// PLATFORM CORE::TRAINING

TELCOSEC ACADEMY: Telecom Security Training, Courses and Learning Paths

Self-paced telecom security training from the TelcoSec research community: courses and learning paths that explain how telecom networks work and how they are secured, from the PSTN and GSM to SS7, SIP, LTE and 5G.

Built on the Standards

Courses follow the 3GPP, ITU-T and GSMA specifications behind each network, and every course ends in a final exam: 75 questions drawn from a bank of 150, with 70% needed to pass.

Hands-on Labs

ProLabs put the theory into practice on isolated lab networks, from GSM to 4G LTE/EPC and 5G standalone cores. Labs are sold separately, and some are included with a plan.

FAQ

// LEARNING PATHS

PATH BASE

Telecom Foundations Path

How the networks behind every call and data session work. Five courses take you from signals and transmission through the telephone network, copper broadband, GSM and the SIM, and end in the TelcoSec Telecom Foundations certification. No telecom background needed.

  • GEN-101Telecom Fundamentals (free)
  • PSTN-101PSTN Fundamentals
  • DSL-101ADSL Fundamentals
  • GSM-101GSM Fundamentals
  • SIM-101SIM Cards Fundamentals
LEVEL: Intermediate67.5 hours

Leads to the TelcoSec Telecom Foundations certification

VIEW PATH AND COURSES [→]: Telecom Foundations Path
PATH SIG

Telecom Signaling Analyst

How operator networks signal calls, mobility and sessions, in the circuit-switched world and over IP. Three courses take you from the SS7/C7 network, its MTP, ISUP, SCCP, TCAP and MAP layers and how operators build it, to SIP, SDP and RTP, and end in the TelcoSec Telecom Signaling Analyst certification.

  • SS7-101SS7 Fundamentals
  • SS7-201SS7 Architecture
  • SIP-101SIP Fundamentals
LEVEL: Intermediate40.5 hours

Leads to the TelcoSec Telecom Signaling Analyst certification

VIEW PATH AND COURSES [→]: Telecom Signaling Analyst
PATH MOB

Mobile Network Analyst

How today's mobile networks work, from the radio to the core. Two courses take you through LTE and its evolved packet core, then 5G with NR and the service-based 5G core, and end in the TelcoSec Mobile Network Analyst certification.

  • LTE-101LTE Fundamentals
  • 5G-1015G Fundamentals
LEVEL: Intermediate27 hours

Leads to the TelcoSec Mobile Network Analyst certification

VIEW PATH AND COURSES [→]: Mobile Network Analyst
PATH BBA

Broadband Access Analyst

How the fixed access network reaches homes and businesses over copper. Two courses take you from the subscriber line and the telephone exchange to ADSL: how a telephone pair carries a voice call, and how the same pair becomes an always-on broadband connection.

  • PSTN-101PSTN Fundamentals
  • DSL-101ADSL Fundamentals
PATH GSA

GSM Security Analyst

How GSM networks are built, signalled and secured. Five courses take you from GSM and the SIM through the protocol-level architecture and signalling analysis to authorised security assessment, detection and mitigation.

  • GSM-101GSM Fundamentals
  • SIM-101SIM Cards Fundamentals
  • GSM-201GSM Architecture
  • GSM-310GSM Signalling Analysis with gr-gsm
  • GSM-301GSM Security

// WHAT YOU WILL LEARN

01 How Networks Work

  • Explain how signals are digitised, multiplexed, switched and transported, and how the PSTN sets up, routes and bills a call.
  • Follow a call through ISUP and a roaming dialogue through SCCP, TCAP and MAP, and describe how SIGTRAN carries SS7 over IP.
  • Explain how SIP, SDP and RTP set up sessions, and how SIP carries VoLTE and VoNR in the IMS.
  • Follow attach and EPS bearers in LTE, and registration, PDU sessions and QoS flows in the 5G core.

02 How They Are Secured

  • Explain the GSM air interface, authentication, ciphering, identity and signalling attack surfaces as mechanisms.
  • Describe how the SIM authenticates the subscriber, and how operators manage cards over the air.
  • Run a GSM security assessment lawfully against a controlled lab range, and read GSM signalling with gr-gsm.
  • Design detection, monitoring and incident response for GSM threats in a mobile operator.

// HOW THE PATHS FIT TOGETHER

01

Foundations

Start with Telecom Fundamentals, which is free, then complete the Telecom Foundations path: PSTN, ADSL, GSM and SIM cards.

02

Specialise

Choose a domain: signalling (SS7 and SIP), mobile networks (LTE and 5G) or broadband access.

03

Security

The GSM Security Analyst path takes GSM from architecture and signalling analysis to authorised assessment, detection and mitigation.

04

Practice

Apply what you learned in ProLabs: isolated lab networks for GSM, 4G LTE/EPC and 5G standalone cores.

// TECHNICAL DEPTH [CURRICULUM VISUALS]

Signalling at Message Level

The signalling courses go beyond block diagrams: you follow a call through ISUP and a roaming dialogue through SCCP, TCAP and MAP, plan point codes and global title translation, and diagnose a failing network from its traces.

From LTE to the 5G Core

The mobile courses follow a subscriber from attach and EPS bearers in LTE to registration, PDU sessions and QoS flows in the service-based 5G core, including network slicing and roaming.

// HOW THE ACADEMY WORKS

Free to Start

Telecom Fundamentals, the security tools and the research hub are free on the Recruit plan. No card required.

Final Exams

Each course ends in a 75-question final exam drawn from a bank of 150. 70% passes; attempts are unlimited, with a 7-day wait between them.

Certifications

Passing the final exams of a path earns its TelcoSec certification. Certificates are included in the Professional plan.

Research Community

Courses are written and maintained by the TelcoSec research community, a non-profit telecom security collective.

// STAGE IV ACTIVE VALIDATION

START WITH TELECOM FUNDAMENTALS

Telecom Fundamentals is free. Sign in to start, then move on to a learning path when you are ready.

START FREE [→]
SYSTEMS READY

Get Notified of New Courses

Get an email when new courses, learning paths or labs are published.