본문 바로가기
KERD
논문KCI 등재

5G 기지국에 대한 보안성평가기준 연구

A Study on Security Requirements for 5G Base Station

조광수|홍바울|김승주|김예준
한국정보보호학회 (Korea Institute Of Information Security And Cryptology)|2021.10|정보보호학회논문지 (Journal of The Korea Institute of Information Security and Cryptology)|제31권 제5호|pp. 919-939|DOI https://doi.org/10.13089/JKIISC.2021.31.5.919

0

조회

0

다운로드

3

인용

0

참고문헌

키워드

Threat ModelingSecurity RequirementsBase Station5G
주제분류컴퓨터학

초록

5G 네트워크는 차세대 통신기술로서 4G 네트워크 대비 빠른 속도, 짧은 통신 지연, 높은 연결성을 기반으로 대량의 트래픽 처리가 가능하다. 이에 따라 4차 산업혁명의 핵심 기술로 대두되어 그 중요성이 증가하고 있다. 이러한 5G 네트워크 환경에서 기지국은 그 특성상 높은 밀도로 도심 전역에 설치되어 있으며, 사용자 단말과 연결되어 서비스를 제공한다. 따라서 악의적인 공격자에 의한 피해가 기지국에 발생하는 경우, 사용자 및 사회 전반에 큰 피해를 줄 것으로 예상된다. 2016년 뉴욕타임즈 기사에 따르면 중국의 특정 서버로 사용자 데이터를 전송하는 백도어로 추정되는 소프트웨어가 미국 내 안드로이드 기기, 자동차와 같은 스마트 기기에 포함되어 있다고 보도되었다. 이후 통신 장비에 백도어 설치에 대한 이슈가 지속적으로 제기되었으며, 5G 기지국과 같은 통신장비에 대한 안전성 확보의 필요성이 대두되었다. 따라서 본 논문에서는 5G 기지국을 대상으로 체계적인 방법론인 위협모델링을 사용하여 도출한 보안기능요구사항과 백도어 이슈에 대응할 수 있는 수준의 보안보증요구사항을 제안한다. 본 논문에서 제안하는 보안요구사항은 5G 기지국에 대한 보안성평가기준으로서 안전한 네트워크 환경을 구성하기 위한 기지국 설계 및 개발에 사용될 수 있다.

Abstract

As a next-generation communication technology, 5G networks are capable of handling large amounts of traffic based on higher speeds, shorter communication delays, and higher connectivity compared to 4G networks. In this 5G network environment, base stations are installed all over the city at high density due to their characteristics, and are connected to user terminals to provide services. Therefore, if the base station is damaged by a malicious attacker, it is expected to cause great damage to users and society as a whole. So the need for secure communication equipment such as 5G base stations has emerged. Therefore, in this paper, we propose the security functional requirements derived using threat modeling, a systematic methodology for 5G base stations, and the security assurance requirements at the level that can cope with the backdoor issues. The security requirements proposed in this paper can be used for base station design and development to construct a secure network environment as a security evaluation standard for 5G base stations.

참고문헌 (80)

