From: To: Cc: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Kimmins John F. csric5-wg10@googlegroups.com Morin Drew [csric5-wg10] Adaptive Mobile - Additional Material Monday, November 7, 2016 12:47:05 PM image001.png All,   I have attached additional material (including animations) to supplement Brian Collin’s presentation last Thursday. Please consider it CONFIDENTIAL information.   John   John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com   -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633206C26F849581BAFE7F3CFA70%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: csric5-wg10@googlegroups.com on behalf of McPherson, Danny csric5-wg10@googlegroups.com; Morin, Drew [csric5-wg10] Canceling 12/22 & 12/29 Meetings, next one 1/5/2017 Thursday, December 22, 2016 12:15:13 PM   Team, Apologies for the late notice here.  We’re canceling the WG teleconference meetings through the holidays (this Thursday and next) and will reconvene on January 5 at 1500 ET.   Happy & Safe Holidays!     -danny & JohnK -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/7D7371F0-5F91-4751-B33F-8A29D50B2D3B%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: csric5-wg10@googlegroups.com on behalf of McPherson, Danny csric5-wg10@googlegroups.com; Morin, Drew [csric5-wg10] FW: New Working Group focused on Telecom Security Risks Thursday, October 6, 2016 6:49:53 AM   WG folks, attached are Karsten Nohl’s slides for this SME briefing to the WG next Thursday.  Please make an attempt to pre-review and if possible, prepare any questions ahead of time you’d like to ask Karsten.   We’re still planning our call this afternoon, agenda as JohnK has provided.   Thanks,   -danny (&JohnK)     From: "Kimmins, John F." Date: Thursday, October 6, 2016 at 5:49 AM To: "McPherson, Danny" Subject: Fwd: New Working Group focused on Telecom Security Risks Danny FYI- you can share with WG John K Sent from my iPhone Begin forwarded message: From: "Karsten.Nohl@ril.com" To: "Kimmins, John F." Subject: Re: New Working Group focused on Telecom Security Risks Dear John, Here you go. Cheers, -Karsten "Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential and may be privileged. If you are not the intended recipient, you are hereby notified that any review, re-transmission, conversion to hard copy, copying, circulation or other use of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this message and any attachments from your system. Virus Warning: Although the company has taken reasonable precautions to ensure no viruses are present in this email. The company cannot accept responsibility for any loss or damage arising from the use of this email or attachment." -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/05041034-C746-4B49-84EC-C5311B85CB76%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: csric5-wg10@googlegroups.com on behalf of Steven McKinnon csric5-wg10@googlegroups.com [csric5-wg10] FW: SS7 Vulnerabilities Friday, August 26, 2016 3:26:15 PM For those in the group who are close to DC, this event is being held on Monday.   Sorry for sharing last minute but thought it might be interesting for those who are close enough to attend.   From: Les Goldsmith [mailto:les@esdamerica.com] Sent: Thursday, August 25, 2016 6:40 PM To: info@esdamerica.com Subject: SS7 Vulnerabilities Breaking the National Security Backbone, SS7 Vulnerabilities, and Nation State Signals Intelligence. ***REGISTER NOW FOR THIS FREE EVENT:https://www.eventbrite.com/e/national-security-backbone-ss7vulnerabilities-tickets-27096429149 When: August 29, 2016 Time: 10:00am - 12:30pm We will serve coffee and a light snack in the lobby after the event for those who want to network. Room: MPA B-07 805 21st Street NW Washington, DC 20052 George Washington University, Foggy Bottom Campus Thanks, Les Goldsmith Chief Executive Officer Direct: (702) 483 0254 CP500i +807 6654 6120 ESD America Inc Ph. (702) 605 0160 esdamerica.com - esdcryptophone.com - esdoverwatch.com - esdoversight.com This email may contain confidential information and may be intercepted by third parties beyond our control. However if you wish to contact us with 100% security then you need a Cryptophone. Cryptophone's provide end to end encryption with a verifiable source code -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB0437D0E20D520A77AB352BDBF0EC0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, Visit From: To: Subject: Date: "Wang, Xiaomei" via csric5-wg10 McPherson, Danny; csric5-wg10@googlegroups.com [csric5-wg10] RE: August 5, 2016 Meeting Notes Friday, August 5, 2016 3:15:30 PM Danny,   I did attend this morning’s conference call.   Please correct your attendance list. Thanks, Xiaomei Wang Verizon Network Technology   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Friday, August 05, 2016 7:51 AM To: csric5-wg10@googlegroups.com Subject: [E] [csric5-wg10] August 5, 2016 Meeting Notes     Team, Here’s a quick summary of the action items I collected from the call today.  If I missed anything please let John and I know.  Thanks for your participation!   ACTION ITEMS:   1. John Kimmins and Danny McPherson to connect on current WG tasking and conciseness of charter with proposal back to work group on th emailing list before the next teleconference for any modifications as necessary (e.g., scoping the work appropriately).   Furthermore, we will give consideration to use of “Legacy” in WG name as some WG members believe it conveys a message that these protocols and associated threats are going away soon and that’s not necessarily the case.  We need to frame this appropriately and find the right balance, and will connect with Steven and FCC on this matter and explore whether tweaking the name makes sense and is appropriate. 2. Martin Dolly will provide a read ahead and 10-15 minute briefing on the next call about IMSI catchers. 3. John Marinho on the Risk Assessment document.  We will continue to use this document as the initial WG product.  We will make recommendations on division of work for intermediate read out to CSRIC at the end of Q3, and the final work product in March.  Beyond the current contents of the draft framework provided, the document will provide a catalog and gap analysis of current work items and venues as they relate to topics here, to include IMSI catchers and robo calling, and will lend some text to these topics, associated primitives, and some use cases or scenarios, as well as potential recommendations for further work on these topics within CSRIC, the broader FCC, or elsewhere.  Comments from the call today, as well as written comments from Steven McKinnon and others will be considered as the next revision is developed.  John and team will continue to iterate on this document and provide update before next call – other WG members that wish to provide text should ping John ASAP. 4. WG Chairs will connect with FCC to obtain procedural / legal advice for handling sensitive information.  Work done elsewhere enabled by Walter Johnson may provide a framework for accommodating any sensitive information handling.  Chairs will provide WG with “ground rules” ASAP. 5. WG Chairs will schedule SME briefings from Silke Holtmanns (Nokia), with written briefing first. 6. Travis Russell[?]: WG agreement SME briefing should be requested from Karsten Nohl to WG.  Travis[??] will provide chairs with contact information and initial introductory message text. 7. WG Chairs will setup doodle poll for new weekly call timing that best accommodates largest set of members.     Roll Call (I believe I got these correct, if anyone sees errors place let me know):   PRESENT:   Kathleen Blasco          DHS NCCIC Kevin Briggs                DHS NCCIC Martin Dolly                ATIS Mark Easley                AT&T John Kimmins              iConectiv Philip Linse                  CenturyLink Tim Lorello                  SecuLore Solutions John Marinho              CTIA Steven McKinnon        FCC Danny McPherson       Verisign Drew Morin                T-Mobile Travis Russell              Oracle   NOT PRESENT:   Nilesh Ranjan              T-Mobile Xiaomei Wang            Verizon Wireless     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/CFBE59905AF2-49E7-BDFE-7C8269D2E848%40verisign.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/92FC7B17559B9E4D95F1A44A2203A6491077B0BC%40CASAC1EXP011.uswin.ad.vzwcorp.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups.com on behalf of Steven McKinnon McPherson Danny; John Marinho; csric5-wg10@googlegroups.com Morin Drew; Walter Johnston; Charles Mathias; Brian Josef [csric5-wg10] RE: CSRIC V WG 10 Teleconference - August 10, 2016 Thursday, August 11, 2016 8:53:08 AM Thanks for the nudge.  I haven’t been able to connect with Walter yet but hope to do so before the meeting today.   Steven   From: McPherson, Danny [mailto:dmcpherson@verisign.com] Sent: Thursday, August 11, 2016 8:49 AM To: John Marinho ; csric5-wg10@googlegroups.com; Steven McKinnon Cc: Morin, Drew ; Walter Johnston ; Charles Mathias ; Brian Josef Subject: Re: CSRIC V WG 10 Teleconference - August 10, 2016     Ahh, yes, I meant to provide an update on that.  Steven, John Kimmins and I connected on this after the call last week and Steven formally requested from Suzon and Jeff that they provide us some guidance and ground rules here, considerate of your reference to the TAC activity and Walter’s experiences, and how that might convey here.    We’re still waiting on their response – let this serve as a nudge Steven and please plan to provide an update on the call today!   -danny   From: John Marinho Date: Thursday, August 11, 2016 at 8:43 AM To: "McPherson, Danny" , "csric5-wg10@googlegroups.com" Cc: "Morin, Drew" , "Walter.Johnston@fcc.gov" , "Charles.Mathias@fcc.gov" , Brian Josef Subject: RE: CSRIC V WG 10 Teleconference - August 10, 2016 Danny,   Do we plan to address the question I raised on the last call regarding the treatment of information exchange that is sensitive (e.g. FOUO) and not intended for public disclosure, and the associated ground rules (e.g. appropriate markings, participant obligations to protect the information, etc.)?   As I mentioned, in my past experience Walter Johnston at the FCC was most helpful in this space when during a TAC activity in 2014 we had a similar situation regarding a cybersecurity assessment, and procedures were implemented to protect the information accordingly.   Happy to discuss if you have any questions.   Thanks, John   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Thursday, August 11, 2016 8:33 AM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] CSRIC V WG 10 Teleconference - August 10, 2016     Team, Reminder for the call this afternoon 1500-1600 ET.  The dial-in information is as follows:   *Premiere Intl. Bridge 11 - (b) (4)   CALL AGENDA   1. Welcome Mohammad Khaled (Nokia) to the WG 2. Risk Assessment Outline Review & Next Steps – John Marinho, et al. 3. Robo-calling Brief, Discussion, and Action Plan (slides to be provided) – Martin Dolly 4. SME Briefings Update (Silke Holtmanns & Karsten Nohl) – John Kimmins 5. Next CSRIC V Council Meeting (September 14, 2016) Plan (Specifically, do we want to provide an interim report or just a generic update, concerns on deliverables for WG, etc..  – John, Danny & Steven 6.  AOB   I believe that’s it for this week.  IF you haven’t commented on the Risk Assessment Draft please do so ASAP.   Also, note that at least one WG member is having troubles receiving Google Groups emails.  I’m looking into alternatives that don’t introduce new problems.     -danny -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/0C2BC5D4-0FA145AF-9828-AA682A438072%40verisign.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB04376D736C86BDB5F6129451F01E0%40BY1PR09MB0437 namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: csric5-wg10@googlegroups.com on behalf of John Marinho Morin, Drew; csric5-wg10@googlegroups.com; McPherson, Danny; Kimmins, John F. [csric5-wg10] RE: FCC CSRIC V Working Group 10 RiskAssessmentSummary Rev 1 3 5 5 redline.docx Friday, December 9, 2016 3:11:08 PM Thank you!   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Morin, Drew Sent: Friday, December 9, 2016 2:48 PM To: John Marinho ; csric5-wg10@googlegroups.com; McPherson, Danny ; Kimmins, John F. Subject: [csric5-wg10] FCC CSRIC V Working Group 10 RiskAssessmentSummary Rev 1 3 5 5 redline.docx   I made some minor edits for clarification to section 9.3.3 for clarity and accuracy.   Best, Drew   Drew Morin  Director, Federal Cyber Security Technology and Engineering Programs   601 Pennsylvania Avenue NW Washington, DC 20004 Direct 202.654.8224 Mobile 410.271.5095      Drew.Morin2@t-mobile.com www.t-mobile.com       -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/00f1fc1f5bbe4746b9e8c9843d5ad10c%40PRDMSEXCH032.gsm1900.org. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/d5be050f4e0547b3a6391e7f4d8c8073%40EXCH2013.ctia.org. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Importance: csric5-wg10@googlegroups.com on behalf of Steven McKinnon Kimmins John F.; csric5-wg10@googlegroups.com Morin Drew; Gallagher John B [CTO] [csric5-wg10] RE: Revised Draft - Final CSRIC Deliverable Wednesday, March 1, 2017 1:46:12 PM High Thanks to everyone contributing to this document.     Please keep in mind that the deadline for submitting the document is TODAY since the deliverable will be voted on by the entire CSRIC council.  At the very latest, this document must be submitted to Jeff Goldthorp and Suzon Cameron at the FCC no later than COB tomorrow.    Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, March 01, 2017 1:36 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew ; Gallagher, John B [CTO] Subject: [csric5-wg10] Revised Draft - Final CSRIC Deliverable   Team,   John Marinho edited the document to reflect the discussion on yesterday’s call. I have attached marked-up and clean versions of the report. Please provide comments ASAP. We will discuss any final comments on the call tomorrow.   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633DB444C66510C58DCF481CF290%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB04378387126647B331979F3CF0290%40BY1PR09MB0437 namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Steven McKinnon csric5-wg10@googlegroups.com; JMarinho@ctia.org [csric5-wg10] RE: Risk Assessment Document: Feedback please! Wednesday, August 10, 2016 9:24:22 AM FCC CSRIC V Working Group 10 RiskAssessmentSummary - Outline draft SMMcomments.docx John M –   Please see my comments on the outline attached.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Tuesday, August 09, 2016 12:59 PM To: csric5-wg10@googlegroups.com Subject: [csric5-wg10] Risk Assessment Document: Feedback please!     Team, Attached is an updated outline (clean & redline) from John Marinho and co. in preparation for our discussion this Thursday.  Please provide comments to John and/or the mailing list _before the meeting and be prepared to discuss this document on the call.  Also, if you have interest in contributing to a certain section and have yet to engage with John or volunteer then please feel free to coordinate with John directly as he’s currently serving and lead editor.    Discussion on the list is encouraged (expected)!   Additionally, you should have received a recurring meeting invite for Thursdays at 3P ET for the WG teleconference.  We’ll provide a read ahead and agenda before each meeting as appropriate.  If there’s something you’d like to see or have concerns with please contact John Kimmins and/or I.   Thanks in advance,   -danny (& JohnK)     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/ABFA1B28-990F4CC8-8635-D5D06F471106%40verisign.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB0437A34B3CE6CA6D2B4FAC42F01D0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Briggs Kevin Steven McKinnon; csric5-wg10@googlegroups.com; JMarinho@ctia.org Khurana, Shaheen (CTR); Blasco, Kathleen [csric5-wg10] RE: Risk Assessment Document: Feedback please! Wednesday, August 10, 2016 10:25:12 AM FCC CSRIC V Working Group 10 RiskAssessmentSummary Rev 1.1 Redline - Outline draft-KBriggs-10 Aug 2016.docx Attached are some of our comments. Regards, Kevin   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Steven McKinnon Sent: Wednesday, August 10, 2016 9:23 AM To: csric5-wg10@googlegroups.com; JMarinho@ctia.org Subject: [csric5-wg10] RE: Risk Assessment Document: Feedback please!   John M –   Please see my comments on the outline attached.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Tuesday, August 09, 2016 12:59 PM To: csric5-wg10@googlegroups.com Subject: [csric5-wg10] Risk Assessment Document: Feedback please!     Team, Attached is an updated outline (clean & redline) from John Marinho and co. in preparation for our discussion this Thursday.  Please provide comments to John and/or the mailing list _before the meeting and be prepared to discuss this document on the call.  Also, if you have interest in contributing to a certain section and have yet to engage with John or volunteer then please feel free to coordinate with John directly as he’s currently serving and lead editor.    Discussion on the list is encouraged (expected)!   Additionally, you should have received a recurring meeting invite for Thursdays at 3P ET for the WG teleconference.  We’ll provide a read ahead and agenda before each meeting as appropriate.  If there’s something you’d like to see or have concerns with please contact John Kimmins and/or I.   Thanks in advance,   -danny (& JohnK)     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/ABFA1B28-990F4CC8-8635-D5D06F471106%40verisign.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5- wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB0437A34B3CE6CA6D2B4FAC42F01D0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/A52CAE95B5DF314BB8067473EF4D58D3013C789476%40D2ASEPREA004. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of John Marinho Khaled Mohammad (Nokia - US/Irving); McPherson Danny; csric5-wg10@googlegroups.com Morin, Drew [csric5-wg10] RE: Risk Assessment Tracking Table Monday, October 17, 2016 2:27:48 PM image001 png Thank you Mohammad!   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Khaled, Mohammad (Nokia US/Irving) Sent: Monday, October 17, 2016 2:26 PM To: McPherson, Danny ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: Risk Assessment Tracking Table   Hi John M, John K and Danny,   I added input to section 8c(Threat Vectors & Threat Models) to the latest version 1.3.2  of the draft sent by John M last Thursday.   We tried to cover most of the attacks known so far.   Please feel free to review , comment and edit.   Thanks , Mohammad   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Monday, October 17, 2016 8:50 AM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] FW: Risk Assessment Tracking Table     Folks, If you don’t see your name in the chart please consider identifying where you can explicitly contribute new text, or edit and augment existing text.  If you’ve provided text in one of these sections and don’t see it reflect please let John Kimmins or I know.   Thanks in advance,   -danny   From: "Kimmins, John F." Date: Thursday, October 6, 2016 at 2:55 PM To: "McPherson, Danny" , John Marinho Subject: Risk Assessment Tracking Table Here is the last version that was sent out weeks ago. We need to get other contributors.   John   John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com   -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/0593CF8C-B3F5-410BB669-5344B4534562%40verisign.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/AM4PR0701MB2195FA1D098EA71DB2E32D64F8D00%40AM4PR0701MB2195.eurprd07.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/4106f6080a344280a251a2d9af81fbda%40EXCH2013.ctia.org. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups.com on behalf of Morin Drew John Marinho; Kimmins John F.; csric5-wg10@googlegroups.com Gallagher John B [CTO] [csric5-wg10] RE: Thursday, December 8 WG Call AGENDA & LOGISTICS Wednesday, December 7, 2016 5:05:30 PM No apology necessary – you’re the one stuck with the editing process and I, for one, appreciate that!   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of John Marinho Sent: Wednesday, December 7, 2016 4:33 PM To: Kimmins, John F. ; csric5-wg10@googlegroups.com Cc: Morin, Drew ; Gallagher, John B [CTO] Subject: [csric5-wg10] RE: Thursday, December 8 WG Call AGENDA & LOGISTICS   All,   I have received a “wealth” of comments on the draft assessment report.   I plan to have an update out to you later this evening for review.   