an attempt to provide large-scale digital services, ISDN was introduced but with the 64Kbps rates, which at first seemed impressive, the need to use ISDN instead of the normal PSTN diminished. Instead an even higher speed method was desired. Digital Subscriber Lines (DSL) was an answer. Uses the same twisted-pair telephone wires that currently exist but utilizes the higher frequencies not used in voice band thus enabling both voice and data on the same medium. Asymmetric DSL (ADSL) takes advantage of the fact that the majority of traffic is downstream not upstream and provides greater downstream data rates.
57. CATV While all of the digital fun was going on in the PSTN, a new element was introduced to the picture, Community Antenna Television (CATV) Originally designed to carry one-way video signals, with the addition of an upstream return channel voice and data communication was possible. Analog head-ends replaced with digital devices Coax trunks replaced with fiber While voice is not generally available (a connection to the PSTN is necessary), data communication across cable has become an increasingly popular option.
58. Computer Telephony Integration (CTI) The SW and HW elements that allow a computer to manage telephone calls and integrate additional features beyond those offered by the PBX, is known as CTI. Popular in the SOHO environment One of the earliest applications was hotel-motel hospitality package (toll charge tracking, voice mail, housekeeping functions) Unified messaging (a single GUI for fax, voice mail, and e-mail) Additional and more sophisticated applications constantly being developed.
59. Review So, what factors have facilitated the move toward converged networks? Digitization of PSTN Rise of digital networks Competition from other industries such as CATV Increased integration of computers and telephony Technology advances which make things such as VoIP economically feasible.
60. Sample network and Security Internet Attack Internet
61. PSTN A Better Picture of the network and the potential threats Back Door Attack Internet Attack Internet User Connected Modem
62. PSTN Wireless And what else could possibly happen next? VoIP Back Door Attack Internet Attack Internet User Connected Modem
63. Summary What is the Importance and Significance of this material? How does this topic fit into the subject of “Voice and Data Security”?