Multi-Tenancy-Capable Correlation of Security Events in 5G Networks

, , and . 2018 IEEE Conference on Network Function Virtualization and SoftwareDefined Networks (NFV-SDN): SNS2018 - International Workshop on Security inNFV-SDN (at) IEEE NFV-SDN 2018 (NFV-SDN'18 - SNS2018), Verona, Italy, (November 2018)


The concept of network slicing in 5G mobile networks introduces new challenges for security management: Given the combination of Infrastructure-as-a-Service cloud providers, mobile network operators as Software-as-a-Service providers, and the various verticals as customers, multi-layer and multi-tenancy-capable management architectures are required. This paper addresses the challenges for correlation of security events in such 5G scenarios with a focus on event processing at telecommunication service providers. After an analysis of the specific demand for network-slice-centric security event correlation in 5G networks, ongoing standardization efforts, and related research, we propose a multi-tenancy-capable event correlation architecture along with a scalable information model. The event processing, alerting, and correlation workflow is discussed and has been implemented in a network and security management system prototype, leading to a demonstration of first results acquired in a lab setup.

Links and resources

BibTeX key:
search on:

Comments and Reviews  

There is no review or comment yet. You can write one!


Cite this publication