 |
Herein, the definition of missing authentication and authorization, the formulation of the category that affects the assets and security protection levels, the design of threat models, the implementation of security strategies, and the implementation of test cases were presented. In the upcoming studies, some test items for confidentiality, integrity, availability, retransmission, and authentication will be introduced to verify whether the security specifications are satisfied. Confidentiality will be tested by accessing Near-RT RIC resources, transmitting data, and performing operations. Integrity will be tested by sending tampered data and wrong commands to the Near-RT RIC. Meanwhile, availability and replay will be determined by continuously accessing resources such as the Near-RT RIC, as well as observing whether it causes network delays or interruptions to ascertain whether the security of this indicator is fulfilled. The test of authenticity is to detect whether the pretender can successfully deceive the authorization verification to determine the function of the component.
|
IEEE/ICACT20220039 Slide.16
[Big Slide]
[YouTube]