Critical Apps will require critical...

16
CRITICAL APPS WILL REQUIRE CRITICAL TESTING INTEROPERABILITY, QUALITY OF SERVICE AND SECURITY CERTIFICATION FOR APPS IN A CRITICAL BROADBAND WORLD Critical Communications World 2016 31 May – 2 June The Rai, Amsterdam Stream: DATA APPS & CONTROL ROOMS Date: Wednesday 1 st June 2016 MEET AT BOOTH #D27

Transcript of Critical Apps will require critical...

Page 1: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

CRITICAL APPS WILL REQUIRE CRITICAL TESTING INTEROPERABILITY, QUALITY OF SERVICE AND SECURITY CERTIFICATION FOR APPS IN A CRITICAL BROADBAND WORLD

Critical Communications World 201631 May – 2 June The Rai, Amsterdam

Stream: DATA APPS & CONTROL ROOMSDate: Wednesday 1st June 2016

MEET AT BOOTH #D27

Page 2: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 2

What we do

ABOUT US

How we work

P3 is an international consulting company and provides innovative technical services

P3 advises on strategy, organization, processes and technologies and develops lasting competencies

P3 manages complex projects from project support up to takeover of product stewardship

P3 offers a wide range of engineering services

We help to make the right decisions faster

We are familiar with classified information

We help to face today’s challenges of telecommunications evolution

We actively work in standardization organizations

we tune your networkconsulting ▪ engineering ▪ testing

Page 3: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

P3 at CCW 2016 3

P3 group

P3 FACTS AND FIGURES

P3 communications

Over two decades P3 has grown worldwide to become a well established market player

75% OF OUR PEOPLEare engineers

30 SUBSIDIARIES in the whole P3 group

36 LOCATIONS in 12 countries

3000 EMPLOYEES from 45 nations

REVENUE 300 m euros in 2015

SUBSIDIARIES in USA, Australia, India & Serbia

15 LOCATIONS worldwide

700 EMPLOYEES all over the world

REVENUE 75 m euros in 2015

06/01/2016

Page 4: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 4

Our experience is based on over 150,000man-days in critical communications

P3 IN THE CRITICAL COMMUNICATIONS SECTOR

We offer consultancy services in this sectorfor over 12 years with growing revenue

Continuous growth in a challenging business environment

2004 2016

82020

100+

2004 2016 2020

14+ Mio

1 Mio

our mission is criticalconsulting ▪ engineering ▪ testing

Page 5: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

P3 at CCW 2016 5

CRITICAL COMMUNICATION – A DEFINITION

Critical communications encompass unique properties compared to non-critical

Increased Quality of services

Enhanced resilience

06/01/2016

High-grade encryption

Proven interoperability

TETRA

Page 6: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 6

The Switching and Management Infrastructure (SwMI) is not part of the standard

TETRA STANDARD INTERFACES

The TETRA standard defines 4 interfaces: V+D AI, DM AI, PEI, ISI

Two TETRA networks communicate over the Inter-System Interface (ISI)

Data terminals can access data services offered by a TETRA network via the Peripheral Equipment Interface (PEI)

Terminals communicate with the infrastructure over the Voice plus Data Air Interface (V+D AI)

Without a connection to the infrastructure, terminals can communicate over the Direct Mode Air Interface (DM AI)

V+D AI PEI

DM AI

Foreign SwMI

ISI

Home SwMI with connected Line Station

Page 7: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 7

Today, the TETRA Association tests technical and syntactical interoperability

INTEROPERABILITY

There is no single definition of interoperability. Even at ETSI the term has different meanings in different contexts. Interoperability is often classified into four categories

Conformance: Components of a system are compliant with a given standard

(unit tests; usually tests of OSI layers 1 to 3)

Technical Interoperability: Components of a system produced by different manufacturers are able to exchange messages

Syntactical Interoperability: Components of a system produced by different manufacturers use same data formats when exchanging messages

Semantical Interoperability: Humans interpret the meaning of exchanged information in the same way at the man-machine-interfaces of a system

Organisational Interoperability: Organisations are able to exchange meaningful information across infrastructures, geographical regions, language and cultural borders

Conformance

Technical Interoperability

Syntactical Interoperability

Semantical Interoperability

Organisational Interoperability

Page 8: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 8

STATUS QUO AND FUTURE LANDSCAPE

Critical communications and critical apps emerge from different origins to an overall service platform

