Exploring the human dimension of TETRA

In order to secure communication, in the year 55 BC, Julius Caesar developed the Caesar cipher to ensure his generals on the battle field received critical information in the most secure manner possible. Today, the protection of critical information and communication is just as vital. Police officers, fire marshals and emergency medical units require critical information to make decisions that could mean the difference between life and death. Just as in the Caesar era, the information is intended for a particular recipient and can lead to devastating consequences if intercepted or received in a malformed state. Security of these communications should be of utmost importance. One of the threats to security is Social Engineering, which is commonly deployed in computer networks. However, Social Engineering need not be limited to computer networks. Terrestrial Trunked Radio (TETRA) is a standard intended for secure professional digital mobile radio communication, designed for use by government agencies, emergency services, transportation services and various other users in need of secure communication. TETRA is seen as a very technically secure standard, making use of authentication keys and air interface encryption amongst other techniques. Even though TETRA is technically secure, are the TETRA users safe from Social Engineering? This paper will investigate the potential of Social Engineering on a TETRA system. Further, the various vulnerabilities and possible escalation scenarios that could occur if TETRA users are not made aware of Social Engineering will be explored.