Strengthening Security Foundations in Next-G Wireless Telecommunication Systems

Digital transformation fundamentally impacts our everyday lives and creates significant efficiency gains in the economy. At the same time, however, it is also increasing the complexity of wireless networks, particularly in the case of the sixth generation (6G) mobile communications standard. The use of different technologies in these networks poses an increasing challenge and increases the risk of security threats and vulnerabilities. Wireless communication networks are particularly vulnerable to cyber attacks as they are an integral part of critical infrastructures. Robust methods must, therefore, be developed to overcome these challenges. Consequently, this dissertation is focused on the security fundamentals of next-generation (Next-G) wireless telecommunication systems. It addresses the security challenges resulting from emerging and innovative concepts within these systems. We use case studies for in-depth investigation and analysis, with a particular focus on the Open Radio Access Network (O-RAN) approach. The aim of this concept is to enable open and interoperable network architectures, in contrast to traditional RAN systems, which are often proprietary and manufacturer-specific. In this respect, it is essential to address fundamental questions, like the efficient assessment of the threat landscape, the impact of potential attacks, and the mechanisms that can be used to ensure security at the system level. Initially, an empirical approach is developed to analyze threats within telecommunications systems, such as the O-RAN. The procedure we have developed enables automated, programmatically executable vulnerability management. This methodology is further enhanced by integrating Natural Language Processing (NLP), leading to the creation of a fully automated, iteratively executable framework for security analysis within O-RANs. The framework allows for the direct incorporation of our methods into the deployment process, facilitating rapid and efficient comparison of all components against the latest security vulnerabilities. The current approach of fully deploying all components in virtualized environments, such as cloud infrastructures, introduces new and unprecedented security challenges. In response, we investigate current deployment strategies within the O-RAN infrastructure and establish best practices to mitigate these security issues. In the course of the dissertation, we identify security vulnerabilities in wireless telecommunication systems by executing different attack scenarios. We present a detailed procedure for carrying out the attacks as well as effective methodologies for detecting or avoiding the vulnerabilities we have identified. In the first study, we analyze the security of a key component, the Near-Real-Time RAN Intelligent Controller (Near-RT RIC), within O-RAN. We show how a subscription Denial of Service (DoS) attack can render current implementations of this component unusable. In the second analysis, we investigate the robustness of new standards in wireless networks against jamming attacks using the open-source connectivity standard Matter. The final section of this dissertation explores innovative security research approaches for enhancing the system security of future communication systems. Initially, a novel concept is introduced that facilitates the comprehensive and efficient management and assurance of security within O-RAN systems through the use of Security Platforms (SPs). Furthermore, two developed methodologies for this approach are presented: firstly, a method for programmatically analyzing eXtended Applications (xApps) to identify vulnerabilities, and secondly, an approach for conducting comparative assessments of these vulnerabilities. Additionally, a strategy is proposed to ensure that only secure xApps, such as those that have been pre-tested, are deployed for use in Near-RT RIC. Overall, this dissertation makes an important contribution to the research of security principles for next-generation wireless telecommunication systems. With the help of our approaches for a better and more concrete assessment of threats in such networks, we directly contribute to a clearer and better manageable picture of the vulnerability landscape. Our two publications on vulnerability research also provide valuable insights for securing future problems in the respective areas. In summary, with our approaches to system security, with which security principles can be implemented and integrated into modern system approaches such as O-RAN, we contribute to ensuring a secure transition to 6G.

Level thesis:degree_level

thesis.doctoral

Grantor dc:publisher

Universität Passau

Year

2025

Author dc:creator

• Klement, Felix

Contributors dc:contributor

• Katzenbeisser, Stefan

• Security
• Next-G
• 6G
• Open RAN

Statement dc:rights

• Creative Commons - CC BY - Namensnennung 4.0 International

Repository record source_url

https://opus4.kobv.de/opus4-uni-passau/frontdoor/index/index/docId/1866

OAI identifier oai:identifier

oai:kobv.de-opus4-uni-passau:1866