RESPONSE 5G · Resilient and Secure Multi-controller Communication Platform for 5G Networks

Resilient and Secure Multi-controller Communication Platform for 5G Networks

In modern digital societies, mobile networks provide connectivity that is crucial for the operation of all other critical infrastructures such as energy, transport, etc. Thus, a disruption in the telecommunication infrastructure will lead to severe social and economic consequences. These disruptions often have unpredictable causes such as cyber-attacks, natural catastrophes, technical and human errors. Thus, there is an urgent need to strengthen mobile networks against both cyber and physical threats. Responding to these threats has been identified as a priority by the EU. Future 5th-Generation (5G) mobile networks will be designed using Software Defined Networking (SDN) and network virtualization principles to transform rigid and disparate legacy mobile networks into scalable and dynamic ecosystems. In large-scale SDN networks such as mobile networks, multiple SDN controllers are used to controlling different network segments. Inter-Controller Communication (ICC) between these multiple SDN controllers is necessary to share control information and to perform important network management functions. If ICC is compromised, then the whole system will be compromised regardless of what happens in the rest of the network. Inevitably, 5G ICC is also vulnerable to a wide range of cyber and physical threats. Since the existing SDN security systems cannot provide a sufficient level of security for 5G ICC against both cyber and physical threats, the RESPONSE-5G project focused on the implementation and validation of a robust and secure Multi-Controller Communication Platform for 5G Networks which includes prevention and mitigation against both cyber and physical attacks. The project investigated the State-of-the-Art (SotA) of secure Inter-Controller Communication, to identify the strengths, weaknesses, and possible attacks. Moreover, it has analyzed the correlation between the gathered security requirements of different 5G use cases and defines the security requirement for a practical 5G communication Channel. Then, the project has focused on gathering information on existing security solutions and their applicability to east/west-bound communication. Also, the project has focused on how SDN and NFV can be used to design new security mechanisms and protocols. Thus, RESPONSE-5G had far-reaching impacts in the domains of 5G security. Through this fellowship, the fellow has obtained advanced research skills and developed abilities in technology transfer and industry engagement, in order to fully exploit these impacts.

Data: CORDIS, © European Union