Apologies for the delay.   John   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, December 7, 2016 4:26 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew ; Gallagher, John B [CTO] Subject: [csric5-wg10] Thursday, December 8 WG Call AGENDA & LOGISTICS   Team, Here’s the dial-in information for the call tomorrow @1500 ET:   (b) (4)     Agenda:   1. Review current Risk Assessment draft report – John Marinho/John Kimmins 2. Update on GSMA NDA Agreement – John Kimmins 3. AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633580F03B00FFF793C7E77CF850%40DM5PR06MB2633.namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/2a1abbc07383468390410d5a5a0b5268%40EXCH2013.ctia.org. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/1745285e067f4f9f9159364f74dbd977%40PRDMSEXCH032.gsm1900.org. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups.com on behalf of Morin, Drew Kimmins, John F.; csric5-wg10@googlegroups.com Gallagher, John B [CTO] [csric5-wg10] RE: Thursday, December 15 WG Call AGENDA & LOGISTICS Thursday, December 15, 2016 10:19:41 AM FYI – John and I are at the CTIA CSWG face to face today and will not be able to attend   From: Kimmins, John F. [mailto:jkimmins@iconectiv.com] Sent: Thursday, December 15, 2016 7:07 AM To: csric5-wg10@googlegroups.com Cc: Morin, Drew ; Gallagher, John B [CTO] Subject: Thursday, December 15 WG Call AGENDA & LOGISTICS   Team, Here’s the dial-in information for the call today @1500 ET:   (b) (4)   Agenda:   1. Review current Risk Assessment final report – John Marinho/John Kimmins 2. Identify Next Steps - All 3. Update on GSMA NDA Agreement – John Kimmins 4. AOB   I have attached the final interim Risk Assessment Report that was provided to the FCC. We also provided a redacted version removing the sensitive content to the FCC. Thanks to John Marinho for acting as the Lead Editor and all of the contributors to report.   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/2ed22cee66434853af2ff43a6f371e1b%40PRDMSEXCH032.gsm1900.org. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups.com on behalf of DOLLY MARTIN C John Marinho; McPherson Danny; csric5-wg10@googlegroups.com Morin Drew [csric5-wg10] RE: Thursday, October 20 WG Call AGENDA & LOGISTICS Wednesday, October 19, 2016 11:11:14 PM Danny,   I can take 8.b. Currently in China with a secure laptop, so I will get to John early next week.   Strike Force coming to an end so I be able give this more attention.   Regards,   Martin From: csric5-wg10@googlegroups.com [csric5-wg10@googlegroups.com] on behalf of John Marinho [JMarinho@ctia.org] Sent: Wednesday, October 19, 2016 1:07 PM To: McPherson, Danny; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: Thursday, October 20 WG Call AGENDA & LOGISTICS Hi Danny and John K.,   FYI - Attached please find a summary update of needed input for the draft document, version 1.3.3.   You’ll see that there are four (4) Sections that are missing text, and the last section that needs some work to convert bullets to text.   The Section that may require the most effort (IMHO) is Section 7, “Attack Surface and Scope”.   The balance of the document may be readily straightforward to complete.   Thanks, John   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Wednesday, October 19, 2016 12:06 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 20 WG Call AGENDA & LOGISTICS     Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 -   As for the agenda, only two items:   1. 2. First, an update on the current Risk assessment from John Marinho Second, we’re going to discuss the SME briefings to date and the dialog we’ve been having on the mailing list since the last call, with an objective of determining which/IF any of those items should/need to be added OR better reflected in the Risk Assessment.    Many thanks to those of you that have contributed to the conversation on the mailing list thus far -- most of you have not!  If you have comments you’d like to share you can certainly do it on the call tomorrow, or on the mailing list at any time – ideally before the call.  In respect of everyone’s time please review the mailing list discussions to date, as well as the latest Risk Assessment document – John Marinho just shared v1.3.3 this morning.   Next week’s call we’ll have Travis Russell brief on the Positive Technologies research in the attached slides.  If you have recommendations for other SME briefings, or agenda topics please let me know.   Thanks in advance,   -danny & John K      -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/87529485-F7DE4E9A-92ED-6CB268E557CE%40verisign.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/45e6f26f0bbd48d39861a9343a4f40f7%40EXCH2013.ctia.org. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/E42CCDDA6722744CB241677169E836564AA8CA06%40MISOUT7MSGUSRDB.ITServices.sbc.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Kimmins John F. Steven McKinnon; csric5-wg10@googlegroups.com Morin Drew [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS Thursday, October 27, 2016 1:08:33 PM image001.png HACKER PT VOICE CALL INTERCEPT.pptx All   I have attached the Positive Technologies slide deck.   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com       From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Steven McKinnon Sent: Thursday, October 27, 2016 12:46 PM To: Kimmins, John F. ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS   Can someone share the Positive Technologies research slide deck that Travis will be sharing?  Or at least give me a date of when it was shared with the group?  I’m not finding it in my emails.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, October 26, 2016 3:19 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 27 WG Call AGENDA & LOGISTICS   Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 -(b) (4) Agenda:   1. Travis Russell brief on the Positive Technologies research ( slide deck previously shared) 2. Update on the current Risk assessment report from John Marinho 3. Update on Robocalling Strikeforce by Martin Dolly 4. Upcoming SME briefing – Brian Collins Adaptive Mobile 5. AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26331A3C3F196D819CEFB189CFAB0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB043796D4FE34B213832179CAF0AA0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26337219C3364AEB29BBD335CFAA0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Kimmins John F. Steven McKinnon; csric5-wg10@googlegroups.com Morin Drew [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS Thursday, October 27, 2016 1:08:33 PM image001.png HACKER PT VOICE CALL INTERCEPT.pptx All   I have attached the Positive Technologies slide deck.   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com       From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Steven McKinnon Sent: Thursday, October 27, 2016 12:46 PM To: Kimmins, John F. ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS   Can someone share the Positive Technologies research slide deck that Travis will be sharing?  Or at least give me a date of when it was shared with the group?  I’m not finding it in my emails.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, October 26, 2016 3:19 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 27 WG Call AGENDA & LOGISTICS   Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 - (b) (4) Agenda:   1. Travis Russell brief on the Positive Technologies research ( slide deck previously shared) 2. Update on the current Risk assessment report from John Marinho 3. Update on Robocalling Strikeforce by Martin Dolly 4. Upcoming SME briefing – Brian Collins Adaptive Mobile 5. AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26331A3C3F196D819CEFB189CFAB0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB043796D4FE34B213832179CAF0AA0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26337219C3364AEB29BBD335CFAA0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups.com on behalf of Steven McKinnon Kimmins John F.; csric5-wg10@googlegroups.com Morin, Drew [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS Thursday, October 27, 2016 12:46:58 PM Can someone share the Positive Technologies research slide deck that Travis will be sharing?  Or at least give me a date of when it was shared with the group?  I’m not finding it in my emails.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, October 26, 2016 3:19 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 27 WG Call AGENDA & LOGISTICS   Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 -(b) (4) Agenda:   1. Travis Russell brief on the Positive Technologies research ( slide deck previously shared) 2. Update on the current Risk assessment report from John Marinho 3. Update on Robocalling Strikeforce by Martin Dolly 4. Upcoming SME briefing – Brian Collins Adaptive Mobile 5. AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26331A3C3F196D819CEFB189CFAB0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB043796D4FE34B213832179CAF0AA0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Khaled Mohammad (Nokia - US/Irving) Kimmins John F.; Steven McKinnon; csric5-wg10@googlegroups.com Morin Drew [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS Thursday, October 27, 2016 3:23:31 PM image002.png FYI , the larger slides set.   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Thursday, October 27, 2016 12:07 PM To: Steven McKinnon ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS   All   I have attached the Positive Technologies slide deck.   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com       From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Steven McKinnon Sent: Thursday, October 27, 2016 12:46 PM To: Kimmins, John F. ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS   Can someone share the Positive Technologies research slide deck that Travis will be sharing?  Or at least give me a date of when it was shared with the group?  I’m not finding it in my emails.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, October 26, 2016 3:19 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 27 WG Call AGENDA & LOGISTICS   Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 - (b) (4) Agenda:   1. Travis Russell brief on the Positive Technologies research ( slide deck previously shared) 2. Update on the current Risk assessment report from John Marinho 3. 4. 5. Update on Robocalling Strikeforce by Martin Dolly Upcoming SME briefing – Brian Collins Adaptive Mobile AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26331A3C3F196D819CEFB189CFAB0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB043796D4FE34B213832179CAF0AA0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26337219C3364AEB29BBD335CFAA0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/AM4PR0701MB219534E7814BC1A54EBD4896F8AA0%40AM4PR0701MB2195.eurprd07.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Steven McKinnon John Marinho; Kimmins John F.; csric5-wg10@googlegroups com; McPherson Danny; Morin Drew; kathy.whitbeck@nsight.com [csric5-wg10] RE: Updated draft version 1.2.4 Thursday, September 15, 2016 10:17:53 AM image001.png John M. – please make sure edits from DHS are added into this document.   I didn’t see them in version 1.2.4.   Thanks, Steven   From: John Marinho [mailto:JMarinho@ctia.org] Sent: Wednesday, September 14, 2016 5:14 PM To: Kimmins, John F. ; csric5-wg10@googlegroups.com; McPherson, Danny ; Morin, Drew ; kathy.whitbeck@nsight.com Cc: Steven McKinnon Subject: Updated draft version 1.2.4   All,   Attached please find version 1.2.4 (redline) based on discussion and inputs from the last meeting.   Please advise if I missed anything.   Thanks, John       John A. Marinho Technology & Cybersecurity CTIA 1400 16th Street NW, Suite 600 Washington DC, 20036 Mobile: 202-440-0844 Office: 202-736-3680 Email: jmarinho@ctia.org   -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB04371E51CFFF8C78057AD383F0F00%40BY1PR09MB0437 namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Steven McKinnon John Marinho; Kimmins John F.; csric5-wg10@googlegroups com; McPherson Danny; Morin Drew; kathy.whitbeck@nsight.com [csric5-wg10] RE: Updated draft version 1.2.4 Thursday, September 15, 2016 10:25:01 AM image001.png Thanks John M.   I certainly don’t want to upset the process.  I’ll keep that in mind when looking at new inputs come in versus the version being prepared for our weekly conference calls.   From: John Marinho [mailto:JMarinho@ctia.org] Sent: Thursday, September 15, 2016 10:22 AM To: Steven McKinnon ; Kimmins, John F. ; csric5wg10@googlegroups.com; McPherson, Danny ; Morin, Drew ; kathy.whitbeck@nsight.com Subject: RE: Updated draft version 1.2.4   The process that I have been following is to incorporate changes once discussion has taken place on the contribution. So 1.2.4 reflects input from the last meeting.   Also, in general - new contributions of material aren’t coming in until late the day before the meeting, thereby not permitting sufficient time to incorporate changes.   So my plan was to incorporate the DHS input and other input that may come in – once the discussion takes place later today, and I have a week’s time to work on it in advance of the next meeting.   From: Steven McKinnon [mailto:Steven.McKinnon@fcc.gov] Sent: Thursday, September 15, 2016 10:17 AM To: John Marinho ; Kimmins, John F. ; csric5wg10@googlegroups.com; McPherson, Danny ; Morin, Drew ; kathy.whitbeck@nsight.com Subject: RE: Updated draft version 1.2.4   John M. – please make sure edits from DHS are added into this document.   I didn’t see them in version 1.2.4.   Thanks, Steven   From: John Marinho [mailto:JMarinho@ctia.org] Sent: Wednesday, September 14, 2016 5:14 PM To: Kimmins, John F. ; csric5-wg10@googlegroups.com; McPherson, Danny ; Morin, Drew ; kathy.whitbeck@nsight.com Cc: Steven McKinnon Subject: Updated draft version 1.2.4   All,   Attached please find version 1.2.4 (redline) based on discussion and inputs from the last meeting.   Please advise if I missed anything.   Thanks, John       John A. Marinho Technology & Cybersecurity CTIA 1400 16th Street NW, Suite 600 Washington DC, 20036 Mobile: 202-440-0844 Office: 202-736-3680 Email: jmarinho@ctia.org   -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB04378ADF830D99A0888C4C16F0F00%40BY1PR09MB0437 namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups.com on behalf of Kimmins John F. csric5-wg10@googlegroups.com Morin, Drew [csric5-wg10] Revised Nokia Presentation Thursday, August 18, 2016 7:43:02 AM All,   I have attached a revised Nokia presentation for today’s conference call.   John K Co-Chair WG 10   From: Kimmins, John F. Sent: Wednesday, August 17, 2016 11:21 AM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: RE: Updated Outline   All,   On tomorrow’s call, Silke Holtmanns of Nokia-Bell Labs will be providing a SME presentation on risks, mitigation approaches and activities in industry/standards forums. I have attached her slide deck.   John K Co-Chair WG 10   -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633F8D9BFF63E94CFA6D57ACF150%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups.com on behalf of Kimmins John F. csric5-wg10@googlegroups.com Morin Drew; McPherson Danny; kathy.whitbeck@nsight.com [csric5-wg10] September 8 Teleconference Agenda -- CSRIV V WG 10 Wednesday, September 7, 2016 8:45:23 PM WG Members, Here’s the read ahead for tomorrow, see you at 1500 ET.   *Premiere Intl. Bridge 11 -(b) (4) AGENDA 1. Welcome new WG member Kathy Whitbeck, Nsight 2. Review slides from John Marinho on interim report to CSRIC Council @September 14th Meeting – John Marinho / Chairs 3. Recap Admiral Simpson checkpoint call on September 1 – Steven McKinnon, Chairs 4. Review current risk assessment content/current assignments/gaps/schedule  – John Marinho / Chairs 5. SME Talks a. Karsten Nohl confirmed for October 13th b. James Moran, GSMA - October 6. Potential to have other briefings a. Carriers b. Vendors 7. AOB     John Kimmins & Danny McPherson -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633CBF695D2F1B053BC12ABCFFB0%40DM5PR06MB2633.namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: csric5-wg10@googlegroups.com on behalf of Kimmins John F. John Marinho; csric5-wg10@googlegroups.com; McPherson Danny; Morin Drew; kathy.whitbeck@nsight.com; Steven McKinnon [csric5-wg10] September 15 WG10 Call Agenda Wednesday, September 14, 2016 9:39:44 PM WG Members, Here’s the agenda for tomorrow, see you at 1500 ET.   *Premiere Intl. Bridge 11 - (b) (4) AGENDA 1. Interim report to CSRIC Council @September 14th Meeting – John Kimmins/Steven McKinnon 2. Review current risk assessment content/current assignments/gaps/schedule  – John Marinho / Chairs 3. SME Talks a. James Moran, GSMA - October 4. Vendor Market Analysis 5. AOB     John Kimmins & Danny McPherson     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26333EB17A8E6753978762F2CFF00%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups.com on behalf of Kimmins John F. csric5-wg10@googlegroups.com Morin Drew; Gallagher John B [CTO] [csric5-wg10] Thursday, December 8 WG Call AGENDA & LOGISTICS Wednesday, December 7, 2016 4:26:38 PM Team, Here’s the dial-in information for the call tomorrow @1500 ET:   (b) (4)     Agenda:   1. Review current Risk Assessment draft report – John Marinho/John Kimmins 2. Update on GSMA NDA Agreement – John Kimmins 3. AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633580F03B00FFF793C7E77CF850%40DM5PR06MB2633.namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups com on behalf of Kimmins John F. csric5-wg10@googlegroups com Morin Drew [csric5-wg10] Thursday, November 10 WG Call AGENDA & LOGISTICS Wednesday, November 9, 2016 7:55:33 AM Team, Here’s the dial-in information for the call tomorrow @1500 ET:   (b) (4)     Agenda:   1. AT&T Risk Briefing – Mark Easley 2. Update on the current Risk assessment report - John Marinho 3. Formal Survey Process Update 4. AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633EA8AEA3E87E8D41B207ACFB90%40DM5PR06MB2633.namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. To: Subject: Date: Suzon Cameron; Jeffery Goldthorp (Jeffery.Goldthorp@fcc.gov) CSRIC WG10 Paragraph Tuesday, June 21, 2016 9:24:58 AM Suzon / Jeff –   I have provided the paragraph you requested from me yesterday for Admiral Simpson’s opening remarks tomorrow.   This is related to WG10 Legacy Systems and Services Risk focusing on SS7 security flaws.   Today, the Commission has set out to create CSRIC Working Group 10 Legacy Systems and Services Risk, one of what we expect will be a series of requests to CSRIC to look at the intermingling of legacy communications technologies with advanced communications technologies using IP-based protocols and networks.  This working group will focus on the recent concerns raised from security vulnerabilities in the Signaling System 7 (SS7) protocol, which have been shown to result in the loss of confidential data and disruption of communications services.   Steven McKinnon Cybersecurity Engineer PSHSB, Cybersecurity & Communications Reliability Division steven.mckinnon@fcc.gov (202) 418-0390 (office) (202) 379-6861 (mobile)   *** Non-Public: For Internal Use Only ***   From: To: Cc: Subject: Date: Attachments: Importance: Briggs, Kevin Steven McKinnon O"Connor, John; Blasco, Kathleen ESD report to DHS on SS7 National Security Implications and Sector Impacts - 21 July 16.pdf Friday, October 7, 2016 3:06:16 PM ESD report to DHS on SS7 National Security Implications and Sector Impacts - 21 July 16.pdf High Steven, You may share the attached report with the CSRIC WG10 members, as long as they understand that this report was prepared for DHS by a vendor, and doesn’t represent a coordinated DHS position.  Let me know if you have any questions. Regards, Kevin Kevin G. Briggs Continuity Assessment & Resilience (CAR) Section Chief National Cybersecurity & Communications Integration Center (NCCIC) Kevin.Briggs@hq.dhs.gov 703-235-5265 (Office) 202-281-6100 (BB)         From: To: Cc: Subject: Date: Attachments: Kimmins, John F. McPherson, Danny Steven McKinnon FW: CSRIC V Committee Meeting Monday, August 15, 2016 10:28:17 AM image001.png Danny,   Can you make this call? I currently have a conflict.   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com       From: Hennesy, Theresa [mailto:Theresa_Hennesy@comcast.com] Sent: Monday, August 15, 2016 9:20 AM To: Kimmins, John F. Subject: FW: CSRIC V Committee Meeting   Good Morning CRSIC V Working Group Chairs,   We are one week away from our next CSRIC V Committee meeting.  