Abstract:The fifth generation (5G) of cellular networks starts a paradigm shift from the traditional monolithic system design to a Service Based Architecture, that fits modern performance requirements and scales efficiently to new services. This paradigm will be the foundation of future cellular core networks beyond 5G. The new architecture splits network functionalities into smaller logical entities that can be disaggregated logically, physically, and geographically. This affords interoperability between the mobile network operators and commercial software and hardware vendors or cloud providers. By making use of commodity services and products, this system construct inherits the vulnerabilities in those underlying technologies, thereby increasing its attack surface and requiring a rigorous security analysis. In this work, we review the security implications introduced in B5G networks, and the security mechanisms that are supported by the 5G standard. We emphasize on the support of Zero Trust Architecture in 5G and its relevance in decentralized deployments. We revisit the definition of trust in modern enterprise network operations and identify important Zero Trust properties that are weakened by the nature of cloud deployments. To that end, we propose a vertical extension of Zero Trust, namely, Zero Trust Execution, to model untrusted execution environments, and we provide an analysis on how to establish trust in Beyond-5G network architectures using Trusted Execution Environments. Our analysis shows how our model architecture handles the increased attack surface and reinforces the Zero Trust Architecture principles in the 5G Core, without any changes to the 5G standard. Finally, we provide experimental results over a 5G testbed using Open5GS and UERANSIM that demonstrate minimal performance overhead, and a monetary cost evaluation.

5GC-SDP: Security Enhancement of 5G Core Networks with Zero Trust

Towards Zero-Trust 6GC: A Software Defined Perimeter Approach with Dynamic Moving Target Defense Mechanism

Toward Zero-Trust 6GC: A Software Defined Perimeter Approach with Dynamic Moving Target Defense Mechanism

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Combination Attacks and Defenses on SDN Topology Discovery.

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

Zero Trust Architecture for 6G Security

Toward Software Defined Dynamic Defense as a Service for 5G-Enabled Vehicular Networks

Decision-Dominant Strategic Defense Against Lateral Movement for 5G Zero-Trust Multi-Domain Networks

SCC5G: A PQC-based Architecture for Highly Secure Critical Communication over Cellular Network in Zero-Trust Environment

A Security Awareness and Protection System for 5G Smart Healthcare Based on Zero-Trust Architecture

An intelligent zero trust secure framework for software defined networking

Automated Attack and Defense Framework for 5G Security on Physical and Logical Layers

Five-Layers SDP-Based Hierarchical Security Paradigm for Multi-access Edge Computing

Software-Defined Mobile Networks Security

Establishing Trust in the Beyond-5G Core Network using Trusted Execution Environments

Software Enabled Security Architecture and Mechanisms for Securing 5G Network Services

Zero Trust-Based Mobile Network Security Architecture

A Zero-Trust Authentication Scheme With Access Control for 6G-Enabled IoT Environments

PROV5GC: Hardening 5G Core Network Security with Attack Detection and Attribution Based on Provenance Graphs

Secure and Resilient 6 G RAN Networks: A Decentralized Approach with Zero Trust Architecture