  1. "FG IMT-2020" (2015)[URL]
  2. Lee Dong-myeon, "The basis of the 4th industrial revolution, intelligent hyper-connected network", TTA Journal, ~ (2017)
  3. Park Seon-hoo, "The future of 5G mobile communication (5G) - Is it good news for small and mediumsized telecommunication equipment companies" (2018), IBK Economic Research Institute
  4. Lee, Young-dae, "Method and terminal for performing handover in mobile communications system of point-to-multipoint service", U.S. Patent Application No. 12
  5. Fang, Dongfeng, "Security for 5G mobile wireless networks", IEEE Access, 6, pp.4850~4874 (2017)
  6. Arfaoui, Ghada, "A security architecture for 5G networks", IEEE Access, 6, pp.22466~22479 (2018)
  7. Ahmad, Ijaz, "Overview of 5G security challenges and solutions", IEEE Communications Standards Magazine, 2, pp.36~43 (2018)
  8. Ferrag, Mohamed Amine, "Security for 4G and 5G cellular networks: A survey of existing authentication and privacy-preserving schemes", Journal of Network and Computer Applications, 101, pp.55~82 (2018)
  9. Fang, "Security requirement and standards for 4G and 5G wireless systems", GetMobile: Mobile Computing and Communications, 22(1), pp.15~20 (2018)
  10. Sattar, Danish, "Threat Modeling in LTE Small Cell Networks", IEEE Canadian Conference on Electrical & Computer Engineering(CCECE) (2018)
  11. Jover, Roger Piqueras, "Security and protocol exploit analysis of the 5G specifications", IEEE Access, 7, pp.24956~24963 (2019)
  12. Ahmad, Ijaz, "Security for 5G and beyond", IEEE Communications Surveys & Tutorials, 21, pp.3682~3722 (2019)
  13. Soldani, David, "5G and the Future of Security in ICT", IEEE International Telecommunication Networks and Applications Conference (ITNAC) (2019)
  14. Cao, Jin, "A survey on security aspects for 3GPP 5G networks", IEEE communications surveys & tutorials, 22, pp.170~195 (2019)
  15. Tian, Zhihong, "Automated attack and defense framework for 5G security on physical and logical layers", arXiv preprint arXiv:1902.04009, ~ (2019)
  16. Fang, Dongfeng, "5G wireless security and privacy: Architecture and flexible mechanisms", IEEE Vehicular Technology Magazine, 15, pp.58~64 (2020)
  17. Sun, Yanbin, "Automated Attack and Defense Framework toward 5G Security", IEEE Network, 34, pp.247~253 (2020)
  18. Dutta, "5G Security Challenges and Opportunities : A System Approach", IEEE 5G World Forum(5GWF) (2020)
  19. "Release 15"[URL]
  20. "Release 17"[URL]
  21. "System Architecture Evolution (SAE); Security architecture"[URL]
  22. "Security architecture and proc edures for 5G system" (2020)[URL]
  23. "Security Assurance Specification (SCAS) for the next generation Node B (gNodeB) network product class"[URL]
  24. "5G Implementation Guidelines:NSA Option 3"[URL]
  25. Ma Zhendong, "Threat modeling for automotive security analysis", Advanced Science and Technology Letters, 139, pp.333~339 (2016)
  26. "Threat Modeling"[URL]
  27. Shostack, Adam, "Threat modeling:Designing for security" (2014), John Wiley &Sons
  28. Caroline Mockel, "Threat modeling approaches and tools for securing architectural designs of an e-banking application", IEEE International Conference on Information Assurance and Security (2010)
  29. "D ata Flow Diagrams Examples"[URL]
  30. "What is a Data FDlow D iagram"[URL]
  31. "Checking Threat Modeling Data Flow Diagrams for Implementati on Conformance and Security" (2006)[URL]
  32. "Data Flow Diagram"[URL]
  33. Miller, Charlie, "Battery firmware hacking", pp.3~4 (2011), Black Hat USA
  34. Shen, Di, "Exploiting TrustZone on android" (2015), Black Hat USA
  35. Shaik. Altaf, "LTE Network Automation under Threat", ~ (2018)
  36. "CVE-2015-0006"[URL]
  38. Labib, Mina, "Analyzing and enhancing the resilience of LTE", LTE-A systems to RF spoofing, 2015, ~
  39. Behrad, Shanay, "A new scalable authentication and access control mechanism for 5G-based IoT", Future Generation Computer Systems, 108, pp.46~61 (2020)
  40. Long, James, "A Novel Denial of Service Vulnerability in Long Term Evolution Cellular Networks", ~ (2019)
  41. Park, Yongsuk, "A survey of security threats on 4G networks", IEEE Globecom workshops (2007)
  42. Hu, Xinxin, "A systematic analysis method for 5G non-access stratum signalling security", IEEE Access, 7, pp.125424~125441 (2019)
  43. Fievisohn, Lauren M. Wagoner, "A taxonomy of firmware extraction methodologies", pp.2014
  44. Gupta, Akhil, "Attack modeling and intrusion detection system for 5G wireless communication network", International Journal of Communication Systems, 30 (2017)
  45. Thomas, Sam Lloyd, "Backdoor detection systems for embedded devices", pp.2018
  46. Jover, Roger Piqueras, "Enhancing the security of LTE networks against jamming attacks", EURASIP Journal on Information Security (2014)
  47. Wang, Jiang, "Firmware-assisted memory acquisition and analysis tools for digital forensics", IEEE International Workshop on Systematic Approaches to Digital Forensic Engineering (2011)
