Monday 10 March 2025
The world of telecommunications is a complex web of networks and systems, working together to enable our daily communications. Among these systems is the IP Multimedia Subsystem (IMS), a critical framework that enables seamless integration of multimedia services such as voice, video, and messaging over IP-based infrastructures. However, this integration has also led to an increase in cyber threats and attacks targeting IMS networks.
To combat these threats, researchers have proposed a hierarchical security model for IMS networks, aimed at evaluating vulnerabilities and threat-specific risks using the STRIDE model’s six threat categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. The model is designed to provide a structured methodology for representing and analyzing threats and attack scenarios in layers within a hierarchical framework.
The researchers used a combination of network configurations, vulnerability information, and threat metrics to build the IMS-HAG (Hierarchical Attack Graph) model. They collected vulnerabilities from the National Vulnerability Database and used Nessus scanner to scan and collect vulnerabilities information for each function in the top layer. The model is populated with vulnerability threat information, and weights are assigned based on the perceived impact of a threat.
The researchers then performed simulations using the IMS-HAG model to evaluate the effectiveness of defense mechanisms before deploying them on IMS networks. They demonstrated the applicability of the model by evaluating three different attack scenarios, targeting various functions within the IMS network. The results showed that the model can effectively capture and assess threats to IMS networks, providing a comprehensive understanding of vulnerability risks.
The researchers also evaluated the impact of individual threats on systems within the application servers group, using the STRIDE model threat categories. They found that elevation of privilege had the highest impact, followed by information disclosure and denial of service. This highlights the importance of addressing these threats in IMS network security planning.
In addition to evaluating threats, the researchers also assessed the effectiveness of defense mechanisms before deploying them on IMS networks. They used the IMS-HAG model to evaluate the threat-specific risk after implementing each defense mechanism. The results showed that deploying patches on critical functions reduced threat risks significantly, while other defense mechanisms had a less pronounced impact.
The implications of this research are significant for telecommunications providers and network administrators. By using the proposed hierarchical security model, they can better understand their security posture, identify vulnerabilities, and develop targeted defense strategies to mitigate threats. The model’s ability to evaluate the effectiveness of defense mechanisms before deployment ensures that resources are allocated efficiently and effectively.
Cite this article: “Hierarchical Security Model for Evaluating Threats in IMS Networks”, The Science Archive, 2025.
Here Are The Keywords: Ip Multimedia Subsystem, Hierarchical Security Model, Stride Model, Cyber Threats, Ims Networks, Vulnerabilities, Threat Metrics, Attack Graph, Defense Mechanisms, Telecommunications Providers, Network Administrators
