1. GISFI_SP_201203192GISIF#8, 26 - 28, March 20111 GISFI#8 Security & Privacy Working Group: Report Company:NEC Corporation Author(s):Anand R. Prasad, Chair Security and Privacy working group Contact:anand@bq.jp.nec.com Purpose:Approval Document#:GISFI_SP_201203192

2. 2 GISFI_SP_201203192GISIF#8, 26 - 28, March 2011 GISFI#8 Agenda GISFI_SP_201203178 Approach Note on proposed GISFI’s activity on Network Security, Krishna Sirohi and NEC Corporation GISFI_SP_201203176 Proposals for activity on network security requirements of India, NEC Corporation GISFI_SP_201203190 Proposals for security testing framework, Huawei GISFI_SP_201203191 Security update, gap analysis and recommendations, Ericsson Number to be assigned if docs can be made available officially by Ericsson: –GISFI_SP_201203xyz Security update, gap analysis and recommendations, Ericsson –GISFI_SP_201203abc 3GPP SAP draft input, Ericsson

3. 3 GISFI_SP_201203192GISIF#8, 26 - 28, March 2011 Security & Privacy WG Meeting Report 1/3 Secretary appointment: Cmdr. Balvant R. Sharma, Director of BIT Noida GISFI_SP_201203182 Security & Privacy working group agenda approved Membership given summary of TEC discussion on 22 March, 2012, Delhi (documents shown to TEC were GISFI_SP_201203183 and GISFI_SP_201203176 GISFI_SP_201203178 Approach Note on proposed GISFI’s activity on Network Security, Krishna Sirohi and NEC Corporation –Gave a proposal to do gap analysis in GISFI regarding Indian network security requirements –Proposal on doing gap analysis was approved –Telecommunication Security Council of India (TSCI) formation proposal: Mr. Dua to check TSCI creation elsewhere in India and inform GISFI membership by 5 April, 2012 Mr. Sirohi, Huawei, Ericsson and NEC will discuss on how/what on TSCI formation in GISFI. A half pager proposal is expected GISFI_SP_201203176 Proposals for activity on network security requirements of India, NEC Corporation –Gave details about gap analysis, issues etc. and proposed to start a (1) work item, (2) launch TSCI, (3) develop security testing details in GISFI, (4) start activity on making GISFI a bridge between TEC and market / Telecom Service Providers (TSPs) and (5) provide input to government regarding items to be finalized by May 2012. –Work item description (WID) on study regarding Indian network security requirements will be brought next meeting by Anand R. Prasad, NEC. Thus proposals 1, 2 and 5 were agreed and approved. –Proposal 4 was also approved As part of agreement with TEC to have a workshop Meeting will be held with TSPs before next GISFI meeting.. Professors giving advice to TSPs will also be invited.

4. 4 GISFI_SP_201203192GISIF#8, 26 - 28, March 2011 Security & Privacy WG Meeting Report 2/3 GISFI_SP_201203190 Proposals for security testing framework, Huawei –This document discussed about penetration resting –Agreed to add framework study in the also in the WID agreed under GISFI_SP_201203176 GISFI_SP_201203191 Security update, gap analysis and recommendations, Ericsson –The document proposes to send comments to TEC/DoT regarding the Indian national network security requirements –There was disagreement –The document was noted Two 3GPP SA-Plenary draft input were presented by Ericsson –These document propose to start a new working group in 3GPP on security testing of 3GPP based products and their certification –Input appreciated by membership –Mini, Ericsson, to check whether the draft inputs can be uploaded officially in GISFI website Check how liaison can be set with 3GPP Agreed to send LS to –CJK working group on security and –TEC with result of meeting, documents and dates for Meeting with TEC with report about discussions during GISFI#8 and Workshop with TEC

5. 5 GISFI_SP_201203192GISIF#8, 26 - 28, March 2011 Security & Privacy WG Meeting Report 3/3 Participate in TEC national working group on SG-17 Send liaison to following groups: –TEC: share information regarding status of GISFI activity Drafting: 1 st draft 5 April, Comments 6 April, Final 9 April and Send 10 April –3GPP: inform about current activity and offer collaboration regarding Indian national security requirements Come back in June meeting (GISFI#9) –Action to Anand R. Prasad, NEC Action: Setup liaison relation with 3GPP –CJK: inform about current activity of security and privacy working group Drafting by Anand: 1 st draft 5 April, Comments 6 April, Final 9 April and Send 10 April

6. 6 GISFI_SP_201203192GISIF#8, 26 - 28, March 2011 Actions 1.LS to TEC, see slide 5 for details, deadline for sending LS is 10 April 2.LS to CJK, see slide 5 for details, deadline for sending LS is 10 April 3.Meeting with TEC to give an update of Patna meeting, week of 16 April, date to be fixed 4.Workshop with TEC on Indian national network security requirements, week of 11 April, date to be fixed 5.3GPP documents upload to GISFI website, see slide 4, action is on Mini Vasudevan, Ericsson, 5 April 6.Check about TSCI activities in India, action on Mr. Dua, 5 April 7.WID on activities regarding Indian national network security requirements, Anand, NEC, GISFI#9