  48. Basnight, Zachry H., "Firmware counterfeiting and modification attacks on programmable logic controllers", ENGINEERING AND MANAGEMENT, pp.2013
  49. Basnight, Zachry, "Firmware modification attacks on programmable logic controllers", International Journal of Critical Infrastructure Protection, 6, pp.76~84 (2013)
  50. Huang, Junying, "Instruction Vulnerability Test and Code Optimization Against DVFS Attack", IEEE International Test Conference in Asia (ITC-Asia) (2019)
  51. Security vulnerability in 5G-AKA draft, "Dehnel-Wild, Martin", Department of Computer Science, University of Oxford, 14~37 (2018)
  52. Kim, Hongil, "Touching the untouchables: Dynamic security analysis of the LTE control plane", IEEE Symposium on Security and Privacy (SP) (2019)
  53. Bikos, Anastasios N., "LTE", SAE security issues on 4G wireless networks, 2012, pp.11, 55~62
  54. Fei, Teng, "LTE is vulnerable: implementing identity spoofing and denial-of-service attacks in LTE networks", IEEE Global Communications Conference (GLOBECOM) (2019)
  55. Chandavarkar, B. R., "Mitigation of desynchronization attack during inter-eNodeB handover key management in LTE", IEEE International Conference on Contemporary Computing(IC3) (2015)
  56. Tu, Guan-Hua, "New security threats caused by IMS-based SMS service in 4G LTE networks", Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (2016)
  57. Shaik, Altaf, "New vulnerabilities in 4G and 5G cellular access network protocols: exposing device capabilities", Proceedings of the 12th Conference on Security and Privacy in Wireless and Mobile Networks (2019)
  58. Schulz, Matthias, "Nexmon: Build your own WiFi testbeds with low-level MAC and PHY-access using firmware patches on off-the-shelf mobile devices", Proceedings of the 11th Workshop on Wireless Network Testbeds, Experimental evaluation &CHaracterization (2017)
  59. Palmarini, Francesco, "Reverse Engineering Of Embedded Architectures", BS, pp.2015
  60. Saxena, Neetesh, "Prevention of SMS against Repudiation Attack over the GSM Network", Journal of Information Assurance & Security, pp.155~166 (2013)
  61. Chipounov, Vitaly, "Reverse engineering of binary device drivers with RevNIC", Proceedings of the 5th European conference on Computer systems (2010)
  62. Gupta, Shubham, "Security vulnerabilities in handover authentication mechanism of 5G network", IEEE International Conference on Secure Cyber Computing and Communication (ICSCCC) (2018)
  63. Lee, Gyuhong, "This is your president speaking : spoofing alerts in 4G LTE networks", Proceedings of the 17th Annual International Conference on Mobile Systems, Applications, and Services (2019)
  64. Luo, Shibo, "Toward vulnerability assessment for 5G mobile communication networks", IEEE International Conference on Smart City, SustainCom (SmartCity), pp.2015[DOI]
  65. Li, Xiaona, "Vulnerability analysis and verification for LTE initial synchronization mechanism", IEEE Sarnoff Symposium (2015)
  66. Hofer, Mark, "Vulnerability analysis of LTE location services", IEEE Hawaii International Conference on System Sciences (2014)
  67. Lichtman, Marc, "Vulnerability of LTE to hostile interference", IEEE Global Conference on Signal and Information Processing (2013)
  68. Cui, Ang, "When firmware modifications attack: A case study of embedded exploitation", Presented at the 20th Annual Network &Distributed System Security Symposium (2013)
  69. Chen, Yue, "Downgrade attack on TrustZone", arXiv preprint arXiv:1707.05082, ~ (2017)
  70. Cichonski, Jeffrey, "Guide to LTE security", National Institute of Standards and Technology, No. NIST Special Publication (SP) 800-187(Draft), ~ (2016)
  71. R.Scandariato, "A descriptive study of Microsoft’s threat modeling technique", Requirement Engineering (2013)
  72. N. Mead, "The Hybrid Threat Modeling Method", Carnegie Mellon University, Pittsburgh CMU, 2018
  73. Shevchenko, Nataliya, "Threat modeling: a summary of available methods" (2018), Carnegie Mellon University Software Engineering Institute
  74. "Threat Modeling Using STRIDE" (2017)[URL]
  75. khan, Rafiullah, "STRIDE-based threat modeling for cyber-physical systems", IEEE PES Innovative Smart Grid Technologies Conference Europe(ISGT-Europe) (2017)
  76. "STRIDE Variants and Security Requirements-based Threat Analysis" (2016)[URL]
  77. Saini, Vineet, "Threat modeling using attack trees", Journal of Computing Sciences in Colleges, pp.124~131 (2008)
  78. Salaün, M., "Practical overview of a Xen covert channel", Journal of Computer Virology and Hacking Techniques, pp.317~328 (2010)
  79. Tamer S. Fatayer, "OverCovert: Using Stack-Overflow Software Vulnerability to Create a Covert Channel", IFIP International Conference on New Technologies, Mobility and Security, pp.1~5 (2011)
  80. David Martin, "AVA updates in v3.0", International Common Criteria Conference (2005)

