Implementing a Security Policy Management for 5G Customer Edge Nodes

Hammad Kabir, Muhammad Hassaan Bin Mohsin, Raimo Kantola

Tutkimustuotos: Artikkeli kirjassa/konferenssijulkaisussaConference contributionScientificvertaisarvioitu

6 Sitaatiot (Scopus)


The upcoming 5th generation (5G) mobile networks need to support ultra-reliable communication for business and life-critical applications. To do that 5G must offer higher degree of reliability than the current Internet, where networks are often subjected to Internet attacks, such as denial of service (DoS) and unwanted traffic. Besides improving the mitigation of Internet attacks, we propose that ultra-reliable mobile networks should only carry the expected user traffic to achieve a predictable level of reliability under malicious activity. To accomplish this, we introduce device-oriented communication security policies. Mobile networks have classically introduced a policy architecture that includes Policy and Charging Control (PCC) functions in LTE. However, in state of the art, this policy architecture is limited to QoS policies for end devices only. In this paper, we present experimental implementation of a Security Policy Management (SPM) system that accounts communication security interests of end devices. The paper also briefly presents the overall security architecture, where the policies set for devices or services in a network slice providing ultra-reliability, are enforced by a network edge node (via SPM) to only admit the expected traffic, by default treating the rest as unwanted traffic.

OtsikkoProceedings of IEEE/IFIP Network Operations and Management Symposium 2020
AlaotsikkoManagement in the Age of Softwarization and Artificial Intelligence, NOMS 2020
ISBN (elektroninen)9781728149738
DOI - pysyväislinkit
TilaJulkaistu - huhtik. 2020
OKM-julkaisutyyppiA4 Artikkeli konferenssijulkaisussa
TapahtumaIEEE/IFIP Network Operations and Management Symposium - Budapest, Unkari
Kesto: 20 huhtik. 202024 huhtik. 2020


NimiIEEE/IFIP Network Operations and Management Symposium
ISSN (painettu)1542-1201
ISSN (elektroninen)2374-9709


ConferenceIEEE/IFIP Network Operations and Management Symposium


Sukella tutkimusaiheisiin 'Implementing a Security Policy Management for 5G Customer Edge Nodes'. Ne muodostavat yhdessä ainutlaatuisen sormenjäljen.

Siteeraa tätä