Design of a Security and Trust Framework for 5G Multi-domain Scenarios

Abstract

With the expansion of 5G networks, new business models are arising where multi-tenancy and active infrastructure sharing will be key enablers for them. With these new opportunities, new security risks are appearing in the form of a complex and evolving threat landscape for 5G networks, being one of the main challenges for the 5G mass rollout. In 5G-enabled scenarios, adversaries can exploit vulnerabilities associated with resource sharing to perform lateral movements targeting other tenant resources, as well as to disturb the 5G services offered or even the infrastructure resources. Moreover, existing security and trust models are not adequate to react to the dynamicity of the 5G infrastructure threats nor to the multi-tenancy security risks. Hence, we propose in this work a new security and trust framework for 5G multi-domain scenarios. To motivate its application, we detail a threat model covering multi-tenant scenarios in an underlying 5G network infrastructure. We also propose different ways to mitigate these threats by increasing the security and trust levels using network security monitoring, threat investigation, and end-to-end trust establishments. The framework is applied in a realistic use case of the H2020 5GZORRO project, which envisions a multi-tenant environment where domain owners share resources at will. The proposed framework forms a secure environment with zero-touch automation capabilities, minimizing human intervention.

SLA-Driven Trust and Reputation Management Framework for 5G Distributed Service Marketplaces

“…Thereby, the lower credibility distance after evaluating the set of stakeholders, the most credible the opinion. It should be pointed out that this mechanism supports the idea of a non-transitive trust model [27], which entails greater disbelief when two stakeholders have not previously interacted with each other. Therefore, it is necessary to identify a set of common stakeholders to find out the belief [28] of such a new stakeholder.…”

“…where u is the provider for whom wants to determine the trust score T (u) ∈ [0, 1] on the i-th interaction; α and β are the weights of each dimension, satisfying that α + β = 1; and I(u) is the maximum number of interactions. Due to the fact that the authors of this research work at hand have thoroughly described how all dimensions have been formulated in [23] and [26], we honestly believe such equations should not be reintroduced again as the principal aim is to spotlight a new SLA-driven reward and punishment mechanism. Nonetheless, a high level description of the four dimension objectives is going to be reported so as to comprehend how our adapted PeerTrust model works.…”

Security Threats, Requirements and Recommendations on Creating 5G Network Slicing System: A Survey

“…5G network slicing enables multiple tenants to be able to share the same physical resources. Valero et al [51] state that multi-tenant scenarios should focus attention on security and risk management in multi-slice domains. 3GPP recommends network slice performance and fault monitoring in multi-tenant environments [52].…”

Theory and Application of Zero Trust Security: A Brief Survey

“…How zero trust can be deployed in the IoT environment under 5G is also a current research priority. Valero et al [51] proposed a new security and trust framework for 5G multidomain scenarios and validated zero trust principles in distributed multistakeholder environments. The security and trust levels of multi-stakeholder 5G networks are improved through trust and intra-domain and inter-domain modules.…”