Security and Threat Mitigation in 5G Core and RAN Networks

The next generation of mobile communication technology, known as 5th Generation (5G), is being developed as a game-changing technology for wireless communication, offering extreme mobile broadband, ultra-reliable low-latency communication, and massive machine-type communication. Unlike what came before, 5G is distinguished not just by a speed and capacity upgrade, but by transitional architectural changes to software-defined networking (SDN), network function virtualization (NFV), and service-based architecture (SBA) in the core, and a much more intelligent and embedded radio access network (RAN). While these technologies open up a spectrum of applications in sectors such as healthcare, automotive, and industrial automation, they also create a vast array of security threats and vulnerabilities that need to be urgently addressed. 5G’s core and RAN architectures are far more dynamic and virtualized than previous generations, which significantly increases the attack surface for bad actors. Key elements, such as AMF, SMF, and NEF, provide programmable interfaces that can be potentially exploited, if not adequately secured, via signaling storms, injection attacks, and lateral movement-based attacks by attackers. Likewise, the disaggregated RAN, comprising CU, DU, and RU, for instance, can also be exposed to rogue base station attacks, man-in-the-middle attacks, and synchronization-based DoS attacks. Additionally, network slicing, a core aspect of 5G, can result in inter-slice leakage or isolation violation if appropriate multi-tenancy security policies are not enforced.