{"id":23178,"date":"2024-01-03T16:47:49","date_gmt":"2024-01-03T16:47:49","guid":{"rendered":"https:\/\/www.5gworldpro.com\/?p=23178"},"modified":"2024-01-03T16:47:49","modified_gmt":"2024-01-03T16:47:49","slug":"what-are-the-major-security-threats-to-the-5g-air-interface","status":"publish","type":"post","link":"https:\/\/new.5gworldpro.com\/?p=23178","title":{"rendered":"What are the major security threats to the 5G air interface?"},"content":{"rendered":"
\n
\n

5G introduces new architectures, services, and technologies to meet the increasingly stringent requirements on experience and applications. However, these additions also bring with them new security challenges. For example, the new software architecture has its own security requirements in aspects such as slice security protection and multi-slice risk management. In terms of new services, 5G networks need to support applications with enhanced security capabilities to meet the security requirements of vertical industries. And in terms of new technologies, 5G networks must consider the future impact of technologies, such as quantum computing, on traditional cryptographic algorithms.<\/p>\n

Figure 1<\/span>\u00a0Evolution of air interface security features<\/span>
\n\"\"<\/div>\n

As the successor of 4G networks, 5G needs to be able to handle new security challenges while maintaining the same security capabilities as 4G. For this purpose,\u00a03GPP specifications enable 5G to inherit and enhance the security mechanisms of 4G as well as provide additional security features for 5G applications in vertical industries<\/strong>. This is explained in more detail in\u00a03 Security Threats to the 5G Air Interface and Corresponding Countermeasures\u00a0and\u00a04 5G Security Features for Vertical Industries.<\/p>\n

In addition, unified and continuously evolving security assessment standards are required for 5G networks, in turn facilitating improvements in security levels across the mobile industry.\u00a05 Wireless Network Equipment Security Certification\u00a0introduces the industry’s most recognized standards and specifications for equipment security assessment.<\/p>\n<\/div>\n<\/div>\n

\n

3<\/span>\u00a0Security Threats to the 5G Air Interface and Corresponding Countermeasures<\/a><\/h1>\n
\n

The main security threats to the air interface are the same between 4G and 5G. To cope with these threats, 5G uses the same security mechanisms as 4G and makes some additional enhancements.\u00a0Figure 3-1<\/a>\u00a0shows the major security threats to the 5G air interface.<\/p>\n

Figure 2<\/span>\u00a0Major security threats to the 5G air interface<\/span>
\n\"\"<\/div>\n
\n

Fake Base Station Attack<\/h2>\n

On 2G, 3G, and 4G networks, an international mobile subscriber identity (IMSI) is used to uniquely identify a mobile subscriber or UE. An IMSI is a permanent identity of a subscriber. IMSIs are transmitted in plaintext on 2G, 3G, and 4G networks and can be obtained in attacks launched by devices such as an IMSI-catcher, leading to subscriber identity disclosure. An attacker, with an IMSI obtained in advance, can use a fake base station to forge a signaling message and determine whether the UE is near the fake base station based on the response from the UE. In this way, the attacker can illegally trace the UE location.<\/p>\n

5G networks use a subscription permanent identifier (SUPI), which consists of an IMSI or network access identifier (NAI), to uniquely identify a mobile subscriber or UE. A SUPI is encrypted into a Subscription Concealed Identifier (SUCI) for transmission to defend against IMSI-catcher attacks by fake base stations.<\/strong><\/p>\n

Figure 3<\/span>\u00a0Fake base station attacks and corresponding countermeasures<\/span><\/div>\n
\"\"<\/div>\n<\/div>\n
\n

Access of Unauthorized Users<\/h2>\n

Unauthorized users using unauthenticated UEs to access the network will consume network resources. If an attacker uses a large number of unauthorized UEs to launch an attack against the network, severe accidents such as network congestion, denial of service, and network device faults may occur.<\/p>\n

Both 5G and 4G support two-way authentication between UEs and the network. However, 5G provides a unified authentication architecture for 3GPP and non-3GPP authentication to adapt to different UE types and network access types. In addition, 5G uses better authentication modes to improve air interface access security.<\/p>\n

Figure 4<\/span> Differences between 4G and 5G authentication architectures
\n<\/span><\/div>\n<\/div>\n
\"\"<\/div>\n
\n
\n

5G authentication-related network functions (NFs) are as follows:<\/p>\n