Liability-Aware Security Management for 5G

Gaber, Chrystel; Vílchez, José Manuel Sánchez; Gûr, Gûrkan; Chopin, Morgan; Perrot, Nancy; Grimault, Jean-Luc; Wary, Jean-Philippe

doi:10.1109/5gwf49715.2020.9221407

Cited by 14 publications

(25 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It will develop an integrated security management architecture using relevant frameworks, ZSM paradigm, Trusted Execution Environment (TEE), and address the key security challenges of vertical applications such as connected mobility, smart energy and aerial networks. Moreover, it will integrate trustworthiness and liability into the developed security approach for a holistic architecture [171].…”

Section: B Key Projectsmentioning

confidence: 99%

The Roadmap to 6G Security and Privacy

Porambage

Gûr

Osorio

et al. 2021

IEEE Open J. Commun. Soc.

Self Cite

247

103

View full text Add to dashboard Cite

Although the fifth generation (5G) wireless networks are yet to be fully investigated, the visionaries of the 6th generation (6G) echo systems have already come into the discussion. Therefore, in order to consolidate and solidify the security and privacy in 6G networks, we survey how security may impact the envisioned 6G wireless systems, possible challenges with different 6G technologies, and the potential solutions. We provide our vision on 6G security and security key performance indicators (KPIs) with the tentative threat landscape based on the foreseen 6G network architecture. Moreover, we discuss the security and privacy challenges that may encounter with the available 6G requirements and potential 6G applications. We also give the reader some insights into the standardization efforts and research-level projects relevant to 6G security. In particular, we discuss the security considerations with 6G enabling technologies such as distributed ledger technology (DLT), physical layer security, distributed AI/ML, visible light communication (VLC), THz, and quantum computing. All in all, this work intends to provide enlightening guidance for the subsequent research of 6G security and privacy at this initial phase of vision towards reality.

show abstract

Section: B Key Projectsmentioning

confidence: 99%

The Roadmap to 6G Security and Privacy

Porambage

Gûr

Osorio

et al. 2021

IEEE Open J. Commun. Soc.

Self Cite

247

103

View full text Add to dashboard Cite

show abstract

“…The manifest uses MUD for the control of the components. These components can be enhanced to take proper responsibilities of liability and security management systems [156].…”

Section: F Mud In Mobile and 5g Applicationsmentioning

confidence: 99%

Role of Device Identification and Manufacturer Usage Description in IoT Security: A Survey

et al. 2021

View full text Add to dashboard Cite

This paper presents an overview of device identification techniques and the Manufacturer Usage Description (MUD) standard used for the Internet of things to reduce the IoT attack surface. The ongoing diversity and the sheer increase in the number of connected IoT devices have crumpled security efforts. There is a need to reconsider and redesign the underlying concept of developing security systems to resolve IoT security challenges. In this backdrop, device profiling and identification have emerged as an exciting technique that helps to reduce IoT device attack surface. One of the known approaches for device identification is to fingerprint a device. There are many ways to fingerprint the device, mostly using device network flows or device local attributes. The device identification ensures the authenticity of the device attached to the network, like user authentication. Since IoT devices mostly work using machine-to-machine (M2M) communication, this requires identifying each device properly. But there is no unified approach for device identification for the ever-growing world of IoT devices and applications. One of the major steps forward in this direction is the development of the Manufacturer Usage Description (MUD) standard that defines the role of a device within the network. It limits the device to execute the primary task only, which will help to reduce the attack surface. Since the inception of MUD, many security frameworks use this standard for IoT security. However, there is a need to scrutinize the security frameworks based on the MUD, to find out the claimed effectiveness of the standard in IoT security. This paper initially identifies and classifies the potential vulnerabilities in IoT devices. Then, the study provides an overview of the research that focuses on device identification techniques and analyzes their role in IoT security. Finally, the research presents an overview of MUD technology, its implementation scenarios, the limitation of the latest MUD standard, and its applications in the industry. The prime aim of this work is to examine the MUD benefits in IoT security along with the weaknesses and challenges while implementing this standard along with future directions. INDEX TERMSManufacturer usage description (MUD), Internet of Things (IoT), device identification (DI), software defined network (SDN), machine learning (ML), deep learning (DL). NOMAN MAZHAR received the B.E. degree in software engineering and the M.S. degree in information technology from the

show abstract

“…Liabilities and responses between cooperating actors may be unclear. [76] These factors may lead to information leakage or open up side-channels to systems of federating party.…”

Section: Threat Scenarios In the Application Domainmentioning

confidence: 99%

Securing Public Safety Communications on Commercial and Tactical 5G Networks: A Survey and Future Research Directions

Suomalainen

Julku

Vehkaperä

et al. 2021

IEEE Open J. Commun. Soc.

View full text Add to dashboard Cite

The forthcoming communication networks for public safety authorities rely on the fifth generation (5G) of mobile networking technologies. Police officers, paramedics, border guards, as well as fire and rescue personnel, will connect through commercial operator's access network and rapidly deployable tactical bubbles. This transition from closed and dedicated infrastructure to hybrid architecture will expand the threat surface and expose mission-critical applications and sensitive information to cyber and physical adversaries. We explore and survey security architecture and enablers for prioritized public safety communication in 5G networks. We identify security threat scenarios and analyze enabling vulnerabilities, threat actors, attacks vectors, as well as risk levels. Security enablers are surveyed for tactical access and core networks, commercial infrastructure, and mission-critical applications, starting from push-to-talk and group video communication and leading to situational-awareness and remote-controlled systems. Two solutions are trialed and described in more detail: remote attestation enhanced access control for constrained devices, and securing of satellite backhauls. We also discuss future research directions highlighting the need for enablers to automate security of rapid deployments, for military-grade cost-effective customizations of commercial network services to ensure robustness, and for hardening of various types of public safety equipment.

show abstract

Liability-Aware Security Management for 5G

Cited by 14 publications

References 25 publications

The Roadmap to 6G Security and Privacy

The Roadmap to 6G Security and Privacy

Role of Device Identification and Manufacturer Usage Description in IoT Security: A Survey

Securing Public Safety Communications on Commercial and Tactical 5G Networks: A Survey and Future Research Directions

Contact Info

Product

Resources

About