Multi-Tenancy-Capable Correlation of Security Events in 5G Networks
2018 IEEE Conference on Network Function Virtualization and SoftwareDefined Networks (NFV-SDN): SNS2018 - International Workshop on Security inNFV-SDN (at) IEEE NFV-SDN 2018 (NFV-SDN'18 - SNS2018), Verona, Italy, (November 2018)Abstract
The concept of network slicing in 5G mobile networks introduces new
challenges for security management: Given the combination of
Infrastructure-as-a-Service cloud providers, mobile network operators as
Software-as-a-Service providers, and the various verticals as customers,
multi-layer and multi-tenancy-capable management architectures are
required. This paper addresses the challenges for correlation of security
events in such 5G scenarios with a focus on event processing at
telecommunication service providers. After an analysis of the specific
demand for network-slice-centric security event correlation in 5G networks,
ongoing standardization efforts, and related research, we propose a
multi-tenancy-capable event correlation architecture along with a scalable
information model. The event processing, alerting, and correlation workflow
is discussed and has been implemented in a network and security management
system prototype, leading to a demonstration of first results acquired in a
lab setup.
Links and resources
Tags
community
@ms_unibw's tags highlighted