I thought I would get a jump start on the agenda.    Below you will find the agenda and notes for this week’s upcoming committee meeting. The highlighted Working Groups are those which will be closed out following the approval of their September 2016 deliverables.   The next CSRIC V Committee meeting will be held on Wednesday, August 17, 2016 from 2-3 pm ET.  Below is the bridge information:   (b) (4)   The next CSRIC V Council  meeting will be held on Wednesday, September 14, from 1-5 pm ET at the FCC location at 445 12th Street SW, Washington, DC.   Please let us know if you will not be able to attend, or will be attending via remote conference bridge.   Let me know if you have questions or additions.    Theresa     WG1:  Evolving 911 · Next deliverable: September 2016 · Report with Guidelines and Recommendations   WG2: Emergency Alert Platforms · Next deliverable: September 2016 · Wireless Emergency Alerts: Recommendations to Improve Geo-Targeting and Offer Many-toOne Capabilities & Social Media & Complementary Alerting Methods: Recommended Strategies & Best Practices   WG3: Emergency Alert System · Next deliverable: September 2016 · Recommendation to the Commission on Multilingual EAS   WG4A: Submarine Cable Resiliency · Next deliverable: September 2016 · Geographic Diversity Report   WG4B: Network Timing Single Source · Next deliverable:  December 2016. · Report on recommendations on acquiring and implementing backup precision timing solutions that are independent of GPS   WG5: Cyber Security Information Sharing · Next deliverable:  September 2016 · Cybersecurity Information Sharing “Trust Pools” - September 2016. · Cybersecurity Information Sharing Platforms - December 2016. · Recommendations for Cybersecurity Information Sharing - March 2017.   WG6: Secure Hardware and Software · Next Deliverable: September 2016 · Recommend voluntary mechanisms that provide assurances to the FCC and the public that the recommended security best practices are being applied Follow up on the July 19th Supply Chain Meeting   WG7: Cybersecurity Workforce · Next Deliverable: March 2017 · Identify, develop and recommend best practices and implementation thereof to mitigate insider threats within the communications sector including through scalable means to enhance transparency, accountability and validation of skills, knowledge and abilities, · particularly with respect to personnel having access to the most critical elements of the nation’s communications network assets.   WG8: Priority Services · Next Deliverable: September, (working on paper). Draft WG8 Report 2 Final WG8 1 Report - December 2016. Final WG8 Report 2 - March 2017.   WG9: Wifi Security · Next Deliverable: March 2017 · Present recommended security best practices for Wi-Fi operators, users, and consumers   WG10: Legacy Systems and Securities Risk Reduction · Next Deliverable:  September 2016. · Risk Assessment and Summary Report · Final Report with Risk Mitigation Recommendations – March 2017.     From: To: Subject: Date: Attachments: Jeffery Goldthorp Steven McKinnon FW: ESD Report to DHS on SS7 National Security Implications and Sector Impacts Monday, October 17, 2016 9:02:45 AM ESD report to DHS on SS7 National Security Implications and Sector Impacts - 21 July 16.pdf Steven – when will you have a sense of how WG 10 is making use of this report?  When is their next meeting?     Jeffery M. Goldthorp Associate Bureau Chief for Resiliency and Cybersecurity Risk Reduction Public Safety and Homeland Security Bureau Federal Communications Commission   202-418-1096 202-253-1595 (cell)   From: Steven McKinnon Sent: Wednesday, October 12, 2016 8:01 AM To: csric5-wg10@googlegroups.com Cc: Jeffery Goldthorp Subject: ESD Report to DHS on SS7 National Security Implications and Sector Impacts   Find out from Steven how this report is being used by the WG   All   Please see the attached report as a source providing inputs into the initial risk assessment. The report summarizes findings based on network analyses conducted by a vendor for DHS. This report does not represent an official position by DHS and should be treated as such‎. Any questions regarding the report should be discussed with Kevin Briggs and his team.   Thanks, Steven McKinnon Cybersecurity Engineer PSHSB, Cybersecurity & Communications Reliability Division steven.mckinnon@fcc.gov (202) 418-0390 (office) (202) 379-6861 (mobile)   *** Non-Public: For Internal Use Only ***   To: Subject: Date: Attachments: Importance: csric5-wg10@googlegroups.com FW: Friday"s call Friday, August 5, 2016 9:44:32 AM FCC CSRIC V Working Group 10 RiskAssessmentSummary - Outline draft SMMcomments.docx image001.png image002.png High Martin / Mark / John – can my comments be reviewed in the next set of revisions?   Thanks, Steven   From: Steven McKinnon Sent: Thursday, August 04, 2016 3:29 PM To: Kimmins, John F. ; McPherson, Danny Subject: RE: Friday's call Importance: High   John –   I also had some comments.  See attached.   Thanks, Steven   From: Kimmins, John F. [mailto:jkimmins@iconectiv.com] Sent: Thursday, August 04, 2016 12:57 PM To: McPherson, Danny Cc: Steven McKinnon ; Suzon Cameron Subject: RE: Friday's call   Danny,   Sorry for the delay. The read ahead looks fine.   Do we need to also send out the risk assessment draft outline document with this? I attached my edits on the draft outline document.   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com       From: McPherson, Danny [mailto:dmcpherson@verisign.com] Sent: Wednesday, August 03, 2016 4:56 PM To: Steven McKinnon ; Kimmins, John F. ; Suzon Cameron Subject: Re: Friday's call   * PGP - S/MIME Signed by an unverified key: 8/3/2016 at 4:55:56 PM   Update attached..       From: Steven McKinnon Date: Wednesday, August 3, 2016 at 1:47 PM To: "McPherson, Danny" , "Kimmins, John F." , Suzon Cameron Subject: Re: Friday's call Welcome back John.    Danny - please add a note about robocalling being included in the initial risk assessment and seeing about the relationship robocalls may have with SS7 vulnerabilities. Also, we have two additional nominees being vetted for participating in the WG.    Thanks, Steven   Sent from my Blackberry From: McPherson, Danny Sent: Wednesday, August 3, 2016 4:44 PM To: Kimmins, John F.; Steven McKinnon; Suzon Cameron Subject: Re: Friday's call   John/Steven, Anything to add to this?   I’ll distribute the updated risk assessment to the team once I get your feedback John.   -danny       From: "Kimmins, John F." Date: Wednesday, August 3, 2016 at 6:44 AM To: "McPherson, Danny" Subject: Friday's call Danny,   Have you created an agenda for the call yet? Do you know if John Marinho shared the security risk assessment outline with the WG members?   FYI – I returned from India this morning. I am starting to crash.   John   John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com   * McPherson, Danny * Issuer: Symantec Corporation - Unverified From: To: Cc: Subject: Date: Attachments: Kimmins, John F. Donald.morris-jones@associates.hq.dhs.gov Steven McKinnon; McPherson, Danny FW: September 29 WG10 Call Agenda & Call for Contributions Thursday, September 29, 2016 12:49:26 PM image001.png Dr. Morris-Jones,   FYI – Welcome to the WG   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com       From: Kimmins, John F. Sent: Wednesday, September 28, 2016 3:18 PM To: 'csric5-wg10@googlegroups.com' Cc: 'McPherson, Danny' ; 'Morin, Drew' ; 'Steven McKinnon' Subject: September 29 WG10 Call Agenda & Call for Contributions   WG Members, Here’s the agenda for tomorrow, see you at 1500 ET.   *Premiere Intl. Bridge 11 - (b) (4) AGENDA 1. Review current risk assessment report  – John Marinho / Chairs a. Vendor Claims – how do we handle them in report? b. Interconnect Attack Vectors Discussion i. Messages only valid within network ii. Unauthorized messages from other networks iii. Suspicious location packets c. Writing Assignments 2. Robocalling Strikeforce update – M. Dolly 3. Vendor Market Analysis - All 4. AOB   We still need more contributions across all sections of the Risk Assessment report.   John Kimmins & Danny McPherson     From: To: Subject: Date: DOLLY, MARTIN C Steven McKinnon Re: [csric5-wg10] August 5, 2016 Meeting Notes Friday, August 5, 2016 2:11:42 PM Not TAC, DISA DoD/NSA  TAC on call John  Martin C Dolly Lead Member of Technical Staff Core & Government/Regulatory Standards  AT&T Cell: 609-903-3360 Email: md3135@att.com On Aug 5, 2016, at 2:05 PM, Steven McKinnon wrote: Thanks Martin.   Can you tell me what TAC working group you participated on that had to deal with sensitive information?    Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of DOLLY, MARTIN C Sent: Friday, August 05, 2016 11:56 AM To: Travis Russell Cc: McPherson, Danny ; csric5-wg10@googlegroups.com Subject: Re: [csric5-wg10] August 5, 2016 Meeting Notes   My read ahead is on robo-calling And I will provide contacts for the DISA work Martin C Dolly Lead Member of Technical Staff Core & Government/Regulatory Standards  AT&T Cell: 609-903-3360 Email: md3135@att.com On Aug 5, 2016, at 11:22 AM, Travis Russell wrote: Thanks Danny, and yes that was me who will provide the contact information for Karsten.    Travis Russell Director, Cyber Security, Service Provider Networks    +1919.205.6857 (o)  +1919.412.1167 (c) https://www.linkedin.com/in/travisrussell1 5200 Paramount Pkwy Morrisville, NC 27560 USA Oracle is committed to developing practices and products that help protect the environment   On Aug 5, 2016, at 10:50 AM, McPherson, Danny wrote:     Team, Here’s a quick summary of the action items I collected from the call today.  If I missed anything please let John and I know.  Thanks for your participation!   ACTION ITEMS:   1.       John Kimmins and Danny McPherson to connect on current WG tasking and conciseness of charter with proposal back to work group on th emailing list before the next teleconference for any modifications as necessary (e.g., scoping the work appropriately).   Furthermore, we will give consideration to use of “Legacy” in WG name as some WG members believe it conveys a message that these protocols and associated threats are going away soon and that’s not necessarily the case.  We need to frame this appropriately and find the right balance, and will connect with Steven and FCC on this matter and explore whether tweaking the name makes sense and is appropriate. 2.       Martin Dolly will provide a read ahead and 10-15 minute briefing on the next call about IMSI catchers. 3.       John Marinho on the Risk Assessment document.  We will continue to use this document as the initial WG product.  We will make recommendations on division of work for intermediate read out to CSRIC at the end of Q3, and the final work product in March.  Beyond the current contents of the draft framework provided, the document will provide a catalog and gap analysis of current work items and venues as they relate to topics here, to include IMSI catchers and robo calling, and will lend some text to these topics, associated primitives, and some use cases or scenarios, as well as potential recommendations for further work on these topics within CSRIC, the broader FCC, or elsewhere.  Comments from the call today, as well as written comments from Steven McKinnon and others will be considered as the next revision is developed.  John and team will continue to iterate on this document and provide update before next call – other WG members that wish to provide text should ping John ASAP. 4.       WG Chairs will connect with FCC to obtain procedural / legal advice for handling sensitive information.  Work done elsewhere enabled by Walter Johnson may provide a framework for accommodating any sensitive information handling.  Chairs will provide WG with “ground rules” ASAP. 5.       WG Chairs will schedule SME briefings from Silke Holtmanns (Nokia), with written briefing first.  6.       Travis Russell[?]: WG agreement SME briefing should be requested from Karsten Nohl to WG.  Travis[??] will provide chairs with contact information and initial introductory message text. 7.       WG Chairs will setup doodle poll for new weekly call timing that best accommodates largest set of members.   Roll Call (I believe I got these correct, if anyone sees errors place let me know):   PRESENT:   Kathleen Blasco          DHS NCCIC Kevin Briggs                DHS NCCIC Martin Dolly                ATIS Mark Easley                AT&T John Kimmins              iConectiv Philip Linse                  CenturyLink  Tim Lorello                  SecuLore Solutions John Marinho              CTIA Steven McKinnon        FCC Danny McPherson       Verisign Drew Morin                T-Mobile Travis Russell              Oracle   NOT PRESENT:    Nilesh Ranjan              T-Mobile Xiaomei Wang            Verizon Wireless       --  You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/CFBE59905AF2-49E7-BDFE-7C8269D2E848%40verisign.com. For more options, visit https://groups.google.com/d/optout.   -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/B2133C61-65AC4179-9EB6-1CDD2B66A79A%40oracle.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/A4C9A8A9-FF05-4D7A-9D00E16791EE6E2D%40att.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: DOLLY, MARTIN C Steven McKinnon Re: [csric5-wg10] August 5, 2016 Meeting Notes Friday, August 5, 2016 2:10:49 PM Meeting moved 2 weeks Martin C Dolly Lead Member of Technical Staff Core & Government/Regulatory Standards  AT&T Cell: 609-903-3360 Email: md3135@att.com On Aug 5, 2016, at 2:05 PM, Steven McKinnon wrote: Thanks Martin.   Can you tell me what TAC working group you participated on that had to deal with sensitive information?    Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of DOLLY, MARTIN C Sent: Friday, August 05, 2016 11:56 AM To: Travis Russell Cc: McPherson, Danny ; csric5-wg10@googlegroups.com Subject: Re: [csric5-wg10] August 5, 2016 Meeting Notes   My read ahead is on robo-calling And I will provide contacts for the DISA work Martin C Dolly Lead Member of Technical Staff Core & Government/Regulatory Standards  AT&T Cell: 609-903-3360 Email: md3135@att.com On Aug 5, 2016, at 11:22 AM, Travis Russell wrote: Thanks Danny, and yes that was me who will provide the contact information for Karsten.    Travis Russell Director, Cyber Security, Service Provider Networks    +1919.205.6857 (o)  +1919.412.1167 (c) https://www.linkedin.com/in/travisrussell1 5200 Paramount Pkwy Morrisville, NC 27560 USA Oracle is committed to developing practices and products that help protect the environment   On Aug 5, 2016, at 10:50 AM, McPherson, Danny wrote:     Team, Here’s a quick summary of the action items I collected from the call today.  If I missed anything please let John and I know.  Thanks for your participation!   ACTION ITEMS:   1.       John Kimmins and Danny McPherson to connect on current WG tasking and conciseness of charter with proposal back to work group on th emailing list before the next teleconference for any modifications as necessary (e.g., scoping the work appropriately).   Furthermore, we will give consideration to use of “Legacy” in WG name as some WG members believe it conveys a message that these protocols and associated threats are going away soon and that’s not necessarily the case.  We need to frame this appropriately and find the right balance, and will connect with Steven and FCC on this matter and explore whether tweaking the name makes sense and is appropriate. 2.       Martin Dolly will provide a read ahead and 10-15 minute briefing on the next call about IMSI catchers. 3.       John Marinho on the Risk Assessment document.  We will continue to use this document as the initial WG product.  We will make recommendations on division of work for intermediate read out to CSRIC at the end of Q3, and the final work product in March.  Beyond the current contents of the draft framework provided, the document will provide a catalog and gap analysis of current work items and venues as they relate to topics here, to include IMSI catchers and robo calling, and will lend some text to these topics, associated primitives, and some use cases or scenarios, as well as potential recommendations for further work on these topics within CSRIC, the broader FCC, or elsewhere.  Comments from the call today, as well as written comments from Steven McKinnon and others will be considered as the next revision is developed.  John and team will continue to iterate on this document and provide update before next call – other WG members that wish to provide text should ping John ASAP. 4.       WG Chairs will connect with FCC to obtain procedural / legal advice for handling sensitive information.  Work done elsewhere enabled by Walter Johnson may provide a framework for accommodating any sensitive information handling.  Chairs will provide WG with “ground rules” ASAP. 5.       WG Chairs will schedule SME briefings from Silke Holtmanns (Nokia), with written briefing first.  6.       Travis Russell[?]: WG agreement SME briefing should be requested from Karsten Nohl to WG.  Travis[??] will provide chairs with contact information and initial introductory message text. 7.       WG Chairs will setup doodle poll for new weekly call timing that best accommodates largest set of members.   Roll Call (I believe I got these correct, if anyone sees errors place let me know):   PRESENT:   Kathleen Blasco          DHS NCCIC Kevin Briggs                DHS NCCIC Martin Dolly                ATIS Mark Easley                AT&T John Kimmins              iConectiv Philip Linse                  CenturyLink  Tim Lorello                  SecuLore Solutions John Marinho              CTIA Steven McKinnon        FCC Danny McPherson       Verisign Drew Morin                T-Mobile Travis Russell              Oracle   NOT PRESENT:    Nilesh Ranjan              T-Mobile Xiaomei Wang            Verizon Wireless       --  You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/CFBE59905AF2-49E7-BDFE-7C8269D2E848%40verisign.com. For more options, visit https://groups.google.com/d/optout.   -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/B2133C61-65AC4179-9EB6-1CDD2B66A79A%40oracle.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/A4C9A8A9-FF05-4D7A-9D00E16791EE6E2D%40att.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Attachments: Kimmins, John F. McPherson, Danny; Steven McKinnon RE: [csric5-wg10] August 5, 2016 Meeting Notes Friday, August 5, 2016 11:28:14 AM image001.png Steven and Danny,   This captures the two action items.   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com       From: McPherson, Danny [mailto:dmcpherson@verisign.com] Sent: Friday, August 05, 2016 10:56 AM To: Steven McKinnon Cc: Kimmins, John F. Subject: FW: [csric5-wg10] August 5, 2016 Meeting Notes   * PGP - S/MIME Signed by an unverified key: 8/5/2016 at 10:56:00 AM                 Steven, Two FCC actions here:   1. There was some concern expressed (albeit only from DHS, I believe) with regard to the use of the term “Legacy” in the WG description.  What opportunity exists to consider “tweaking” this, or providing additional color to address concerns that these issues aren’t going away in the near term and the use of “legacy” downplays the long-term risks. 2. Please provide us guidance and “ground rules” on handling of sensitive information, as was discussed on the WG call today.  Walter Johnson (sp?) was the name that came up under a separate group with such constraints, and some clear guidance from the FCC here is necessary.   John – anything to add here?   -danny     From: on behalf of "McPherson, Danny" Date: Friday, August 5, 2016 at 7:50 AM To: "csric5-wg10@googlegroups.com" Subject: [csric5-wg10] August 5, 2016 Meeting Notes   Team, Here’s a quick summary of the action items I collected from the call today.  If I missed anything please let John and I know.  Thanks for your participation!   ACTION ITEMS:   1. John Kimmins and Danny McPherson to connect on current WG tasking and conciseness of charter with proposal back to work group on th emailing list before the next teleconference for any modifications as necessary (e.g., scoping the work appropriately).   Furthermore, we will give consideration to use of “Legacy” in WG name as some WG members believe it conveys a message that these protocols and associated threats are going away soon and that’s not necessarily the case.  We need to frame this appropriately and find the right balance, and will connect with Steven and FCC on this matter and explore whether tweaking the name makes sense and is appropriate. 