관련 논문AI추천

A Study on the Analysis of Security Requirements through Literature Review of Threat Factors of 5G Mobile Communication유진호, 추동균한국정보처리학회 · JIPS(Journal of Information Processing Systems)2024 · 제20권 제1호Security Threats and Potential Security Requirements in 5G Non-Public Networks for Industrial Applications김기원, 박종근, 박태근한국컴퓨터정보학회 · 한국컴퓨터정보학회논문지2020 · 제25권 제11호5G 서비스 보안 강화를 위한 제로트러스트 기반 보안점검항목 연구이상준, 이혜진한국엔터프라이즈아키텍처학회 · 정보화연구2024 · 제21권 제4호Security Vulnerability and Countermeasure on 5G Networks: Survey홍성혁한국디지털정책학회 · 디지털융복합연구2019 · 제17권 제12호PCI DSS 및 5G 표준 준수에 기반한 차세대 카드 결제 시스템의 보안 요구사항 연구노현, 강지우, 김성민, 신희경, 옥지원한국산업보안연구학회 · 한국산업보안연구2022 · 제12권 제2호5G NAS COUNT 취약점을 이용한 보안 위협 분석김민재, 문대성, 박종근, 신지수한국정보보호학회 · 정보보호학회논문지2022 · 제32권 제3호

이 간행물의 다른 논문 (19건)

블록체인 기반 가상자산 관리를 위한 (1,3) 분산키의 비신뢰 기반 안전한 분산 복구 프로토콜류재철, 박준후, 배경일pp. 863-874경량 블록 암호 PIPO의 MILP-Aided 디비전 프로퍼티 분석 및 인테그랄 공격김제성, 김성겸, 성재철, 홍득조, 김선엽, 홍석희pp. 875-888분산형 접근 방식을 적용한 차량 인터넷에서 신뢰할수 있는 데이터 관리를 위한 인센티브 메커니즘 설계Muhammad Firdaus, 이경현pp. 889-899모바일 엣지 컴퓨팅 환경에서 안전 복사를 활용한 도커 컨테이너 마이그레이션 성능 분석변원준, 윤주범, 임한울pp. 901-909퍼즈 테스팅을 통한 소프트웨어 회귀 버그 탐색 기법의 동향과 전망이광무, 이병영pp. 911-917
원문 보기