Gigabit Passive Optical Network fraud detection via realtime optical line terminal events processing

Abstract

Gigabit Passive Optical Networks (GPON) enables service providers to deliver high-speed broadband services to customers over fiber optic cables. GPON networks rely on Optical Line Terminals (OLT) to interface between the core networks and handle configuration of Optical Network Terminals (ONT) or Optical Network Units (ONU) which are situated at the customer premises. Malicious insiders at the Internet Service Provider (ISP) with access to network elements such as OLTs could abuse their access rights to perpetuate fraudulent activities. GPON fraud detection is the process of identifying and analyzing such attacks by analyzing the OLT events and alerting the relevant security incident response teams. This dissertation explores existing GPON security solutions and mechanisms. In addition, the dissertation implements an efficient mechanism for detection, analysis, visualization and alerting on suspected GPON fraudulent activities using open-source tools. The key methodology adopted by this dissertation is experimental prototyping in order to test the functionality of the mechanism and act as a proof of concept. The main output of this dissertation is a prototype that can be deployed on an enterprise fixed network served by an ISP. The developed solution can detect and alert on GPON fraudulent activities in real time hence reducing loss of revenue and ensuring a better and consistent quality of service to customers. Keywords: GPON, OLT, ONU, Wazuh, Fraud Detection, Fiber Optic, Intrusion Detection, Network Security.