2. Martin Dolly will provide a read ahead and 10-15 minute briefing on the next call about IMSI catchers. 3. John Marinho on the Risk Assessment document.  We will continue to use this document as the initial WG product.  We will make recommendations on division of work for intermediate read out to CSRIC at the end of Q3, and the final work product in March.  Beyond the current contents of the draft framework provided, the document will provide a catalog and gap analysis of current work items and venues as they relate to topics here, to include IMSI catchers and robo calling, and will lend some text to these topics, associated primitives, and some use cases or scenarios, as well as potential recommendations for further work on these topics within CSRIC, the broader FCC, or elsewhere.  Comments from the call today, as well as written comments from Steven McKinnon and others will be considered as the next revision is developed.  John and team will continue to iterate on this document and provide update before next call – other WG members that wish to provide text should ping John ASAP. 4. WG Chairs will connect with FCC to obtain procedural / legal advice for handling sensitive information.  Work done elsewhere enabled by Walter Johnson may provide a framework for accommodating any sensitive information handling.  Chairs will provide WG with “ground rules” ASAP. 5. WG Chairs will schedule SME briefings from Silke Holtmanns (Nokia), with written briefing first. 6. Travis Russell[?]: WG agreement SME briefing should be requested from Karsten Nohl to WG.  Travis[??] will provide chairs with contact information and initial introductory message text. 7. WG Chairs will setup doodle poll for new weekly call timing that best accommodates largest set of members.   Roll Call (I believe I got these correct, if anyone sees errors place let me know):   PRESENT:   Kathleen Blasco          DHS NCCIC Kevin Briggs                DHS NCCIC Martin Dolly                ATIS Mark Easley                AT&T John Kimmins              iConectiv Philip Linse                  CenturyLink Tim Lorello                  SecuLore Solutions John Marinho              CTIA Steven McKinnon        FCC Danny McPherson       Verisign Drew Morin                T-Mobile Travis Russell              Oracle   NOT PRESENT:   Nilesh Ranjan              T-Mobile Xiaomei Wang            Verizon Wireless     -You received this message because you are subscribed to the Google Groups "csric5wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/CFBE5990-5AF2-49E7-BDFE-7C8269D2E848%40verisign.com. For more options, visit https://groups.google.com/d/optout. * McPherson, Danny * Issuer: Symantec Corporation - Unverified From: To: Cc: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Linse, Philip "Travis Russell"; McPherson, Danny csric5-wg10@googlegroups.com; Morin, Drew RE: [csric5-wg10] August 25 Teleconference Read Ahead -- CSRIV V WG 10 Friday, August 26, 2016 12:48:50 PM image001.png Travis, I’d be happy to help.   Thank you, Philip Linse Public Policy Office: 303-707-3844 Cell: 720-363-3844                                              From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Travis Russell Sent: Thursday, August 25, 2016 2:41 PM To: McPherson, Danny Cc: csric5-wg10@googlegroups.com; Morin, Drew Subject: Re: [csric5-wg10] August 25 Teleconference Read Ahead -- CSRIV V WG 10 Looking at the outline, I’ll be the first (I think) to volunteer to write the SS7 overview section. I think I have enough material (6 editions worth) to draw from to provide something concise and relevant. I’ll also contribute of course to some of the other sections but wanted to get that one off the table (unless someone wants to help of course). Travis Russell Director, Cyber Security, Service Provider Networks    +1919.205.6857 (o)  +1919.412.1167 (c) https://www.linkedin.com/in/travisrussell1 5200 Paramount Pkwy Morrisville, NC 27560 USA Oracle is committed to developing practices and products that help protect the environment On Aug 25, 2016, at 11:14 AM, McPherson, Danny wrote:   WG Members,  Here’s the read ahead for today, see you at 1500 ET.   *Premiere Intl. Bridge 11 - (b) (4) AGENDA 1. 2. 3. 4. 5. 6. Review slides from John Marinho on interim report to CSRIC Council @September 14th Meeting, slides due by September 6th. – John Marinho / Chairs Review current risk assessment content and actions forward (to include new text on threats, etc..).  – John Marinho / Chairs Collect volunteers / assign contributors for each section of risk assessment document – John Marinho / Chairs FCC Strike Force Update on Robocalling and discuss WG plan for alignment – Martin Dolly/AT&T Of Note: Currently confirming Karsten for October 13 SME briefing, need questions in advance – Chairs Of Note: Admiral Simpson checkpoint brief on September 1 after teleconference – Chairs  AOB 7.     -danny (&John)   --  You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/5E5425DFAC47-492D-8B48-7D1501780EC5%40verisign.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/D629D5AE-D8A3-4660-A3B3-BF5A5801F47A%40oracle.com. For more options, visit https://groups.google.com/d/optout. This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments. -- You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/2A063A112B419044A5D9762EC77569036124C055%40PDDCWMBXEX504.ctl.intranet. For more options, visit https://groups.google.com/d/optout. To: Cc: Subject: Date: McPherson, Danny; Blasco, Kathleen; csric5-wg10@googlegroups.com Briggs Kevin RE: [csric5-wg10] FW: SS7 Vulnerabilities Wednesday, August 31, 2016 11:16:22 AM Does anyone have a contact at Syniverse?   From: McPherson, Danny [mailto:dmcpherson@verisign.com] Sent: Wednesday, August 31, 2016 11:15 AM To: Blasco, Kathleen ; Steven McKinnon ; csric5wg10@googlegroups.com Cc: Briggs, Kevin Subject: Re: [csric5-wg10] FW: SS7 Vulnerabilities   Are there other vendor’s product/solutions (even bespoke) folks are aware of that we should consider if we’re going to go down this path?  I think this is a bit of a slippery slope but I also think it is necessary to properly capture the solutions space.   -danny   From: on behalf of "Blasco, Kathleen" Date: Wednesday, August 31, 2016 at 11:03 AM To: Steven McKinnon , "McPherson, Danny" , "csric5wg10@googlegroups.com" Cc: "Briggs, Kevin" Subject: RE: [csric5-wg10] FW: SS7 Vulnerabilities We would also like to propose Adaptive Mobile (https://www.adaptivemobile.com/) present their SS7/Diameter mitigation solutions to the group to understand what has been implemented by some of the carriers in Europe/other countries. See press release below on their  SS7 GSMA “Cat 3” detection capabilities.   https://www.adaptivemobile.com/press-centre/press-releases/adaptivemobiles-signalling-protection-unveils-advancedss7-gsma-category-3   Kathy   Kathleen J. Blasco Communications Assessment Team Lead DHS\NPPD\CS&C\NCCIC\NCC 703-235-5260 (o) 240-423-0618 (c)   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Steven McKinnon Sent: Tuesday, August 30, 2016 9:15 AM To: McPherson, Danny; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: RE: [csric5-wg10] FW: SS7 Vulnerabilities I attended.   I don’t think it was anything new from what has been out there before.   It seemed to angle more towards national security.   That said, I’d like to reach out to the presenter, Les Goldsmith, about speaking to the group.   I have attached his presentation.   Thanks, Steven   From: McPherson, Danny [mailto:dmcpherson@verisign.com] Sent: Tuesday, August 30, 2016 8:55 AM To: Steven McKinnon ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: Re: [csric5-wg10] FW: SS7 Vulnerabilities   Quote a provocative title there - Did anyone here attend this?  Was there anything _new / noteworthy presented or discussed?   -danny   From: on behalf of Steven McKinnon Date: Friday, August 26, 2016 at 3:25 PM To: "csric5-wg10@googlegroups.com" Subject: [csric5-wg10] FW: SS7 Vulnerabilities For those in the group who are close to DC, this event is being held on Monday.   Sorry for sharing last minute but thought it might be interesting for those who are close enough to attend.   From: Les Goldsmith [mailto:les@esdamerica.com] Sent: Thursday, August 25, 2016 6:40 PM To: info@esdamerica.com Subject: SS7 Vulnerabilities Breaking the National Security Backbone, SS7 Vulnerabilities, and Nation State Signals Intelligence. ***REGISTER NOW FOR THIS FREE EVENT:https://www.eventbrite.com/e/national-security-backbone-ss7vulnerabilities-tickets-27096429149 When: August 29, 2016 Time: 10:00am - 12:30pm We will serve coffee and a light snack in the lobby after the event for those who want to network. Room: MPA B-07 805 21st Street NW Washington, DC 20052 George Washington University, Foggy Bottom Campus Thanks, Les Goldsmith Chief Executive Officer Direct: (702) 483 0254 CP500i +807 6654 6120 ESD America Inc Ph. (702) 605 0160 esdamerica.com - esdcryptophone.com - esdoverwatch.com - esdoversight.com This email may contain confidential information and may be intercepted by third parties beyond our control. However if you wish to contact us with 100% security then you need a Cryptophone. Cryptophone's provide end to end encryption with a verifiable source code -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB0437D0E20D520A77AB352BDBF0EC0%40BY1PR09MB0437 namprd09.prod.outlook.com . For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB04377FE6AFC37CBFEC485C00F0E00%40BY1PR09MB0437 namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/F140A0A2602A094EACE4F33D7C511C710141DCAD65%40D2ASEPREA004. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Morin Drew John Marinho; McPherson Danny; Steven McKinnon; csric5-wg10@googlegroups.com RE: [csric5-wg10] FW: SS7 Vulnerabilities Tuesday, August 30, 2016 9:50:45 AM Just to add to the commentary, Les Goldsmith is selling his pen testing capabilities so it would appear to be more of a carefully orchestrated self- promotional event. Then let’s look at the other expert panelists: 2 from the Military Cyber Professionals Association and 2 from the Cyber Security Forum.   Just more hyperbole   From: John Marinho [mailto:JMarinho@ctia.org] Sent: Tuesday, August 30, 2016 9:19 AM To: McPherson, Danny ; Steven McKinnon ; csric5wg10@googlegroups.com Cc: Morin, Drew Subject: RE: [csric5-wg10] FW: SS7 Vulnerabilities Danny, Yes, I attended the SS7 event that took place at George Washington University as outlined below. The event organizer was: GW Cybersecurity Strategy and Information Management Program   Congressman Lieu’s statement was used to kick-off the event regarding the topic of SS7 (see attached). The Congressman advocates that Telcos perform penetration testing and share results with the US Govt.   The event was relatively small with roughly 20 to 25 people in attendance. The Panelists were as follows: Moderator: Admiral (Ret.) Norm Hayes Panelists: Les Goldsmith – CEO ESD America (via Skype) – presentation attached Roger Kuhn Janne Handelsten Joe Billingsley Paul de Souza In general the discussion focused on penetration testing to spur action by Telcos to mitigate SS7 threats. In my personal view, I found the panelists somewhat hyperbolic since, when asked it was acknowledged that there isn’t empirical evidence of the exploits in the US besides the 60 Minutes segment that featured Congressman Lieu. John     From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Tuesday, August 30, 2016 8:55 AM To: Steven McKinnon ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: Re: [csric5-wg10] FW: SS7 Vulnerabilities   Quote a provocative title there - Did anyone here attend this?  Was there anything _new / noteworthy presented or discussed?   -danny   From: on behalf of Steven McKinnon Date: Friday, August 26, 2016 at 3:25 PM To: "csric5-wg10@googlegroups.com" Subject: [csric5-wg10] FW: SS7 Vulnerabilities For those in the group who are close to DC, this event is being held on Monday.   Sorry for sharing last minute but thought it might be interesting for those who are close enough to attend.   From: Les Goldsmith [mailto:les@esdamerica.com] Sent: Thursday, August 25, 2016 6:40 PM To: info@esdamerica.com Subject: SS7 Vulnerabilities Breaking the National Security Backbone, SS7 Vulnerabilities, and Nation State Signals Intelligence. ***REGISTER NOW FOR THIS FREE EVENT:https://www.eventbrite.com/e/national-security-backbone-ss7vulnerabilities-tickets-27096429149 When: August 29, 2016 Time: 10:00am - 12:30pm We will serve coffee and a light snack in the lobby after the event for those who want to network. Room: MPA B-07 805 21st Street NW Washington, DC 20052 George Washington University, Foggy Bottom Campus Thanks, Les Goldsmith Chief Executive Officer Direct: (702) 483 0254 CP500i +807 6654 6120 ESD America Inc Ph. (702) 605 0160 esdamerica.com - esdcryptophone.com - esdoverwatch.com - esdoversight.com This email may contain confidential information and may be intercepted by third parties beyond our control. However if you wish to contact us with 100% security then you need a Cryptophone. Cryptophone's provide end to end encryption with a verifiable source code -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB0437D0E20D520A77AB352BDBF0EC0%40BY1PR09MB0437 namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/2B49A0D3-1F7E-48B68525-9A2DA29DE80D%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Steven McKinnon McPherson Danny; csric5-wg10@googlegroups.com Morin Drew RE: [csric5-wg10] FW: SS7 Vulnerabilities Tuesday, August 30, 2016 9:15:38 AM ESD-America---RSA2016 pdf I attended.   I don’t think it was anything new from what has been out there before.   It seemed to angle more towards national security.   That said, I’d like to reach out to the presenter, Les Goldsmith, about speaking to the group.   I have attached his presentation.   Thanks, Steven   From: McPherson, Danny [mailto:dmcpherson@verisign.com] Sent: Tuesday, August 30, 2016 8:55 AM To: Steven McKinnon ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: Re: [csric5-wg10] FW: SS7 Vulnerabilities   Quote a provocative title there - Did anyone here attend this?  Was there anything _new / noteworthy presented or discussed?   -danny   From: on behalf of Steven McKinnon Date: Friday, August 26, 2016 at 3:25 PM To: "csric5-wg10@googlegroups.com" Subject: [csric5-wg10] FW: SS7 Vulnerabilities For those in the group who are close to DC, this event is being held on Monday.   Sorry for sharing last minute but thought it might be interesting for those who are close enough to attend.   From: Les Goldsmith [mailto:les@esdamerica.com] Sent: Thursday, August 25, 2016 6:40 PM To: info@esdamerica.com Subject: SS7 Vulnerabilities Breaking the National Security Backbone, SS7 Vulnerabilities, and Nation State Signals Intelligence. ***REGISTER NOW FOR THIS FREE EVENT:https://www.eventbrite.com/e/national-security-backbone-ss7vulnerabilities-tickets-27096429149 When: August 29, 2016 Time: 10:00am - 12:30pm We will serve coffee and a light snack in the lobby after the event for those who want to network. Room: MPA B-07 805 21st Street NW Washington, DC 20052 George Washington University, Foggy Bottom Campus Thanks, Les Goldsmith Chief Executive Officer Direct: (702) 483 0254 CP500i +807 6654 6120 ESD America Inc Ph. (702) 605 0160 esdamerica.com - esdcryptophone.com - esdoverwatch.com - esdoversight.com This email may contain confidential information and may be intercepted by third parties beyond our control. However if you wish to contact us with 100% security then you need a Cryptophone. Cryptophone's provide end to end encryption with a verifiable source code -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB0437D0E20D520A77AB352BDBF0EC0%40BY1PR09MB0437 namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB04377FE6AFC37CBFEC485C00F0E00%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: csric5-wg10@googlegroups.com on behalf of Steven McKinnon John Marinho; McPherson Danny; Blasco Kathleen; csric5-wg10@googlegroups com Briggs Kevin RE: [csric5-wg10] FW: SS7 Vulnerabilities Wednesday, August 31, 2016 11:27:53 AM Does anyone have contacts with other vendors?  I’m thinking of Syniverse, TNS, etc.     From: John Marinho [mailto:JMarinho@ctia.org] Sent: Wednesday, August 31, 2016 11:25 AM To: McPherson, Danny ; Blasco, Kathleen ; Steven McKinnon ; csric5-wg10@googlegroups.com Cc: Briggs, Kevin Subject: RE: [csric5-wg10] FW: SS7 Vulnerabilities IMHO – Indeed a slippery slope.   If we invite one solution provider, we should consider an open invitation otherwise we run the risk of perceived bias.   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Wednesday, August 31, 2016 11:15 AM To: Blasco, Kathleen ; Steven McKinnon ; csric5wg10@googlegroups.com Cc: Briggs, Kevin Subject: Re: [csric5-wg10] FW: SS7 Vulnerabilities   Are there other vendor’s product/solutions (even bespoke) folks are aware of that we should consider if we’re going to go down this path?  I think this is a bit of a slippery slope but I also think it is necessary to properly capture the solutions space.   -danny   From: on behalf of "Blasco, Kathleen" Date: Wednesday, August 31, 2016 at 11:03 AM To: Steven McKinnon , "McPherson, Danny" , "csric5wg10@googlegroups.com" Cc: "Briggs, Kevin" Subject: RE: [csric5-wg10] FW: SS7 Vulnerabilities We would also like to propose Adaptive Mobile (https://www.adaptivemobile.com/) present their SS7/Diameter mitigation solutions to the group to understand what has been implemented by some of the carriers in Europe/other countries. See press release below on their  SS7 GSMA “Cat 3” detection capabilities.   https://www.adaptivemobile.com/press-centre/press-releases/adaptivemobiles-signalling-protection-unveils-advancedss7-gsma-category-3   Kathy   Kathleen J. Blasco Communications Assessment Team Lead DHS\NPPD\CS&C\NCCIC\NCC 703-235-5260 (o) 240-423-0618 (c)   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Steven McKinnon Sent: Tuesday, August 30, 2016 9:15 AM To: McPherson, Danny; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: RE: [csric5-wg10] FW: SS7 Vulnerabilities I attended.   I don’t think it was anything new from what has been out there before.   It seemed to angle more towards national security.   That said, I’d like to reach out to the presenter, Les Goldsmith, about speaking to the group.   I have attached his presentation.   Thanks, Steven   From: McPherson, Danny [mailto:dmcpherson@verisign.com] Sent: Tuesday, August 30, 2016 8:55 AM To: Steven McKinnon ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: Re: [csric5-wg10] FW: SS7 Vulnerabilities   Quote a provocative title there - Did anyone here attend this?  Was there anything _new / noteworthy presented or discussed?   -danny   From: on behalf of Steven McKinnon Date: Friday, August 26, 2016 at 3:25 PM To: "csric5-wg10@googlegroups.com" Subject: [csric5-wg10] FW: SS7 Vulnerabilities For those in the group who are close to DC, this event is being held on Monday.   Sorry for sharing last minute but thought it might be interesting for those who are close enough to attend.   From: Les Goldsmith [mailto:les@esdamerica.com] Sent: Thursday, August 25, 2016 6:40 PM To: info@esdamerica.com Subject: SS7 Vulnerabilities Breaking the National Security Backbone, SS7 Vulnerabilities, and Nation State Signals Intelligence. ***REGISTER NOW FOR THIS FREE EVENT:https://www.eventbrite.com/e/national-security-backbone-ss7vulnerabilities-tickets-27096429149 When: August 29, 2016 Time: 10:00am - 12:30pm We will serve coffee and a light snack in the lobby after the event for those who want to network. Room: MPA B-07 805 21st Street NW Washington, DC 20052 George Washington University, Foggy Bottom Campus Thanks, Les Goldsmith Chief Executive Officer Direct: (702) 483 0254 CP500i +807 6654 6120 ESD America Inc Ph. (702) 605 0160 esdamerica.com - esdcryptophone.com - esdoverwatch.com - esdoversight.com This email may contain confidential information and may be intercepted by third parties beyond our control. However if you wish to contact us with 100% security then you need a Cryptophone. Cryptophone's provide end to end encryption with a verifiable source code -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB0437D0E20D520A77AB352BDBF0EC0%40BY1PR09MB0437 namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB04377FE6AFC37CBFEC485C00F0E00%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/F140A0A2602A094EACE4F33D7C511C710141DCAD65%40D2ASEPREA004. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/65F2ACE3-ABC4-459B986C-5CEEF158B4E8%40verisign.