Ahmad, Liyanage, Shahabuddin, Ylianttila, and Gurtov
94
Since the number of devices connected in 5G will be huge (the latency requirements
will be strict that will require quick threat detection and faster response) security
automation will be the need. Global visibility of the entire network behavior will enable
quick threat detection and network programmability will enable faster threat mitigation. Since these features will be brought about by SDN, SDN‐based automation will be
highly valuable in 5G networks.
4.5 Conclusions and Future Directions
5G should be designed to provide more options of security beyond the currently used
node-by-node security systems. It must provide more security than 4G and enable specific security designs for use cases that have specific requirements such as low latency,
small cell sizes, and radio constraints. Sound security technologies and solutions must
be built into the architecture of 5G from the beginning. This requires proper analysis of
existing and future security threats to develop futuristic security solutions for 5G. New
technologies will be integrated into the 5G ecosystem that requires new solutions for
security as well. Flexible and agile technologies should be the core of network designs
that enable adaptation not only to the service requirements but its security also.
The architectural limitations of current networks must not propagate to the future
networks. The main limitation is the inflexibility of current networks due to its proprietary and closed nature. Such limitations make it difficult to deploy and use novel
mechanisms and technologies when the need arises. These needs may be due to changes
in user or business requirements, new service models or the limitations in the technology itself growing beyond its meaningful use. The concepts of SDN and NFV enable
quick network updates, smoothen deployment of new technologies and services, and
enable parallel deployment of old and new technologies and services. Being programmable in nature, these technologies also open the networking arena for innovation. This
is the reason that new security systems and services are already developed by the industry, academia, and individuals working on open source projects.
However, enabling programmability of networking components is not entirely risk
free in environments such as envisioned by 5G. For example, the critical infrastructure
connected by 5G networks must be secured from malicious programs and access to
programmable APIs in critical infrastructure for users or third‐party developers must
be constrained.
Network security has been rarely researched in parallel to network load balancing. It
is extremely important in SDN‐based mobile networks to develop load balancing architectures that work according to network security policies and vice‐versa. For example,
load balancing technologies can be used to avoid the saturation attacks. Similarly, security lapses of the controller can introduce delays in setting flow rules in the switches,
leading to congestion in switches with unsolicited traffic flows. Therefore, it is necessary
to consider network security in parallel with network traffic load balancing technologies
in SDN‐based mobile networks.
Most of the IoT devices will be constrained by capacity. Therefore, various types of
wireless networking technologies are proposed having different cell sizes, differing
architectures and heterogeneous infrastructures to perform functions on behalf of
94
Since the number of devices connected in 5G will be huge (the latency requirements
will be strict that will require quick threat detection and faster response) security
automation will be the need. Global visibility of the entire network behavior will enable
quick threat detection and network programmability will enable faster threat mitigation. Since these features will be brought about by SDN, SDN‐based automation will be
highly valuable in 5G networks.
4.5 Conclusions and Future Directions
5G should be designed to provide more options of security beyond the currently used
node-by-node security systems. It must provide more security than 4G and enable specific security designs for use cases that have specific requirements such as low latency,
small cell sizes, and radio constraints. Sound security technologies and solutions must
be built into the architecture of 5G from the beginning. This requires proper analysis of
existing and future security threats to develop futuristic security solutions for 5G. New
technologies will be integrated into the 5G ecosystem that requires new solutions for
security as well. Flexible and agile technologies should be the core of network designs
that enable adaptation not only to the service requirements but its security also.
The architectural limitations of current networks must not propagate to the future
networks. The main limitation is the inflexibility of current networks due to its proprietary and closed nature. Such limitations make it difficult to deploy and use novel
mechanisms and technologies when the need arises. These needs may be due to changes
in user or business requirements, new service models or the limitations in the technology itself growing beyond its meaningful use. The concepts of SDN and NFV enable
quick network updates, smoothen deployment of new technologies and services, and
enable parallel deployment of old and new technologies and services. Being programmable in nature, these technologies also open the networking arena for innovation. This
is the reason that new security systems and services are already developed by the industry, academia, and individuals working on open source projects.
However, enabling programmability of networking components is not entirely risk
free in environments such as envisioned by 5G. For example, the critical infrastructure
connected by 5G networks must be secured from malicious programs and access to
programmable APIs in critical infrastructure for users or third‐party developers must
be constrained.
Network security has been rarely researched in parallel to network load balancing. It
is extremely important in SDN‐based mobile networks to develop load balancing architectures that work according to network security policies and vice‐versa. For example,
load balancing technologies can be used to avoid the saturation attacks. Similarly, security lapses of the controller can introduce delays in setting flow rules in the switches,
leading to congestion in switches with unsolicited traffic flows. Therefore, it is necessary
to consider network security in parallel with network traffic load balancing technologies
in SDN‐based mobile networks.
Most of the IoT devices will be constrained by capacity. Therefore, various types of
wireless networking technologies are proposed having different cell sizes, differing
architectures and heterogeneous infrastructures to perform functions on behalf of