Consumer smartphones

PMR terminals

The future: critical apps will form the basis for any kind of service

Non-critical apps parallel

to critical apps

Control rooms

Interconnected networks & terminals

Page 9: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

P3 at CCW 2016 9

CRITICAL APPS – A DEFINITION

Critical apps add further properties on top of critical communications

App certification

Incident and mission traceability

Advanced authentication

Protection against reverse engineering

Traffic shapingInteroperability to back-end and other components

App Stores and Deployment management

Users’ educationand training

Back-end security

06/01/2016

Quicker bug fixing cycles

Apps audit trails

Different levels of information classification

High-grade encryption

Enhanced resilience

Proven interoperability

Increased Quality of services

TETRA-LTE network interconnection security

our missionis critical

Page 10: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 10

Today‘s focus of IOP and security testing

INTEROPERABILITY AND SECURITY – CHANGES

In future, testing needs extension to cover

In the future interoperability and IT-security has to be tested among many more interfaces

Interface between terminal …

… and terminal

… and peripheral equipment

… and infrastructure

… and control room

Terminal’s internal Interfaces

Different components within terminal and terminal’s operating system

Interface between App

… and operating system

… and back-end infrastructure

… and app’s components

… and other parties’ app

Page 11: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 11

QUALITY OF SERVICE – CHANGES

Today In the future

In the future Quality of Service (QoS) will need to handle much more resource contention

Air interface & Control room interface

Call performance (group, individual, …)

Speech -delay, -quality and -intelligibility

Short Data Service performance

QoS across various levels of the OSI model

Traffic shaping and classification

Overflow detection

Quality of encryption (confidentiality)

Degree of trust (multi-level authentication)

Page 12: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 12

Mobile equipment level

NON-CRITICAL TERMINALS AND APPS – STATUS-QUO

Operating system & application level

Non-critical terminals and apps already undergo a decent amount of testing

Global Certification Forum (GCF)

PCS Type Certification Review Board (PTCRB)

Pre- and post-launch field testing

Roaming tests

Power consumption testing

Chipset testing

Android Compatibility Test Suite (CTS)

Google Bouncer (Android Market)

TestFlight Beta Testing and iTunes Connect (Apple)

Various anti-virus appliances

End-to-end Quality of Service (E2E QoS) testing forstandardised and OTT services

Page 13: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 13

Reliability

CRITICAL APPS – TESTING METHODOLOGIES

Security

Efficiency

Maintainability

Critical apps will require extensive testing in several fields

Penetration testing / fuzzing

Static and dynamic code analysis

Model checking

Complexity of algorithms

Component or pattern re-use ratio

Error & Exception handling

Load tests

Memory, network and disk space management

Data access performance and data management

Appropriate interactions with expensive and / or remote resources

Security audits and reviews

Code reviews

Formal security proofs

Obfuscation

Kernel hardening

Hardware-based cryptography

Requirements engineering

Tools

Formal languages

Test-driven development

Behavior-driven development

Page 14: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 14

CRITICAL APPS – FUTURE CHALLENGES

Future challenges

Critical apps will pose new challenges for the near future

Streamline vendors’ and users’ requirements

Unify advanced development methodologies and base technologies into a robust development platform

Develop standards for interoperability and security testing as well as certification among an increasing amount of components

Foster automation of interoperability testing

Cope with many more parties and entities in the field of IT-security and raise IT-security awareness among users, operators and suppliers

Secure the transition of Mission Critical systems from TETRA to LTE

Put appropriate security policies in place to ensure a robust solution, specifically for the interconnection

Page 15: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

06/01/2016 P3 at CCW 2016 15

P3 CRITICAL COFFEE

Meet with us at Critical Communications World 2016 …

… and enjoy some P3 critical coffee

MEET AT BOOTH #D27

Status112

P3 criticalcoffee request

Page 16: Critical Apps will require critical testings3.amazonaws.com/JuJaMa.UserContent/1fa7cdee-6c45-4ec7-a636 … · 2004 2016 2020 14+ Mio 1 Mio our mission is critical consulting engineering

Germany - Berlin

P3 communications GmbHBerliner Str. 5310713 BerlinGermany

Web

www.p3-group.com

Disclaimer

This document and all information contained herein is the sole property of P3. No intellectual property rights are granted by the delivery of this document or the disclosure of its content. This document shall not be reproduced or disclosed to a third party without the express written consent of P3. This document and its content shall not be used for any purpose other than that for which it is supplied.

P3 at CCW 2016 16

YOUR CONTACT

P3 Critical Communications Business Unit

+49 151 571 33 321

[email protected]

Holger Zwingmann

Business Unit Director

06/01/2016