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB043783111B0A9BA275D295B8F0E30%40BY1PR09MB0437 namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Ranjan Nilesh Steven McKinnon Re: [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS Thursday, October 27, 2016 1:01:21 PM Hi Steve, It’s this one.   Thanks, Nilesh Ranjan +1-706-888-4313     From: on behalf of Steven McKinnon Date: Thursday, October 27, 2016 at 9:46 AM To: "Kimmins, John F." , "csric5-wg10@googlegroups.com" Cc: "Morin, Drew" Subject: [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS Can someone share the Positive Technologies research slide deck that Travis will be sharing?  Or at least give me a date of when it was shared with the group?  I’m not finding it in my emails.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, October 26, 2016 3:19 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 27 WG Call AGENDA & LOGISTICS   Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 - (b) (4) Agenda:   1. Travis Russell brief on the Positive Technologies research ( slide deck previously shared) 2. Update on the current Risk assessment report from John Marinho 3. Update on Robocalling Strikeforce by Martin Dolly 4. Upcoming SME briefing – Brian Collins Adaptive Mobile 5. AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5- wg10/DM5PR06MB26331A3C3F196D819CEFB189CFAB0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB043796D4FE34B213832179CAF0AA0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: John Marinho Khaled, Mohammad (Nokia - US/Irving); Travis Russell Morin, Drew; Steven McKinnon; McPherson, Danny; Blasco, Kathleen; csric5-wg10@googlegroups.com; Briggs, Kevin RE: [csric5-wg10] Revised Draft Assessment Document Wednesday, September 7, 2016 12:07:53 PM Thanks, will send along an update later today.   From: Khaled, Mohammad (Nokia - US/Irving) [mailto:mohammad.khaled@nokia.com] Sent: Wednesday, September 7, 2016 11:53 AM To: Travis Russell ; John Marinho Cc: Morin, Drew ; Steven McKinnon ; McPherson, Danny ; Blasco, Kathleen ; csric5-wg10@googlegroups.com; Briggs, Kevin Subject: RE: [csric5-wg10] Revised Draft Assessment Document Hi John M  , Travis  and Team   Here is an updated redline copy with the addition of some edits/comments to Travis’s last edits  in Section 9i .   Regards, Mohammad From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Travis Russell Sent: Thursday, September 01, 2016 9:10 AM To: John Marinho Cc: Khaled, Mohammad (Nokia - US/Irving) ; Morin, Drew ; Steven McKinnon ; McPherson, Danny ; Blasco, Kathleen ; csric5wg10@googlegroups.com; Briggs, Kevin Subject: Re: [csric5-wg10] Revised Draft Assessment Document I have added some comments to the redline copy based on my direct involvement in the GSMA, and the associated documents mentioned in the redline copy. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/22C4ADE7-8102-41E7-88CC-0A17AF449269%40oracle.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: csric5-wg10@googlegroups.com on behalf of Steven McKinnon John Marinho; Morin Drew; McPherson Danny; csric5-wg10@googlegroups.com RE: [csric5-wg10] SS7 Vulnerabilities Friday, September 2, 2016 2:25 00 PM Thanks Let's be sure to have a robust discussion on this in the word document as well Steven -----Original Message----From: John Marinho [mailto:JMarinho@ctia org] Sent: Friday, September 02, 2016 2:19 PM To: Steven McKinnon ; Morin, Drew ; McPherson, Danny ; csric5-wg10@googlegroups com Subject: RE: [csric5-wg10] SS7 Vulnerabilities Steven, See attached edits to page 6, additional subsections to Wireline and Mobile Sections Cheers, John -----Original Message----From: csric5-wg10@googlegroups com [mailto csric5-wg10@googlegroups com] On Behalf Of Steven McKinnon Sent: Friday, September 2, 2016 1 04 PM To: John Marinho ; Morin, Drew ; McPherson, Danny ; csric5-wg10@googlegroups com Subject: RE: [csric5-wg10] SS7 Vulnerabilities I think that makes the most sense I'm looking for that part of the discussion to be emphasized -----Original Message----From: John Marinho [mailto:JMarinho@ctia org] Sent: Friday, September 02, 2016 12:56 PM To: Morin, Drew ; Steven McKinnon ; McPherson, Danny ; csric5-wg10@googlegroups com Subject: RE: [csric5-wg10] SS7 Vulnerabilities Agree, my thought was to call out specifically as additional subsections - if no objection John A Marinho Technology and Cybersecurity CTIA 1400 16th St NW, Suite 600 Washington DC 20036 Email: jmarinho@ctia org Smartphone: 202-440-0844 Sent from my 4G LTE smartphone -------- Original message -------From: "Morin, Drew" Date: 9/2/16 12:54 PM (GMT-05 00) To: Steven McKinnon , John Marinho , "McPherson, Danny" , csric5-wg10@googlegroups com Subject: RE: [csric5-wg10] SS7 Vulnerabilities I think that is planned to be covered in the sections under Wireline and Wireless already in the outline From: csric5-wg10@googlegroups com [mailto csric5-wg10@googlegroups com] On Behalf Of Steven McKinnon Sent: Friday, September 2, 2016 12:10 PM To: John Marinho ; McPherson, Danny ; csric5-wg10@googlegroups com Cc: Morin, Drew Subject: RE: [csric5-wg10] SS7 Vulnerabilities Thanks John M Can we add a section to the outline discussing the current hardening of SS7 and short-term mitigation solutions available that could improve it? Steven From: csric5-wg10@googlegroups com [mailto:csric5-wg10@googlegroups com] On Behalf Of John Marinho Sent: Thursday, September 01, 2016 3:40 PM To: McPherson, Danny >; csric5-wg10@googlegroups com Cc: Morin, Drew > Subject: RE: [csric5-wg10] SS7 Vulnerabilities Updated charts based on today's discussion From: csric5-wg10@googlegroups com [mailto:csric5-wg10@googlegroups com] On Behalf Of McPherson, Danny Sent: Thursday, September 1, 2016 2:53 PM To: csric5-wg10@googlegroups com Cc: Morin, Drew > Subject: Re: [csric5-wg10] SS7 Vulnerabilities WG Folks, One thing I might put out for consideration on the call today is for us to develop a capabilities matrix/catalog survey that we could provide to vendors, to include an option to share any anecdotal or other dialog they might want to provide into the WG on the topics we ask about as well I don't think we'd want to publish the details as we wouldn't be validating their assertions, but we could certainly use the feedback collected to capture / reflect some aspects of vendor perspective on landscape, detection, mitigation, efficacy therein, etc in the discussion Thoughts on this? -danny From: > on behalf of Travis Russell > Date: Thursday, September 1, 2016 at 10:18 AM To: "McPherson, Danny" > Cc: "Blasco, Kathleen" >, Steven McKinnon >, "csric5-wg10@googlegroups com" >, "Briggs, Kevin" > Subject: Re: [csric5-wg10] SS7 Vulnerabilities From Syniverse: John T McRae II Group Vice President/General Manager Revenue & Connectivity Management +1 (813) 637 5021 office +1 (615) 300 2923 mobile Syniverse We make mobile work John mcrae@syniverse com www syniverse com [cid:image001 gif@01D20519 1F1D2250] Travis Russell Director, Cyber Security, Service Provider Networks +1919 205 6857 (o) +1919 412 1167 (c) https://www linkedin com/in/travisrussell1 5200 Paramount Pkwy Morrisville, NC 27560 USA [cid:image002 gif@01D20519 1F1D2250] Oracle is committed to developing practices and products that help protect the environment On Aug 31, 2016, at 11:14 AM, McPherson, Danny > wrote: Are there other vendor's product/solutions (even bespoke) folks are aware of that we should consider if we're going to go down this path? I think this is a bit of a slippery slope but I also think it is necessary to properly capture the solutions space -danny From: > on behalf of "Blasco, Kathleen" > Date: Wednesday, August 31, 2016 at 11:03 AM To: Steven McKinnon >, "McPherson, Danny" >, "csric5-wg10@googlegroups com" > Cc: "Briggs, Kevin" > Subject: RE: [csric5-wg10] FW: SS7 Vulnerabilities We would also like to propose Adaptive Mobile (https://www adaptivemobile com/) present their SS7/Diameter mitigation solutions to the group to understand what has been implemented by some of the carriers in Europe/other countries See press release below on their SS7 GSMA "Cat 3" detection capabilities https://www adaptivemobile com/press-centre/press-releases/adaptivemobiles-signalling-protection-unveils-advanced-ss7-gsma-category-3 Kathy Kathleen J Blasco Communications Assessment Team Lead DHS\NPPD\CS&C\NCCIC\NCC 703-235-5260 (o) 240-423-0618 (c) From: csric5-wg10@googlegroups com [mailto:csric5-wg10@googlegroups com] On Behalf Of Steven McKinnon Sent: Tuesday, August 30, 2016 9:15 AM To: McPherson, Danny; csric5-wg10@googlegroups com Cc: Morin, Drew Subject: RE: [csric5-wg10] FW: SS7 Vulnerabilities I attended I don't think it was anything new from what has been out there before Goldsmith, about speaking to the group I have attached his presentation It seemed to angle more towards national security That said, I'd like to reach out to the presenter, Les Thanks, Steven From: McPherson, Danny [mailto:dmcpherson@verisign com] Sent: Tuesday, August 30, 2016 8:55 AM To: Steven McKinnon >; csric5-wg10@googlegroups com Cc: Morin, Drew > Subject: Re: [csric5-wg10] FW: SS7 Vulnerabilities Quote a provocative title there - Did anyone here attend this? Was there anything _new / noteworthy presented or discussed? -danny From: > on behalf of Steven McKinnon > Date: Friday, August 26, 2016 at 3:25 PM To: "csric5-wg10@googlegroups com" > Subject: [csric5-wg10] FW: SS7 Vulnerabilities For those in the group who are close to DC, this event is being held on Monday Sorry for sharing last minute but thought it might be interesting for those who are close enough to attend From: Les Goldsmith [mailto:les@esdamerica com] Sent: Thursday, August 25, 2016 6:40 PM To: info@esdamerica com Subject: SS7 Vulnerabilities Breaking the National Security Backbone, SS7 Vulnerabilities, and Nation State Signals Intelligence ***REGISTER NOW FOR THIS FREE EVENT:https://www eventbrite com/e/national-security-backbone-ss7-vulnerabilities-tickets-27096429149 When: August 29, 2016 Time: 10 00am - 12:30pm We will serve coffee and a light snack in the lobby after the event for those who want to network Room: MPA B-07 805 21st Street NW Washington, DC 20052 George Washington University, Foggy Bottom Campus Thanks, Les Goldsmith Chief Executive Officer Direct: (702) 483 0254 CP500i +807 6654 6120 ESD America Inc Ph (702) 605 0160 esdamerica com - esdcryptophone com - esdoverwatch com esdoversight com This email may contain confidential information and may be intercepted by third parties beyond our control However if you wish to contact us with 100% security then you need a Cryptophone Cryptophone's provide end to end encryption with a verifiable source code -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5wg10/BY1PR09MB0437D0E20D520A77AB352BDBF0EC0%40BY1PR09MB0437 namprd09 prod outlook com For more options, visit https://groups google com/d/optout -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5wg10/BY1PR09MB04377FE6AFC37CBFEC485C00F0E00%40BY1PR09MB0437 namprd09 prod outlook com For more options, visit https://groups google com/d/optout -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5wg10/F140A0A2602A094EACE4F33D7C511C710141DCAD65%40D2ASEPREA004 For more options, visit https://groups google com/d/optout -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5-wg10/65F2ACE3-ABC4-459B-986C5CEEF158B4E8%40verisign com For more options, visit https://groups google com/d/optout -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5-wg10/35CC1E56-C2D6-4B26-AA58457ACEFFD199%40oracle com For more options, visit https://groups google com/d/optout -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5-wg10/419B107E-F458-4226-B745AD55C6F52930%40verisign com For more options, visit https://groups google com/d/optout -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5wg10/e8fc7f08a12f4aa7a299ad0a03267d9f%40EXCH2013 ctia org For more options, visit https://groups google com/d/optout -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5wg10/BY1PR09MB0437DDA0A1C53FA02ECFE20DF0E50%40BY1PR09MB0437 namprd09 prod outlook com For more options, visit https://groups google com/d/optout -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5wg10/BY1PR09MB04378AE75707AC47F339A440F0E50%40BY1PR09MB0437 namprd09 prod outlook com For more options, visit https://groups google com/d/optout -You received this message because you are subscribed to the Google Groups "csric5-wg10" group To unsubscribe from this group and stop receiving emails from it, send an email to csric5-wg10+unsubscribe@googlegroups com To post to this group, send email to csric5-wg10@googlegroups com To view this discussion on the web visit https://groups google com/d/msgid/csric5wg10/BY1PR09MB0437F50DA052F24C0FC93A8BF0E50%40BY1PR09MB0437 namprd09 prod outlook com For more options, visit https://groups google com/d/optout From: To: Cc: Subject: Date: John Marinho McPherson, Danny; csric5-wg10@googlegroups.com; Steven McKinnon Morin, Drew; Walter Johnston; Charles Mathias; Brian Josef RE: CSRIC V WG 10 Teleconference - August 10, 2016 Thursday, August 11, 2016 8:49:48 AM Excellent, thank you!   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Thursday, August 11, 2016 8:49 AM To: John Marinho ; csric5-wg10@googlegroups.com; Steven McKinnon Cc: Morin, Drew ; Walter.Johnston@fcc.gov; Charles.Mathias@fcc.gov; Brian Josef Subject: [csric5-wg10] Re: CSRIC V WG 10 Teleconference - August 10, 2016     Ahh, yes, I meant to provide an update on that.  Steven, John Kimmins and I connected on this after the call last week and Steven formally requested from Suzon and Jeff that they provide us some guidance and ground rules here, considerate of your reference to the TAC activity and Walter’s experiences, and how that might convey here.    We’re still waiting on their response – let this serve as a nudge Steven and please plan to provide an update on the call today!   -danny   From: John Marinho Date: Thursday, August 11, 2016 at 8:43 AM To: "McPherson, Danny" , "csric5-wg10@googlegroups.com" Cc: "Morin, Drew" , "Walter.Johnston@fcc.gov" , "Charles.Mathias@fcc.gov" , Brian Josef Subject: RE: CSRIC V WG 10 Teleconference - August 10, 2016 Danny,   Do we plan to address the question I raised on the last call regarding the treatment of information exchange that is sensitive (e.g. FOUO) and not intended for public disclosure, and the associated ground rules (e.g. appropriate markings, participant obligations to protect the information, etc.)?   As I mentioned, in my past experience Walter Johnston at the FCC was most helpful in this space when during a TAC activity in 2014 we had a similar situation regarding a cybersecurity assessment, and procedures were implemented to protect the information accordingly.   Happy to discuss if you have any questions.   Thanks, John   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Thursday, August 11, 2016 8:33 AM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] CSRIC V WG 10 Teleconference - August 10, 2016     Team, Reminder for the call this afternoon 1500-1600 ET.  The dial-in information is as follows:   *Premiere Intl. Bridge 11 - (b) (4)   CALL AGENDA   1. Welcome Mohammad Khaled (Nokia) to the WG 2. Risk Assessment Outline Review & Next Steps – John Marinho, et al. 3. Robo-calling Brief, Discussion, and Action Plan (slides to be provided) – Martin Dolly 4. SME Briefings Update (Silke Holtmanns & Karsten Nohl) – John Kimmins 5. Next CSRIC V Council Meeting (September 14, 2016) Plan (Specifically, do we want to provide an interim report or just a generic update, concerns on deliverables for WG, etc..  – John, Danny & Steven 6.  AOB   I believe that’s it for this week.  IF you haven’t commented on the Risk Assessment Draft please do so ASAP.   Also, note that at least one WG member is having troubles receiving Google Groups emails.  I’m looking into alternatives that don’t introduce new problems.     -danny -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/0C2BC5D4-0FA1-45AF-9828-AA682A438072%40verisign.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DADAFD44-3E27-4618-897A-289E6A0A2259%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Attachments: Suzon Cameron Steven McKinnon; Jeffery Goldthorp RE: CSRIC WG10 Risk Assessment Report - Public Version Thursday, January 26, 2017 11:14:19 AM image001.png No, sorry.  It isn’t done yet.    From: Steven McKinnon Sent: Thursday, January 26, 2017 10:13 AM To: Suzon Cameron ; Jeffery Goldthorp Subject: RE: CSRIC WG10 Risk Assessment Report - Public Version   Any word on the letter?  I know it will come up on today’s call.   From: Suzon Cameron Sent: Thursday, January 26, 2017 10:12 AM To: Steven McKinnon ; Jeffery Goldthorp Subject: RE: CSRIC WG10 Risk Assessment Report - Public Version   I have not looked at it yet.   From: Steven McKinnon Sent: Thursday, January 26, 2017 10:11 AM To: Jeffery Goldthorp ; Suzon Cameron Subject: RE: CSRIC WG10 Risk Assessment Report - Public Version   Can you all confirm that you have received the report and that there are no problems with this deliverable?    Thanks, Steven   From: Kimmins, John F. [mailto:jkimmins@iconectiv.com] Sent: Tuesday, January 24, 2017 8:00 AM To: Jeffery Goldthorp ; Suzon Cameron Cc: Steven McKinnon ; dmcpherson@verisign.com Subject: CSRIC WG10 Risk Assessment Report - Public Version   Jeff and Suzon,   I have attached the final Risk Assessment Public version Report. If there are any questions let us know.   John   John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com   To: Subject: Date: McPherson, Danny; Kimmins, John F. (jkimmins@iconectiv.com) RE: CSRIV V WG 10 August 18 Teleconference Agenda Thursday, August 18, 2016 3:55:11 PM I need to hop off.  Great presentation and good questions.  I’ll be back in the office on Monday so if there are any FCC actions please send them to me.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Thursday, August 18, 2016 8:37 AM To: csric5-wg10@googlegroups.com; Morin, Drew Cc: Morin, Drew Subject: [csric5-wg10] CSRIV V WG 10 August 18 Teleconference Agenda     Hey folks, here is the dial in information and agenda for the call @3P ET today:   Teleconference details: *Premiere Intl. Bridge 11 -(b) (4) AGENDA 1. 2. 3. 4. 5. Silke Hotmanns’s SME Briefing Martin Dolly Robo-calling discussion takeaways Risk Assessment Outline and next steps (contributors, interim report in September v. not, etc..) – Marinho et al. Feedback on Steven’s email regarding “Protecting Sensitive Information” AOB   You’ve likely already seen that John has recently sent Silke’s slide deck for you to follow along during her briefing today.  If you have a chance to pre-review and provide / prepare questions that’d be ideal.   Also, if you’ve not sent any final comments on the outline to John Marinho please do so ASAP (_before the call), and please be prepared to discuss filling in the various sections in the outline and what you’re prepared to volunteer for or contribute to.   Thanks much,   -danny (& John) -- You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/CDE5C952-654F-44E8-8348-44DA2A86A3D3%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Attachments: Jeffery Goldthorp Steven McKinnon; Suzon Cameron Kimmins, John F. (jkimmins@iconectiv.com); McPherson, Danny RE: New Working Group focused on Telecom Security Risks Monday, September 19, 2016 2:55:43 PM image001.png image002.png image003.png Suzon Please run by Paula – Thankss   Jeffery M. Goldthorp Associate Bureau Chief for Resiliency and Cybersecurity Risk Reduction Public Safety and Homeland Security Bureau Federal Communications Commission   202-418-1096 202-253-1595 (cell)   From: Steven McKinnon Sent: Monday, September 19, 2016 2:00 PM To: Suzon Cameron Cc: Kimmins, John F. (jkimmins@iconectiv.com) ; McPherson, Danny ; Jeffery Goldthorp Subject: FW: New Working Group focused on Telecom Security Risks   Suzon –   I need some legal guidance in the email below.  James Moran, a director at GSMA, has responded to our outreach in getting someone from a wireless standards group to come and speak with us about the work being done to improve SS7 security.  He mentions in the email chain below about that a working group he leads, Roaming and Interconnect Fraud and Security Group (RIFS), is interested in participating and would like to see what a “formal liaison agreement” looks like to allow them to participate in the working group.   I do not know what this means but Mr. Moran is checking with GSMA legal team to see how they feel and I thought it would be prudent for us to do the same.  I know we have had standards bodies like NIST and ATIS participate in past working groups but could not find GSMA having participated.    