arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2410.09641cs.CRcs.NIcs.SYeess.SY
收藏

Soft Tester UE:一种面向 Open RAN 安全测试的新方法

Soft Tester UE: A Novel Approach for Open RAN Security Testing

Joshua Moore, Aly Sabri Abdalla, Charles Ueltschey, Vuk Marojevic

AI总结:

本文提出了一种软件定义的测试设备Soft Tester UE(soft T-UE),通过Uu空中接口对5G和O-RAN部署进行自动化安全测试,提供免费开源且可扩展的解决方案,以应对传统硬件测试的局限性并增强网络防御能力。

摘要:

随着5G和开放式无线接入网络(O-RAN)的兴起,对专用于安全测试的可定制实验平台的需求日益增长,因为现有测试平台并未优先考虑这一领域。传统的依赖硬件的测试方法给较小的公司和研究机构带来了挑战。不断扩大的无线威胁态势凸显了主动安全测试的迫切需求,因为5G和O-RAN部署是网络犯罪分子的诱人目标。为了应对这些挑战,本文介绍了Soft Tester UE(soft T-UE),这是一种软件定义的测试设备,旨在通过用户设备(UE)与网络之间的Uu空中接口评估5G和O-RAN部署的安全性。其目标是提供一种免费、开源且可扩展的测试仪器,以满足标准化和可定制的自动化安全测试的需求。通过超越传统的安全指标,soft T-UE促进了新安全措施的开发,并增强了预测和缓解潜在安全漏洞的能力。该工具的自动化测试能力通过一个场景得到了演示,在该场景中,受测的无线接入网络(RAN)在与UE发起连接时接收到模糊数据,并对其进行了评估。

英文摘要:

With the rise of 5G and open radio access networks (O-RAN), there is a growing demand for customizable experimental platforms dedicated to security testing, as existing testbeds do not prioritize this area. Traditional, hardware-dependent testing methods pose challenges for smaller companies and research institutions. The growing wireless threat landscape highlights the critical need for proactive security testing, as 5G and O-RAN deployments are appealing targets for cybercriminals. To address these challenges, this article introduces the Soft Tester UE (soft T-UE), a software-defined test equipment designed to evaluate the security of 5G and O-RAN deployments via the Uu air interface between the user equipment (UE) and the network. The outcome is to deliver a free, open-source, and expandable test instrument to address the need for both standardized and customizable automated security testing. By extending beyond traditional security metrics, the soft T-UE promotes the development of new security measures and enhances the capability to anticipate and mitigate potential security breaches. The tool's automated testing capabilities are demonstrated through a scenario where the Radio Access Network (RAN) under test is evaluated when it receives fuzzed data when initiating a connection with an UE.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