The LIAISON project targets the development and implementation of advanced security testing methodologies and adaptive security controls for software-defined telecommunications networks, with a focus on 5G core functions, standardized SCAS testing, protocol fuzzing, AI/ML integration, and application to edge computing and IoT infrastructures.
LIASON is part of Spoke 8 – Intelligent and Autonomous Systems
The main LIAISON project accomplishments so far (fall 2023) do include:
- The initial development of a software framework, called ScasDK, devised to perform standard-based 3GPOP security Assurance (SCAS) tests over 5G virtualized core networks.
- The execution of seven SCAS tests on three distinct open-source 5G core networks to assess the effectiveness of ScasDK and identify security vulnerabilities, leading to the recognition of the need for improved security in open-source 5G development.
- The development of a "5G Cell Reconnaissance Tool" (5Gmap) for in-depth analysis of 5G network operator configurations, including the use of Software Defined Radio (SDR) platforms and commercial SIM cards to assess the correctness of algorithms and protocols, and to identify potential vulnerabilities in 5G network security configurations by analyzing information exchanged between the network and the device.
- Development of a monitoring tool customized for 5G network cores. The tool extends the open source Arkime platform with a number of customizations specific for 5G networks, including the development of a backend analytic module, parser tools dedicated to the analysis of 5G-specific protocols, improvements in packet capture, and improvements in usability via a brand new graphical user interface.
- Development of SDN components to facilitate secure and efficient quantum key distribution between network sites, enabling multiple clients and servers to acquire distinct key substreams from quantum-distributed keystreams.
- Design of solutions for verifying network policies’ compliance of encrypted traffic flows.
The three software tools being currently developed may have a significant impact and become of interest for telcos and other stakeholders already in medium terms. More specifically:
- ScasDK is devised to perform standard-based 3GPOP security Assurance (SCAS) tests over 5G virtualized core networks, and as such not only can be of practical interest for telcos but also for evaluation and certification agencies;
- 5Gmap permits an in-depth analysis of 5G network operator configurations, with special emphasis on the verification of which confidentiality and integrity mechanisms are currently deployed in each tested cell.
- The monitoring tool customized for 5G network cores can be of strong interest for telcos And of course all the project activities have scientific interest.
- Publications:
- I. Palamà, A. Paci, M. Ferri, L. Valeriani and G. Bianchi, "RAINSTORM: Reconnaissance SDR Platform," 2023 26th Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN), Paris, France, March 2023.
- F. Mancini, L. Tamiano and G. Bianchi, "5GShell: a plug-and-play framework for automating the deployment of 5G cellular networks," 2023 26th Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN), Paris, France, March 2023.
- Francesco Mancini and Giuseppe Bianchi. 2023. ScasDK - A Development Kit for Security Assurance test in Multi-Network-Function 5G. In Proceedings of the 18th International Conference on Availability, Reliability and Security (ARES '23). Association for Computing Machinery, New York, NY, USA.
- Talks:
- G. Bianchi, 5G implementation: Risks & mitigation strategies, March 29, 2023, talk in the cycle of seminars on cybersecurity in Italy organized by the MIMIT/INSTI (formerly Ministry of Telecommunication)
- G. Bianchi, F. Mancini, May 2023, presentation of ScasDK ideas and initial development at ACN (National Cybersecurity Agency)
Project PI: Giuseppe Bianchi
Collaboration proposals
The LIAISON project is currently collaborating with the 5Gsec project in the EP 7 SERICS (EP specifically dedicated to security). The ScasDK platform is the result of a co-development with such project.
For any proposal of collaboration within the project please contact the project PI.