If you could review the chain below and give us your thoughts on how to proceed, we would appreciate it.  John and Danny are going to see if we can schedule a call with Mr. Moran end of this week or early next week that I would like you to attend in case any questions come up.   Thanks, Steven   From: Kimmins, John F. [mailto:jkimmins@iconectiv.com] Sent: Friday, September 16, 2016 6:45 AM To: McPherson, Danny ; Steven McKinnon Subject: FW: New Working Group focused on Telecom Security Risks   Danny and Steven,   We should talk early next week about a path forward with GSMA.   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com       From: James Moran [mailto:jmoran@gsma.com] Sent: Thursday, September 15, 2016 9:00 PM To: Kimmins, John F. Subject: RE: New Working Group focused on Telecom Security Risks   Hi John,   I am pleased to advise that GSMA’s Roaming and Interconnect Fraud and Security Group (RIFS) convened this week and confirmed its support for the work of the FCC expert group to report to US Congress on SS7 vulnerabilities and mitigation options.   RIFS agreed it makes sense to establish a liaison between GSMA and the FCC WG10 group, of which you are co-chair, with a view to sharing documentation, subject to restricting distribution of the GSMA documents to the WG10 members. We strongly believe in the value of collaboration with all parties interested in interconnect security issues and that we have some value to add because of the work already done by RIFS. Furthermore, we want to help your efforts as a number of your group’s participants are also key contributors to our work.   I am not entirely sure what a formal liaison agreement would look like but I have instigated work to sort that out with our Legal Department and we will come back with a proposal. We will try to keep that as uncomplicated as possible and a sensible approach might be to have somebody participating in both groups to act as the liaison point to communicate between both. In that regard, we suggest that I could act as the primary GSMA contact, if you are willing to include me in as a participant in your group, with Travis Russell acting as a backup, which he has agreed to do. I welcome your thoughts in that regard.   Finally, I should point out that our key documents, referenced within GSMA as FS.07, FS.11 and IR.82, are currently undergoing significant changes to resolve inconsistencies may cause confusion. So, our proposal is that, subject to formal agreement between FCC and GSMA, your group should only receive and deal with final draft versions, which will be available in the coming weeks. We are conscious of the timescales within which your group needs to work and it is for that reason that we are willing to release stable output from RIFS before GSMA formal approval and we hope that concession is understood.   So, in summary, we have agreed to cooperate and share documentation with your group if I, as a GSMA nominee, could possibly be added to your working group. Please let me know if that is acceptable and, if so, we can will do what we can to get this done quickly.   Best regards,   James.   From: James Moran Sent: 11 September 2016 00:42 To: 'Kimmins, John F.' Subject: RE: New Working Group focused on Telecom Security Risks   Many thanks John.   I note that a number of GSMA members are participating and that makes it easier so I will work something out in relation to the others and I will get back to you.   Best regards,   James.   From: Kimmins, John F. [mailto:jkimmins@iconectiv.com] Sent: 10 September 2016 19:12 To: James Moran Subject: RE: New Working Group focused on Telecom Security Risks   Hi James,   I have attached two slides that show the current WG charter and membership.   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com - Subsidiary of Ericsson       From: James Moran [mailto:jmoran@gsma.com] Sent: Saturday, September 10, 2016 9:43 AM To: Kimmins, John F. Subject: RE: New Working Group focused on Telecom Security Risks   Hi John,   Many thanks for your prompt response and for clarifying what is of interest to you on which I should present in October.   I am also grateful for your confirmation that no GSMA restricted documents have been inappropriately distributed and I note your desire to be able to share our documents with your WG members. I am happy to consider how we could do that and it would help me greatly if you could please provide a full list of WG members to which circulation would be restricted.   Best regards,   James.   From: Kimmins, John F. [mailto:jkimmins@iconectiv.com] Sent: 04 September 2016 17:58 To: James Moran Subject: RE: New Working Group focused on Telecom Security Risks   Hi James,   Thanks for your willingness to support this effort. We can work with you and schedule your talk when you are available. I have scheduled Karsten Nohl to brief the group on October 13th. Early October would work with us.   I have included my responses to your questions below.   Regards   John Kimmins   From: James Moran [mailto:jmoran@gsma.com] Sent: Saturday, September 03, 2016 5:49 PM To: Kimmins, John F. Subject: RE: New Working Group focused on Telecom Security Risks   Hi John,   Thank you for your email and the good news that the FCC has convened a group to look at interconnect security risks. As you may be aware, GSMA has been quite active on these issues at a global level over the past 18 months and it makes sense to establish some form of liaison between GSMA and the FCC Working Group. I note the industry experts that are contributing to your work are also central to ours so the risk of fragmentation is reduced and it is likely that your work and ours aligns quite well.   So, I appreciate the opportunity to liaise with your Working Group but I am not available for the next three weeks due to annual leave and other business travel commitments. However, I can be available from early October and in the meantime it would be helpful for me if you could assist in the following ways; · Describe the areas and aspects pertaining to the broad topic of interconnect security you would like me to focus on when presenting to your Working Group . We are primarily focused on SS7 and Diameter security vulnerabilities, and current and future remediation technology and techniques. We have two main deliverables – security risk assessment (Final in December) and recommendations (March 2017). These will be public documents. However we have discussed with the FCC the need to have supporting documents containing sensitive information e.g., vulnerabilities, attack vectors) that will not be made public. · Outline what form of liaison you would like to create with GSMA so we can take that forward as I very much support the opportunity. We want to leverage the great work that the GSMA has been doing. We want to explore various items like how we can share appropriate GSMA restricted documents with only the WG members, determine the level of detail that is captured in the WG documentation  artifacts and deliverables, level of GSMA participation and collaboration, the GSMA security roadmap, etc.. · Confirm that no GSMA member restricted documentation, especially FS.07 and FS.11 mentioned below, have been distributed within the FCC Working Group. No GSMA restricted documents have been shared with the WG members. The WG members are a mix of carriers, suppliers, industry associations (e.g., CTIA) and government (e.g., FCC, DHS). · Clarify the relationship of your Working Group to the FCC investigation into SS7 initiated last April and that was specifically referenced in Congressman Lieu’s recent letter to the FCC seeking expedition of, and an update, on the investigation. We are the WG that was created because of media reports (e.g., 60 minutes) and the Congressional pressure to “fix” the SS7 vulnerabilities. The FCC is under pressure to address Congressman’s Lieu’s letter. My Cochair (Danny McPherson of Verisign) and I had a call with Admiral Simpson of the FCC on Thursday. He wants the WG to accelerate its work where possible. The FCC wants to know the real threats and vulnerabilities with SS7 and how do we address them in the short and long term. We are also staying connected to the FCC Robocalling strike force effort to see if any of those approaches can be leveraged.   I look forward to an effective collaboration being established between GSMA and the FCC CSRIC Working Group 10 on the crucial interconnect security matters and to your reply in that regard.   Best regards,   James.   From: Kimmins, John F. [mailto:jkimmins@iconectiv.com] Sent: 02 September 2016 15:47 To: James Moran Subject: New Working Group focused on Telecom Security Risks   James,   I am Co-Chair of a new Working Group (#10) focused on the risks with legacy systems (e.g., SS7, Diameter) and their impact on new and emerging telecom services, subscribers and operators. It is sponsored by the US Federal Communication Commission under the CSRIC program. More detail is available at: https://www.fcc.gov/about-fcc/advisory-committees/communications-securityreliability-and-interoperability   We are performing a security risk assessment of the current telecom environment, what standards and industry forums are doing to remediate the risks and where there are gaps. We will also be making recommendations to further address the risks. We have leading experts like Travis Russell of Oracle and Martin Dolly of AT&T participating. Silke Holtmanns of Nokia-Bell-Labs has briefed the group as a Subject Matter Expert.   We would like to invite you as a SME to present on a WG call your current views of the risks and potential remediation approaches. Let me know your interest and availability during September. We have weekly calls on Thursday afternoons.   We would also like to create a liaison relationship with GSMA so we could share relevant GSMA documents (e.g., FS.11, FS.07) among the Working Group members. We want to leverage what the GSMA is doing in our efforts.   If you want to talk about these items, let me know.   Regards   John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com   This email and its attachments are intended for the above named only and may be confidential. If they have come to you in error you must take no action based on them, nor must you copy or show them to anyone; please reply to this email or call +44 207 356 0600 and highlight the error. This email and its attachments are intended for the above named only and may be confidential. If they have come to you in error you must take no action based on them, nor must you copy or show them to anyone; please reply to this email or call +44 207 356 0600 and highlight the error. This email and its attachments are intended for the above named only and may be confidential. If they have come to you in error you must take no action based on them, nor must you copy or show them to anyone; please reply to this email or call +44 207 356 0600 and highlight the error. From: To: Subject: Date: McPherson, Danny Steven McKinnon Re: OCT 13, 2018 Call Agenda and Updated Risk Assessment Thursday, October 13, 2016 10:56:40 AM   I’ll let him know it’s going to be asked, I think that’s a critical / important question.   -danny   From: Steven McKinnon Date: Thursday, October 13, 2016 at 10:55 AM To: "McPherson, Danny" Subject: RE: OCT 13, 2018 Call Agenda and Updated Risk Assessment I can ask.  I just didn’t know if you were submitting questions to him before our call today.  If not, I can ask him.   Thanks, Steven   From: McPherson, Danny [mailto:dmcpherson@verisign.com] Sent: Thursday, October 13, 2016 10:51 AM To: Steven McKinnon Subject: Re: OCT 13, 2018 Call Agenda and Updated Risk Assessment     Got it.  You want to ask, want me to share now, or should I ask?  Your preference?   -danny     From: Steven McKinnon Date: Thursday, October 13, 2016 at 10:49 AM To: "McPherson, Danny" Subject: RE: OCT 13, 2018 Call Agenda and Updated Risk Assessment Danny –   One question I have that I’d like to submit to Karsten is does he see or has he seen any drops or problems in maintaining network performance levels with these proposed solutions for SS7.  Has there been a point where the improved security has had a negative impact on performance?   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Wednesday, October 12, 2016 4:22 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] OCT 13, 2018 Call Agenda and Updated Risk Assessment     Folks, Tomorrow afternoon the call will be devoted to the SME briefing from Karsten Nohl.  Please preview the slides [attached again] and prepare any questions you may have for him.   The call logistics are again as follows tomorrow from 1500-1600 ET:   *Premiere Intl. Bridge 11 - (b) (4)   Additionally, I’ve attached the updated Risk Assessment (v.1.3.1) which includes the following updates (hat tip: John Marinho):   1. 2. 3. Updated WG Membership list, Inclusion of submission from Travis Russell, and Update to Section 7 regarding the discussion on DIAMETER from the last meeting.   Please provide comments to the WG on the Risk Assessment as your schedules permit.     Regards,   -danny (&JohnK)     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DCF21692-CE79-4999-89E7-9312BC6B67A4%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: McPherson, Danny Steven McKinnon Re: OCT 13, 2018 Call Agenda and Updated Risk Assessment Thursday, October 13, 2016 10:52:05 AM   Got it.  You want to ask, want me to share now, or should I ask?  Your preference?   -danny     From: Steven McKinnon Date: Thursday, October 13, 2016 at 10:49 AM To: "McPherson, Danny" Subject: RE: OCT 13, 2018 Call Agenda and Updated Risk Assessment Danny –   One question I have that I’d like to submit to Karsten is does he see or has he seen any drops or problems in maintaining network performance levels with these proposed solutions for SS7.  Has there been a point where the improved security has had a negative impact on performance?   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Wednesday, October 12, 2016 4:22 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] OCT 13, 2018 Call Agenda and Updated Risk Assessment     Folks, Tomorrow afternoon the call will be devoted to the SME briefing from Karsten Nohl.  Please preview the slides [attached again] and prepare any questions you may have for him.   The call logistics are again as follows tomorrow from 1500-1600 ET:   *Premiere Intl. Bridge 11 - (b) (4)   Additionally, I’ve attached the updated Risk Assessment (v.1.3.1) which includes the following updates (hat tip: John Marinho):   1. Updated WG Membership list, 2. 3. Inclusion of submission from Travis Russell, and Update to Section 7 regarding the discussion on DIAMETER from the last meeting.   Please provide comments to the WG on the Risk Assessment as your schedules permit.     Regards,   -danny (&JohnK)     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DCF21692-CE79-4999-89E7-9312BC6B67A4%40verisign.com. For more options, visit https://groups.google.com/d/optout. To: Subject: Date: McPherson, Danny RE: OCT 13, 2018 Call Agenda and Updated Risk Assessment Thursday, October 13, 2016 10:48:20 AM Danny –   One question I have that I’d like to submit to Karsten   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Wednesday, October 12, 2016 4:22 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] OCT 13, 2018 Call Agenda and Updated Risk Assessment     Folks, Tomorrow afternoon the call will be devoted to the SME briefing from Karsten Nohl.  Please preview the slides [attached again] and prepare any questions you may have for him.   The call logistics are again as follows tomorrow from 1500-1600 ET:   *Premiere Intl. Bridge 11 - (b) (4)   Additionally, I’ve attached the updated Risk Assessment (v.1.3.1) which includes the following updates (hat tip: John Marinho):   1. 2. 3. Updated WG Membership list, Inclusion of submission from Travis Russell, and Update to Section 7 regarding the discussion on DIAMETER from the last meeting.   Please provide comments to the WG on the Risk Assessment as your schedules permit.     Regards,   -danny (&JohnK)     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5- wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DCF21692-CE79-4999-89E7-9312BC6B67A4%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Attachments: Jeffery Goldthorp Steven McKinnon RE: Risk Assessment Document: Feedback please! Wednesday, August 10, 2016 9:06:58 AM FCC CSRIC V Working Group 10 RiskAssessmentSummary Rev 1 1 Redline - Outline draft jmg.docx With my edits/comments – looks very good   Jeffery M. Goldthorp Associate Bureau Chief Cybersecurity and Communications Reliability Public Safety and Homeland Security Bureau Federal Communications Commission   202-418-1096 202-253-1595 (cell)   From: Steven McKinnon Sent: Wednesday, August 10, 2016 8:54 AM To: Jeffery Goldthorp Subject: FW: Risk Assessment Document: Feedback please!   Jeff –   There is a proposed outline for the risk assessment summary WG10 plans to deliver.  Feel free to take a look and provide comments/questions for me to take back to the group.   We have our now weekly meeting scheduled every Thursday at 3.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Tuesday, August 09, 2016 12:59 PM To: csric5-wg10@googlegroups.com Subject: [csric5-wg10] Risk Assessment Document: Feedback please!     Team, Attached is an updated outline (clean & redline) from John Marinho and co. in preparation for our discussion this Thursday.  Please provide comments to John and/or the mailing list _before the meeting and be prepared to discuss this document on the call.  Also, if you have interest in contributing to a certain section and have yet to engage with John or volunteer then please feel free to coordinate with John directly as he’s currently serving and lead editor.    Discussion on the list is encouraged (expected)!   Additionally, you should have received a recurring meeting invite for Thursdays at 3P ET for the WG teleconference.  We’ll provide a read ahead and agenda before each meeting as appropriate.  If there’s something you’d like to see or have concerns with please contact John Kimmins and/or I.   Thanks in advance,   -danny (& JohnK)     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/ABFA1B28-990F-4CC8-8635-D5D06F471106%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Jeffery Goldthorp Steven McKinnon RE: Risk Assessment Document: Feedback please! Wednesday, August 10, 2016 8:56:39 AM What parts of this do you really think I need to look at ?  just highlight them   Jeffery M. Goldthorp Associate Bureau Chief Cybersecurity and Communications Reliability Public Safety and Homeland Security Bureau Federal Communications Commission   202-418-1096 202-253-1595 (cell)   From: Steven McKinnon Sent: Wednesday, August 10, 2016 8:55 AM To: Jeffery Goldthorp Subject: RE: Risk Assessment Document: Feedback please!   Preferably COB today but if not today then early tomorrow.  Our call is at 3.   From: Jeffery Goldthorp Sent: Wednesday, August 10, 2016 8:54 AM To: Steven McKinnon Subject: RE: Risk Assessment Document: Feedback please!   When do you need to hear back from me?   Jeffery M. Goldthorp Associate Bureau Chief Cybersecurity and Communications Reliability Public Safety and Homeland Security Bureau Federal Communications Commission   202-418-1096 202-253-1595 (cell)   From: Steven McKinnon Sent: Wednesday, August 10, 2016 8:54 AM To: Jeffery Goldthorp Subject: FW: Risk Assessment Document: Feedback please!   Jeff –   There is a proposed outline for the risk assessment summary WG10 plans to deliver.  Feel free to take a look and provide comments/questions for me to take back to the group.   We have our now weekly meeting scheduled every Thursday at 3.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Tuesday, August 09, 2016 12:59 PM To: csric5-wg10@googlegroups.com Subject: [csric5-wg10] Risk Assessment Document: Feedback please!     Team, Attached is an updated outline (clean & redline) from John Marinho and co. in preparation for our discussion this Thursday.  Please provide comments to John and/or the mailing list _before the meeting and be prepared to discuss this document on the call.  Also, if you have interest in contributing to a certain section and have yet to engage with John or volunteer then please feel free to coordinate with John directly as he’s currently serving and lead editor.    Discussion on the list is encouraged (expected)!   Additionally, you should have received a recurring meeting invite for Thursdays at 3P ET for the WG teleconference.  We’ll provide a read ahead and agenda before each meeting as appropriate.  If there’s something you’d like to see or have concerns with please contact John Kimmins and/or I.   Thanks in advance,   -danny (& JohnK)     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/ABFA1B28-990F-4CC8-8635-D5D06F471106%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Attachments: Steven McKinnon John Marinho RE: September 1 Teleconference Agenda -- CSRIV V WG 10 Thursday, September 1, 2016 3:07:00 PM FCC CSRIC V Working Group 10 RiskAssessmentSummary Rev 1 2 1 redline draft SMMedit.docx John –   I made a minor edit in the list of working group participants and moved the co-chair names up to the top of the list.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of John Marinho Sent: Thursday, September 01, 2016 7:23 AM To: Kimmins, John F. ; McPherson, Danny ; csric5wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: September 1 Teleconference Agenda -- CSRIV V WG 10   See attached documents.   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Thursday, September 1, 2016 7:01 AM To: McPherson, Danny ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] September 1 Teleconference Agenda -- CSRIV V WG 10   WG Members, Here’s the read ahead for today, see you at 1500 ET.   *Premiere Intl. Bridge 11 - (b) (4) AGENDA 1. Review slides from John Marinho on interim report to CSRIC Council @September 14th Meeting, slides due by September 6th. – John Marinho / Chairs 2. Review current risk assessment content/current assignments/gaps/schedule  – John Marinho / Chairs 3. SME Talks a. Karsten Nohl confirmed for October 13th b. Other candidates? 4. Potential to have other briefings a. Carriers b. Vendors 5. Of Note: Admiral Simpson checkpoint brief on September 1 after teleconference – Chairs 6. AOB     John Kimmins & Danny McPherson . -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633F52F3AA0CAAEC5F82AAECFE20%40DM5PR06MB2633.namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/172bb8218fbf415a925855719a441d25%40EXCH2013.ctia.org. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: John Marinho Steven McKinnon RE: September 1 Teleconference Agenda -- CSRIV V WG 10 Thursday, September 1, 2016 3:29:05 PM Got it. Thanks.   From: Steven McKinnon [mailto:Steven.McKinnon@fcc.gov] Sent: Thursday, September 1, 2016 3:08 PM To: John Marinho Subject: RE: September 1 Teleconference Agenda -- CSRIV V WG 10   John –   I made a minor edit in the list of working group participants and moved the co-chair names up to the top of the list.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of John Marinho Sent: Thursday, September 01, 2016 7:23 AM To: Kimmins, John F. ; McPherson, Danny ; csric5wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: September 1 Teleconference Agenda -- CSRIV V WG 10   See attached documents.   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Thursday, September 1, 2016 7:01 AM To: McPherson, Danny ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] September 1 Teleconference Agenda -- CSRIV V WG 10   WG Members, Here’s the read ahead for today, see you at 1500 ET.   *Premiere Intl. Bridge 11 - (b) (4) AGENDA 1. Review slides from John Marinho on interim report to CSRIC Council @September 14th Meeting, slides due by September 6th. – John Marinho / Chairs 2. Review current risk assessment content/current assignments/gaps/schedule  – John Marinho / Chairs 3. SME Talks a. Karsten Nohl confirmed for October 13th b. Other candidates? 4. Potential to have other briefings a. Carriers b. Vendors 5. Of Note: Admiral Simpson checkpoint brief on September 1 after teleconference – Chairs 6. AOB     John Kimmins & Danny McPherson . -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633F52F3AA0CAAEC5F82AAECFE20%40DM5PR06MB2633.namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/172bb8218fbf415a925855719a441d25%40EXCH2013.ctia.org. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: John Marinho Steven McKinnon RE: September 1 Teleconference Agenda -- CSRIV V WG 10 Thursday, September 1, 2016 3:29:05 PM Got it. Thanks.   From: Steven McKinnon [mailto:Steven.McKinnon@fcc.gov] Sent: Thursday, September 1, 2016 3:08 PM To: John Marinho Subject: RE: September 1 Teleconference Agenda -- CSRIV V WG 10   John –   I made a minor edit in the list of working group participants and moved the co-chair names up to the top of the list.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of John Marinho Sent: Thursday, September 01, 2016 7:23 AM To: Kimmins, John F. ; McPherson, Danny ; csric5wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: September 1 Teleconference Agenda -- CSRIV V WG 10   See attached documents.   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Thursday, September 1, 2016 7:01 AM To: McPherson, Danny ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] September 1 Teleconference Agenda -- CSRIV V WG 10   WG Members, Here’s the read ahead for today, see you at 1500 ET.   *Premiere Intl. Bridge 11 - (b) (4) AGENDA 1. Review slides from John Marinho on interim report to CSRIC Council @September 14th Meeting, slides due by September 6th. – John Marinho / Chairs 2. Review current risk assessment content/current assignments/gaps/schedule  – John Marinho / Chairs 3. SME Talks a. Karsten Nohl confirmed for October 13th b. Other candidates? 4. Potential to have other briefings a. Carriers b. Vendors 5. Of Note: Admiral Simpson checkpoint brief on September 1 after teleconference – Chairs 6. AOB     John Kimmins & Danny McPherson . -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB2633F52F3AA0CAAEC5F82AAECFE20%40DM5PR06MB2633.namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/172bb8218fbf415a925855719a441d25%40EXCH2013.ctia.org. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Briggs, Kevin Steven McKinnon RE: Thursday, October 20 WG Call AGENDA & LOGISTICS Wednesday, October 19, 2016 4:25:49 PM Let me check …  Regards, Kevin   From: Steven McKinnon [mailto:Steven.McKinnon@fcc.gov] Sent: Wednesday, October 19, 2016 12:13 PM To: Briggs, Kevin; Blasco, Kathleen Subject: FW: Thursday, October 20 WG Call AGENDA & LOGISTICS Importance: High   Do you think Adaptive Mobile (I think that’s the vendor’s name) would be interested in presenting their findings to the group?   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Wednesday, October 19, 2016 12:06 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 20 WG Call AGENDA & LOGISTICS     Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 - (b) (4)   As for the agenda, only two items:   1. First, an update on the current Risk assessment from John Marinho 2. Second, we’re going to discuss the SME briefings to date and the dialog we’ve been having on the mailing list since the last call, with an objective of determining which/IF any of those items should/need to be added OR better reflected in the Risk Assessment.    Many thanks to those of you that have contributed to the conversation on the mailing list thus far -most of you have not!  If you have comments you’d like to share you can certainly do it on the call tomorrow, or on the mailing list at any time – ideally before the call.  In respect of everyone’s time please review the mailing list discussions to date, as well as the latest Risk Assessment document – John Marinho just shared v1.3.3 this morning.   Next week’s call we’ll have Travis Russell brief on the Positive Technologies research in the attached slides.  If you have recommendations for other SME briefings, or agenda topics please let me know.   Thanks in advance,   -danny & John K      -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/87529485-F7DE-4E9A-92ED-6CB268E557CE%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Importance: Briggs, Kevin Steven McKinnon RE: Thursday, October 20 WG Call AGENDA & LOGISTICS Wednesday, October 19, 2016 4:53:08 PM High Hi Steven … do you mean tomorrow?  Regards, Kevin   Kevin G. Briggs Continuity Assessment & Resilience (CAR) Section Chief National Cybersecurity & Communications Integration Center (NCCIC) Kevin.Briggs@hq.dhs.gov 703-235-5265 (Office) 202-281-6100 (BB)       From: Steven McKinnon [mailto:Steven.McKinnon@fcc.gov] Sent: Wednesday, October 19, 2016 12:13 PM To: Briggs, Kevin; Blasco, Kathleen Subject: FW: Thursday, October 20 WG Call AGENDA & LOGISTICS Importance: High   Do you think Adaptive Mobile (I think that’s the vendor’s name) would be interested in presenting their findings to the group?   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of McPherson, Danny Sent: Wednesday, October 19, 2016 12:06 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 20 WG Call AGENDA & LOGISTICS     Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 - (b) (4)   As for the agenda, only two items:   1. First, an update on the current Risk assessment from John Marinho 2. Second, we’re going to discuss the SME briefings to date and the dialog we’ve been having on the mailing list since the last call, with an objective of determining which/IF any of those items should/need to be added OR better reflected in the Risk Assessment.    Many thanks to those of you that have contributed to the conversation on the mailing list thus far -most of you have not!  If you have comments you’d like to share you can certainly do it on the call tomorrow, or on the mailing list at any time – ideally before the call.  In respect of everyone’s time please review the mailing list discussions to date, as well as the latest Risk Assessment document – John Marinho just shared v1.3.3 this morning.   Next week’s call we’ll have Travis Russell brief on the Positive Technologies research in the attached slides.  If you have recommendations for other SME briefings, or agenda topics please let me know.   Thanks in advance,   -danny & John K      -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/87529485-F7DE-4E9A-92ED-6CB268E557CE%40verisign.com. For more options, visit https://groups.google.com/d/optout. From: To: Subject: Date: Morin Drew Steven McKinnon RE: Thursday, October 27 WG Call AGENDA & LOGISTICS Thursday, October 27, 2016 1:13:35 PM Tx!   From: Steven McKinnon [mailto:Steven.McKinnon@fcc.gov] Sent: Thursday, October 27, 2016 1:06 PM To: Morin, Drew Subject: RE: Thursday, October 27 WG Call AGENDA & LOGISTICS   Here you go.  Nilesh sent me a copy.   Thanks, Steven   From: Morin, Drew [mailto:Drew.Morin2@T-Mobile.com] Sent: Thursday, October 27, 2016 1:05 PM To: Steven McKinnon ; Kimmins, John F. ; csric5wg10@googlegroups.com Subject: RE: Thursday, October 27 WG Call AGENDA & LOGISTICS   I don’t recall seeing it either   From: Steven McKinnon [mailto:Steven.McKinnon@fcc.gov] Sent: Thursday, October 27, 2016 12:46 PM To: Kimmins, John F. ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: RE: Thursday, October 27 WG Call AGENDA & LOGISTICS   Can someone share the Positive Technologies research slide deck that Travis will be sharing?  Or at least give me a date of when it was shared with the group?  I’m not finding it in my emails.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, October 26, 2016 3:19 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 27 WG Call AGENDA & LOGISTICS   Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 -(b) (4) Agenda:   1. Travis Russell brief on the Positive Technologies research ( slide deck previously shared) 2. Update on the current Risk assessment report from John Marinho 3. Update on Robocalling Strikeforce by Martin Dolly 4. Upcoming SME briefing – Brian Collins Adaptive Mobile 5. AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26331A3C3F196D819CEFB189CFAB0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Attachments: John Marinho Kimmins John F.; Steven McKinnon; csric5-wg10@googlegroups.com Morin Drew RE: Thursday, October 27 WG Call AGENDA & LOGISTICS Thursday, October 27, 2016 3:05:23 PM image002.png FCC CSRIC V Working Group 10 RiskAssessmentSummary Rev 1 3 3 redline TR additions input for 8c.docx Missing Input Draft Report.xlsx John and Danny,   I may be late for the call today due to a DHS meeting that I need to attend.   Nonetheless, there has been no update to the Assessment Report since the last meeting. Attached here for convenience, version 1.3.3.   I have also reflected the sections that have been “volunteered” for in the attached spreadsheet.   I am working on generating “detailed text” for Section 12 based on the Karsten and Silke presentations. Section 12 currently contains the information from Silke’s presentation that you have previously seen.   My plan is to have a draft for the next meeting of Section 12 as a starting point for the group to review, as well as any other input that we receive incorporated into the document.   Cheers, John   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Thursday, October 27, 2016 1:07 PM To: Steven McKinnon ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS   All   I have attached the Positive Technologies slide deck.   John     John Kimmins Senior Security Director & Telcordia Fellow 444 Hoes Lane Piscataway NJ 08854 office +1 732.699.4923 email jkimmins@iconectiv.com web  www.iconectiv.com       From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Steven McKinnon Sent: Thursday, October 27, 2016 12:46 PM To: Kimmins, John F. ; csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] RE: Thursday, October 27 WG Call AGENDA & LOGISTICS   Can someone share the Positive Technologies research slide deck that Travis will be sharing?  Or at least give me a date of when it was shared with the group?  I’m not finding it in my emails.   Thanks, Steven   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, October 26, 2016 3:19 PM To: csric5-wg10@googlegroups.com Cc: Morin, Drew Subject: [csric5-wg10] Thursday, October 27 WG Call AGENDA & LOGISTICS   Team, Here’s the dial-in information for the call tomorrow @1500 ET:   *Premiere Intl. Bridge 11 - (b) (4) Agenda:   1. Travis Russell brief on the Positive Technologies research ( slide deck previously shared) 2. Update on the current Risk assessment report from John Marinho 3. Update on Robocalling Strikeforce by Martin Dolly 4. Upcoming SME briefing – Brian Collins Adaptive Mobile 5. AOB   Thanks in advance,   Danny & John K    -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26331A3C3F196D819CEFB189CFAB0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB043796D4FE34B213832179CAF0AA0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB26337219C3364AEB29BBD335CFAA0%40DM5PR06MB2633 namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: John Marinho DOLLY, MARTIN C; Steven McKinnon; McPherson, Danny; Kimmins, John F. EASLEY, MARK RE: Version 1.2.3 : [csric5-wg10] Revised Draft Assessment Document Thursday, September 8, 2016 7:17:43 AM Great, thanks! John A. Marinho Technology and Cybersecurity CTIA 1400 16th St. NW, Suite 600 Washington DC 20036 Email: jmarinho@ctia.org Smartphone: 202-440-0844 Sent from my 4G LTE smartphone -------- Original message -------From: "DOLLY, MARTIN C" Date: 9/8/16 7:11 AM (GMT-05:00) To: John Marinho , Steven McKinnon , "McPherson, Danny" , "Kimmins, John F." Cc: "EASLEY, MARK" Subject: RE: Version 1.2.3 : [csric5-wg10] Revised Draft Assessment Document John, I can help with 4, 5, 6, and 7b/c. A little now and more as Strike Force winds down (I hope) Regards, Martin From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of John Marinho Sent: Wednesday, September 07, 2016 3:33 PM To: Khaled, Mohammad (Nokia - US/Irving) ; csric5-wg10@googlegroups.com; Steven McKinnon ; McPherson, Danny ; Kimmins, John F. Cc: Morin, Drew ; Blasco, Kathleen ; Briggs, Kevin ; Travis Russell Subject: Version 1.2.3 : [csric5-wg10] Revised Draft Assessment Document Importance: High All, Please see attached updates creating version 1.2.3. Both CLEAN and redline versions are provided. Also attached is the updated PowerPoint for completeness. The update to the document reflects the latest inputs from Mohammad and Steven, as well as I started to fill-in the SS7 Overview and Background Section (i.e. Section 4). Please note that two Sections have been identified as having content that is sensitive and not for disclosure. The identification was based on feedback provided to me and so you see it reflected in the document. Please advise if I missed anything. Thanks, John From: Khaled, Mohammad (Nokia - US/Irving) [mailto:mohammad khaled@nokia.com] Sent: Wednesday, September 7, 2016 11:53 AM To: Travis Russell >; John Marinho > Cc: Morin, Drew >; Steven McKinnon >; McPherson, Danny >; Blasco, Kathleen >; csric5wg10@googlegroups.com; Briggs, Kevin > Subject: RE: [csric5-wg10] Revised Draft Assessment Document Hi John M  , Travis  and Team Here is an updated redline copy with the addition of some edits/comments to Travis's last edits  in Section 9i . Regards, Mohammad From: csric5-wg10@googlegroups.com [mailto:csric5wg10@googlegroups.com] On Behalf Of Travis Russell Sent: Thursday, September 01, 2016 9:10 AM To: John Marinho > Cc: Khaled, Mohammad (Nokia - US/Irving) >; Morin, Drew >; Steven McKinnon >; McPherson, Danny >; Blasco, Kathleen >; csric5wg10@googlegroups.com; Briggs, Kevin > Subject: Re: [csric5-wg10] Revised Draft Assessment Document I have added some comments to the redline copy based on my direct involvement in the GSMA, and the associated documents mentioned in the redline copy. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/22C4ADE7-8102-41E788CC-0A17AF449269%40oracle.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5- wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/0b6b3d7476864c1d84bd4093d8b3be8c%40EXCH2013.ctia.org. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: DOLLY, MARTIN C John Marinho; Steven McKinnon; McPherson, Danny; Kimmins, John F. EASLEY, MARK RE: Version 1.2.3 : [csric5-wg10] Revised Draft Assessment Document Thursday, September 8, 2016 7:11:48 AM John,   I can help with 4, 5, 6, and 7b/c.   A little now and more as Strike Force winds down (I hope)   Regards,   Martin   From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of John Marinho Sent: Wednesday, September 07, 2016 3:33 PM To: Khaled, Mohammad (Nokia - US/Irving) ; csric5wg10@googlegroups.com; Steven McKinnon ; McPherson, Danny ; Kimmins, John F. Cc: Morin, Drew ; Blasco, Kathleen ; Briggs, Kevin ; Travis Russell Subject: Version 1.2.3 : [csric5-wg10] Revised Draft Assessment Document Importance: High All,   Please see attached updates creating version 1.2.3. Both CLEAN and redline versions are provided. Also attached is the updated PowerPoint for completeness.   The update to the document reflects the latest inputs from Mohammad and Steven, as well as I started to fill-in the SS7 Overview and Background Section (i.e. Section 4).   Please note that two Sections have been identified as having content that is sensitive and not for disclosure. The identification was based on feedback provided to me and so you see it reflected in the document.   Please advise if I missed anything.   Thanks, John   From: Khaled, Mohammad (Nokia - US/Irving) [mailto:mohammad.khaled@nokia.com] Sent: Wednesday, September 7, 2016 11:53 AM To: Travis Russell ; John Marinho Cc: Morin, Drew ; Steven McKinnon ; McPherson, Danny ; Blasco, Kathleen ; csric5-wg10@googlegroups.com; Briggs, Kevin Subject: RE: [csric5-wg10] Revised Draft Assessment Document Hi John M  , Travis  and Team   Here is an updated redline copy with the addition of some edits/comments to Travis’s last edits  in Section 9i .   Regards, Mohammad From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Travis Russell Sent: Thursday, September 01, 2016 9:10 AM To: John Marinho Cc: Khaled, Mohammad (Nokia - US/Irving) ; Morin, Drew ; Steven McKinnon ; McPherson, Danny ; Blasco, Kathleen ; csric5wg10@googlegroups.com; Briggs, Kevin Subject: Re: [csric5-wg10] Revised Draft Assessment Document I have added some comments to the redline copy based on my direct involvement in the GSMA, and the associated documents mentioned in the redline copy. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/22C4ADE7-8102-41E7-88CC-0A17AF449269%40oracle.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/0b6b3d7476864c1d84bd4093d8b3be8c%40EXCH2013.ctia.org. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Attachments: csric5-wg10@googlegroups.com on behalf of Steven McKinnon John Marinho; Khaled Mohammad (Nokia - US/Irving); csric5-wg10@googlegroups.com; McPherson Danny; Kimmins John F. Morin Drew; Blasco Kathleen; Briggs Kevin; Travis Russell RE: Version 1.2.3 : [csric5-wg10] Revised Draft Assessment Document Thursday, September 8, 2016 9:58:23 AM FCC CSRIC V Working Group 10 RiskAssessmentSummary Rev 1 2 3 redline draft SMM.docx Thanks John M.   Please see my edits and comments attached.   Steven   From: John Marinho [mailto:JMarinho@ctia.org] Sent: Wednesday, September 07, 2016 3:33 PM To: Khaled, Mohammad (Nokia - US/Irving) ; csric5-wg10@googlegroups.com; Steven McKinnon ; McPherson, Danny ; Kimmins, John F. Cc: Morin, Drew ; Blasco, Kathleen ; Briggs, Kevin ; Travis Russell Subject: Version 1.2.3 : [csric5-wg10] Revised Draft Assessment Document Importance: High All,   Please see attached updates creating version 1.2.3. Both CLEAN and redline versions are provided. Also attached is the updated PowerPoint for completeness.   The update to the document reflects the latest inputs from Mohammad and Steven, as well as I started to fill-in the SS7 Overview and Background Section (i.e. Section 4).   Please note that two Sections have been identified as having content that is sensitive and not for disclosure. The identification was based on feedback provided to me and so you see it reflected in the document.   Please advise if I missed anything.   Thanks, John   From: Khaled, Mohammad (Nokia - US/Irving) [mailto:mohammad.khaled@nokia.com] Sent: Wednesday, September 7, 2016 11:53 AM To: Travis Russell ; John Marinho Cc: Morin, Drew ; Steven McKinnon ; McPherson, Danny ; Blasco, Kathleen ; csric5-wg10@googlegroups.com; Briggs, Kevin Subject: RE: [csric5-wg10] Revised Draft Assessment Document Hi John M  , Travis  and Team   Here is an updated redline copy with the addition of some edits/comments to Travis’s last edits  in Section 9i .   Regards, Mohammad From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Travis Russell Sent: Thursday, September 01, 2016 9:10 AM To: John Marinho Cc: Khaled, Mohammad (Nokia - US/Irving) ; Morin, Drew ; Steven McKinnon ; McPherson, Danny ; Blasco, Kathleen ; csric5-wg10@googlegroups.com; Briggs, Kevin Subject: Re: [csric5-wg10] Revised Draft Assessment Document I have added some comments to the redline copy based on my direct involvement in the GSMA, and the associated documents mentioned in the redline copy. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5-wg10/22C4ADE7-810241E7-88CC-0A17AF449269%40oracle.com. For more options, visit https://groups.google.com/d/optout. -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/BY1PR09MB0437CB7A24CF361541519190F0FB0%40BY1PR09MB0437.namprd09.prod.outlook.com. For more options, visit https://groups.google.com/d/optout. From: To: Cc: Subject: Date: Steven.McKinnon@fcc.gov Kimmins, John F.; Suzon Cameron dmcpherson@verisign.com Re: WG10 Risk Assessment Reports Tuesday, December 13, 2016 6:57:35 PM Thank you Danny and John.   Sent from my Blackberry From: Kimmins, John F. Sent: Tuesday, December 13, 2016 2:40 PM To: Steven McKinnon; Suzon Cameron Cc: dmcpherson@verisign.com Subject: WG10 Risk Assessment Reports From: To: Subject: Date: Renee Roland Vernon Mosley; Steven McKinnon RE: Working Group 10/5 Thursday, September 8, 2016 12:16:10 PM Ok, great, what time is the meeting?   From: Vernon Mosley Sent: Thursday, September 08, 2016 12:15 PM To: Renee Roland ; Steven McKinnon Subject: Re: Working Group 10/5   Yes, it is broadcast on fcc.gov/live. Vern   Sent from my BlackBerry 10 smartphone on the Verizon Wireless 4G LTE network. From: Renee Roland Sent: Thursday, September 8, 2016 12:12 PM To: Steven McKinnon; Vernon Mosley Subject: RE: Working Group 10/5 Thanks.  Do you typically have a conference bridge for this meeting ?     From: Steven McKinnon Sent: Thursday, September 08, 2016 11:45 AM To: Vernon Mosley ; Renee Roland Subject: Re: Working Group 10/5   Agree with Vern.    WG10 is preparing a preview of what will be a risk assessment summary and assessment document next Wednesday at the CSRIC meeting. The final document will be due in December but next week they will give a progress report on how it is shaping up.     Sent from my Blackberry From: Vernon Mosley Sent: Thursday, September 8, 2016 11:38 AM To: Renee Roland Cc: Steven McKinnon Subject: RE: Working Group 10/5 Are you coming to the CSRIC V meeting Sept 14th?  Would be a good opportunity to catch up and discuss the various interim reports and plans for the final report.  Vern   From: Renee Roland Sent: Thursday, September 08, 2016 11:26 AM To: Vernon Mosley ; Steven McKinnon Cc: Jeffery Goldthorp ; Theodore Marcus Subject: Working Group 10/5   Steve and Vern,   Dave and Lisa asked me to reach out to you to get up to speed on WGs 10 and 5 to assist on the policy objectives formulations.  If it works for you, I can schedule a brief call for us.  In the interim, please forward any relevant overview information for background.   Thanks!   Renee   Renee L. Roland Special Counsel Public Safety and Homeland Security Bureau Federal Communications Commission 445 12th Street, SW Washington, DC 20554 (202) 418-2352 (o) (202) 369-4447 (m)   From: To: Subject: Date: Vernon Mosley Renee Roland; Steven McKinnon Re: Working Group 10/5 Thursday, September 8, 2016 12:15:04 PM Yes, it is broadcast on fcc.gov/live. Vern Sent from my BlackBerry 10 smartphone on the Verizon Wireless 4G LTE network. From: Renee Roland Sent: Thursday, September 8, 2016 12:12 PM To: Steven McKinnon; Vernon Mosley Subject: RE: Working Group 10/5 Thanks.  Do you typically have a conference bridge for this meeting ?     From: Steven McKinnon Sent: Thursday, September 08, 2016 11:45 AM To: Vernon Mosley ; Renee Roland Subject: Re: Working Group 10/5   Agree with Vern.    WG10 is preparing a preview of what will be a risk assessment summary and assessment document next Wednesday at the CSRIC meeting. The final document will be due in December but next week they will give a progress report on how it is shaping up.     Sent from my Blackberry From: Vernon Mosley Sent: Thursday, September 8, 2016 11:38 AM To: Renee Roland Cc: Steven McKinnon Subject: RE: Working Group 10/5   Are you coming to the CSRIC V meeting Sept 14th?  Would be a good opportunity to catch up and discuss the various interim reports and plans for the final report.  Vern   From: Renee Roland Sent: Thursday, September 08, 2016 11:26 AM To: Vernon Mosley ; Steven McKinnon Cc: Jeffery Goldthorp ; Theodore Marcus Subject: Working Group 10/5   Steve and Vern,   Dave and Lisa asked me to reach out to you to get up to speed on WGs 10 and 5 to assist on the policy objectives formulations.  If it works for you, I can schedule a brief call for us.  In the interim, please forward any relevant overview information for background.   Thanks!   Renee   Renee L. Roland Special Counsel Public Safety and Homeland Security Bureau Federal Communications Commission 445 12th Street, SW Washington, DC 20554 (202) 418-2352 (o) (202) 369-4447 (m)   From: To: Subject: Date: Renee Roland Steven McKinnon; Vernon Mosley RE: Working Group 10/5 Thursday, September 8, 2016 12:12:20 PM Thanks.  Do you typically have a conference bridge for this meeting ?     From: Steven McKinnon Sent: Thursday, September 08, 2016 11:45 AM To: Vernon Mosley ; Renee Roland Subject: Re: Working Group 10/5   Agree with Vern.    WG10 is preparing a preview of what will be a risk assessment summary and assessment document next Wednesday at the CSRIC meeting. The final document will be due in December but next week they will give a progress report on how it is shaping up.     Sent from my Blackberry From: Vernon Mosley Sent: Thursday, September 8, 2016 11:38 AM To: Renee Roland Cc: Steven McKinnon Subject: RE: Working Group 10/5 Are you coming to the CSRIC V meeting Sept 14th?  Would be a good opportunity to catch up and discuss the various interim reports and plans for the final report.  Vern   From: Renee Roland Sent: Thursday, September 08, 2016 11:26 AM To: Vernon Mosley ; Steven McKinnon Cc: Jeffery Goldthorp ; Theodore Marcus Subject: Working Group 10/5   Steve and Vern,   Dave and Lisa asked me to reach out to you to get up to speed on WGs 10 and 5 to assist on the policy objectives formulations.  If it works for you, I can schedule a brief call for us.  In the interim, please forward any relevant overview information for background.   Thanks!   Renee   Renee L. Roland Special Counsel Public Safety and Homeland Security Bureau Federal Communications Commission 445 12th Street, SW Washington, DC 20554 (202) 418-2352 (o) (202) 369-4447 (m)   From: To: Subject: Date: Steven.McKinnon@fcc.gov Vernon Mosley; Renee Roland Re: Working Group 10/5 Thursday, September 8, 2016 11:45:16 AM Agree with Vern.  WG10 is preparing a preview of what will be a risk assessment summary and assessment document next Wednesday at the CSRIC meeting. The final document will be due in December but next week they will give a progress report on how it is shaping up.   Sent from my Blackberry From: Vernon Mosley Sent: Thursday, September 8, 2016 11:38 AM To: Renee Roland Cc: Steven McKinnon Subject: RE: Working Group 10/5 From: To: Subject: Date: Vernon Mosley Renee Roland; Steven McKinnon Re: Working Group 10/5 Thursday, September 8, 2016 12:17:00 PM 1 to 5 Sent from my BlackBerry 10 smartphone on the Verizon Wireless 4G LTE network. From: Renee Roland Sent: Thursday, September 8, 2016 12:16 PM To: Vernon Mosley; Steven McKinnon Subject: RE: Working Group 10/5 Ok, great, what time is the meeting?   From: Vernon Mosley Sent: Thursday, September 08, 2016 12:15 PM To: Renee Roland ; Steven McKinnon Subject: Re: Working Group 10/5   Yes, it is broadcast on fcc.gov/live. Vern   Sent from my BlackBerry 10 smartphone on the Verizon Wireless 4G LTE network. From: Renee Roland Sent: Thursday, September 8, 2016 12:12 PM To: Steven McKinnon; Vernon Mosley Subject: RE: Working Group 10/5   Thanks.  Do you typically have a conference bridge for this meeting ?     From: Steven McKinnon Sent: Thursday, September 08, 2016 11:45 AM To: Vernon Mosley ; Renee Roland Subject: Re: Working Group 10/5   Agree with Vern.    WG10 is preparing a preview of what will be a risk assessment summary and assessment document next Wednesday at the CSRIC meeting. The final document will be due in December but next week they will give a progress report on how it is shaping up.     Sent from my Blackberry From: Vernon Mosley Sent: Thursday, September 8, 2016 11:38 AM To: Renee Roland Cc: Steven McKinnon Subject: RE: Working Group 10/5   Are you coming to the CSRIC V meeting Sept 14th?  Would be a good opportunity to catch up and discuss the various interim reports and plans for the final report.  Vern   From: Renee Roland Sent: Thursday, September 08, 2016 11:26 AM To: Vernon Mosley ; Steven McKinnon Cc: Jeffery Goldthorp ; Theodore Marcus Subject: Working Group 10/5   Steve and Vern,   Dave and Lisa asked me to reach out to you to get up to speed on WGs 10 and 5 to assist on the policy objectives formulations.  If it works for you, I can schedule a brief call for us.  In the interim, please forward any relevant overview information for background.   Thanks!   Renee   Renee L. Roland Special Counsel Public Safety and Homeland Security Bureau Federal Communications Commission 445 12th Street, SW Washington, DC 20554 (202) 418-2352 (o) (202) 369-4447 (m)   From: To: Subject: Date: Jeffery Goldthorp Steven McKinnon RE: Working Group Descriptions with Chairs July 29, 2016.doc Tuesday, August 30, 2016 7:12:21 AM Could you swing by my office when you get in?   Jeffery M. Goldthorp Associate Bureau Chief for Resiliency and Cybersecurity Risk Reduction Public Safety and Homeland Security Bureau Federal Communications Commission   202-418-1096 202-253-1595 (cell)   From: Steven McKinnon Sent: Tuesday, August 30, 2016 7:06 AM To: Jeffery Goldthorp ; Suzon Cameron Cc: Rochelle Cohen Subject: Re: Working Group Descriptions with Chairs July 29, 2016.doc Importance: High   I changed the name of the deliverable due in September. It reads Preliminary Risk Assessment and Summary Report.     Sent from my Blackberry From: Jeffery Goldthorp Sent: Monday, August 29, 2016 7:26 PM To: Steven McKinnon; Suzon Cameron Cc: Rochelle Cohen Subject: Re: Working Group Descriptions with Chairs July 29, 2016.doc ‎Steven What has changed here? Please email me in the am.  Thanks Jeff   Sent from my BlackBerry 10 smartphone on the Verizon Wireless 4G LTE network. From: Steven McKinnon Sent: Monday, August 29, 2016 2:44 PM To: Suzon Cameron; JoAnn Smith; PSHSBweb Cc: Jeffery Goldthorp; Rochelle Cohen Subject: RE: Working Group Descriptions with Chairs July 29, 2016.doc All –   Please use the attached version as I have made another revision to the WG10 description.    Thanks, Steven   From: Suzon Cameron Sent: Monday, August 29, 2016 12:48 PM To: JoAnn Smith ; PSHSBweb Cc: Jeffery Goldthorp ; Rochelle Cohen ; Steven McKinnon Subject: Working Group Descriptions with Chairs July 29, 2016.doc Importance: High   JoAnn, and Web Folks, Please replace the document on the CSRIC V webpage under Working Group Descriptions with the attached updated version. We need this done as quickly as possible, please. If you can do it in the next hour, please do so. It is urgent! Suzon From: To: Cc: Subject: Date: Suzon Cameron FCCWEB; Tadele Shiferaw Jeffery Goldthorp; Steven McKinnon RE: Working Group Descriptions with Chairs July 29, 2016.doc Tuesday, August 30, 2016 9:13:38 AM Thank you.   From: David Kitzmiller On Behalf Of FCCWEB Sent: Tuesday, August 30, 2016 9:13 AM To: Suzon Cameron ; FCCWEB ; Tadele Shiferaw Cc: Jeffery Goldthorp ; Steven McKinnon Subject: RE: Working Group Descriptions with Chairs July 29, 2016.doc   On the CSRIC V page at:   https://www.fcc.gov/about-fcc/advisory-committees/communications-security-reliability-andinteroperability   the “Working Group Descriptions” link now points to the new file that you provided. The new URL is:   https://transition.fcc.gov/bureaus/pshs/advisory/csric5/working-group-descriptions.doc     reload the page if you don’t see the revised URL         From: Suzon Cameron Sent: Tuesday, August 30, 2016 8:46 AM To: FCCWEB ; Tadele Shiferaw Cc: Jeffery Goldthorp ; Steven McKinnon Subject: RE: Working Group Descriptions with Chairs July 29, 2016.doc   Please use the attached document.   -Suzon 418-1916   From: David Kitzmiller On Behalf Of FCCWEB Sent: Tuesday, August 30, 2016 5:45 AM To: Tadele Shiferaw ; Suzon Cameron ; FCCWEB Cc: Jeffery Goldthorp ; Steven McKinnon Subject: RE: Working Group Descriptions with Chairs July 29, 2016.doc   We can do it, but there’s no attachment. Please send the document that you wish to use as the replacement for:   https://transition.fcc.gov/bureaus/pshs/advisory/csric5/Working_GroupCSRICV_071916.doc           From: Tadele Shiferaw Sent: Monday, August 29, 2016 5:45 PM To: Suzon Cameron ; FCCWEB Cc: Jeffery Goldthorp ; Steven McKinnon Subject: Re: Working Group Descriptions with Chairs July 29, 2016.doc   + FCC web   I Suzon, I'm out of the office, FCC web Will be able to assist you.   Kind Regards, Sent from my iPhone On Aug 30, 2016, at 12:32 AM, Suzon Cameron wrote: Tadele,   JoAnn Smith is out of the office and let us know that you are handling urgent web requests.  PSHSB needs to update a document linked to the CSRIC V webpage.  The attached document should replace the current document linked to “Working Group Description” under Organization.  Please let me know that you have received this request.  We are working under a very urgent turn around as there is a congressional inquiry and a media inquiry into these issues.  Thanks you.   Suzon 418-1916   From: Steven McKinnon Sent: Monday, August 29, 2016 2:44 PM To: Suzon Cameron ; JoAnn Smith ; PSHSBweb Cc: Jeffery Goldthorp ; Rochelle Cohen Subject: RE: Working Group Descriptions with Chairs July 29, 2016.doc   All –   Please use the attached version as I have made another revision to the WG10 description.    Thanks, Steven   From: Suzon Cameron Sent: Monday, August 29, 2016 12:48 PM To: JoAnn Smith ; PSHSBweb Cc: Jeffery Goldthorp ; Rochelle Cohen ; Steven McKinnon Subject: Working Group Descriptions with Chairs July 29, 2016.doc Importance: High   JoAnn, and Web Folks,   Please replace the document on the CSRIC V webpage under Working Group Descriptions with the attached updated version.  We need this done as quickly as possible, please.  If you can do it in the next hour, please do so.  It is urgent!   Suzon From: To: Subject: Date: Rochelle Cohen Steven McKinnon RE: Working_GroupCSRICV_082916.doc Monday, August 29, 2016 2:42:06 PM Works for me. Thanks!   From: Steven McKinnon Sent: Monday, August 29, 2016 2:40 PM To: Rochelle Cohen Subject: RE: Working_GroupCSRICV_082916.doc   Rochelle -  how does this sound instead?   Preliminary Risk Assessment and Summary Report – September 2016   Thanks, Steven   From: Rochelle Cohen Sent: Monday, August 29, 2016 12:49 PM To: Suzon Cameron ; Steven McKinnon Cc: Kim Hart Subject: Re: Working_GroupCSRICV_082916.doc   Please make sure they do not break the current link.  Thanks!!   From: Suzon Cameron Sent: Monday, August 29, 2016 12:44 PM To: Steven McKinnon Cc: Rochelle Cohen Subject: RE: Working_GroupCSRICV_082916.doc Ok I will send it to the web folks with a rush request. From: Steven McKinnon Sent: Monday, August 29, 2016 12:43 PM To: Suzon Cameron Cc: Rochelle Cohen Subject: Working_GroupCSRICV_082916.doc   Suzon –   Here is the updated description.  I only changed one word in the first deliverable for WG10.   Rochelle –   Suzon is going to help us get the updated description uploaded to the website.  It may take a little while but she is going to get our IT support to do a rush job on this.   Thanks, Steven From: To: Subject: Date: John Marinho Kimmins, John F.; csric5-wg10@googlegroups.com; McPherson, Danny; Morin, Drew; kathy.whitbeck@nsight.com; Steven McKinnon Tomorrow"s Meeting WG10 Wednesday, September 21, 2016 9:43:25 AM John K, Danny,   Unfortunately I will miss tomorrow’s meeting due to a conflict with a scheduled meeting of the CTIA Cybersecurity Working Group that I host.   I have not received any additional input to the draft Assessment Report so far.   If there are additional changes from tomorrow’s meeting please let me know and I’ll update accordingly. Thanks.   Regards, John   From: Kimmins, John F. [mailto:jkimmins@iconectiv.com] Sent: Wednesday, September 14, 2016 9:40 PM To: John Marinho ; csric5-wg10@googlegroups.com; McPherson, Danny ; Morin, Drew ; kathy.whitbeck@nsight.com; Steven McKinnon Subject: September 15 WG10 Call Agenda   WG Members, Here’s the agenda for tomorrow, see you at 1500 ET.   *Premiere Intl. Bridge 11 - (b) (4) AGENDA 1. Interim report to CSRIC Council @September 14th Meeting – John Kimmins/Steven McKinnon 2. Review current risk assessment content/current assignments/gaps/schedule  – John Marinho / Chairs 3. SME Talks a. James Moran, GSMA - October 4. Vendor Market Analysis 5. AOB     John Kimmins & Danny McPherson   From: To: Cc: Subject: Date: Attachments: John Marinho Kimmins John F.; csric5-wg10@googlegroups.com; McPherson Danny Steven McKinnon Version 1.3.1 Wednesday, October 12, 2016 3:18:40 PM FCC CSRIC V Working Group 10 RiskAssessmentSummary Rev 1 3 1 redline TR additions draft.docx John, Danny,   Attached for review is an updated version 1.3.1 of the Assessment Report draft (redline).   The revision includes edits for:   1. Updated WG Membership list, 2. Inclusion of submission from Travis Russell, and 3. Update to Section 7 regarding the discussion on DIAMETER from the last meeting.   Please advise if I missed anything.   Thanks, John     From: csric5-wg10@googlegroups.com [mailto:csric5-wg10@googlegroups.com] On Behalf Of Kimmins, John F. Sent: Wednesday, October 5, 2016 4:02 PM To: csric5-wg10@googlegroups.com Cc: Steven McKinnon ; McPherson, Danny ; Morin, Drew Subject: [csric5-wg10] October 6 WG10 Call Agenda         WG Members, Here’s the agenda for tomorrow, see you at 1500 ET.   *Premiere Intl. Bridge 11 - (b) (4) AGENDA 1. Review current risk assessment report  – John Marinho / Chairs a. Review new changes and input – sections 7 & 8 b. Vendor Claims – how do we handle them in report? c. Writing Assignments 2. Update on GSMA discussions – Chairs/FCC 3. Discuss need for a face-to-face meeting - All 4. AOB   We still need more contributions across all sections of the Risk Assessment report.   John Kimmins & Danny McPherson     -You received this message because you are subscribed to the Google Groups "csric5-wg10" group. To unsubscribe from this group and stop receiving emails from it, send an email to csric5wg10+unsubscribe@googlegroups.com. To post to this group, send email to csric5-wg10@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/csric5wg10/DM5PR06MB263318C85EEACB363E7B74AECFC40%40DM5PR06MB2633.namprd06.prod.outlook.com. For more options, visit https://groups.google.com/d/optout.