Anamalamudi, Sangi, Alkatheiri, Bin Muhaya, and Liu
152
Table 7.1 Security issues in 5G Networks [13].
Security Issue
Type
Security Issue Description
Based on the type of the security attack
Interception
The intruder intercepts the information through control/data signaling, but
does not modify or delete; this kind of attack affects the privacy of the
subscriber as well as the network operator
Reply attacks
The intruder can insert the unauthentic objects into the system that
depends on the target and physical access type (e.g. spurious messages,
fake service logic or fake subscriber information)
Resource
modification
The intruder creates damage to the system by modifying the system
resources
Interruption
The intruder tries to interrupt the operation by destroying the system
resources (e.g. delete signaling messages, subscriber data, or stop
delivery, etc.)
Based on methodologies used to cause the attack
Attacks based
on data
The intruder targets the information stored in the 5G communication
system and causes damage by altering or inserting and/or deleting the data
stored in the system
Attacks based on
messages
The intruder targets the 5G system by adding, replacing, replaying and
dropping the control/data signaling flowing to and from the 5G network
Service logic
attacks
The intruder tries to inflict significant damage by simply attacking the
service logic running in the various 5G network entities
Based on the level of physical access
Class I
The intruder gains access to the radio interface using a physical device
and then uses the modified mobile stations (eNodeB’s) to broadcast
the radio signal at a higher frequency, eavesdrop and execute “man‐in‐the‐
middle attacks”
Class II
The intruder gains access to the physical cables connecting the 5G network
switches and may cause considerable damage by disrupting the normal
transmission of control/data signaling messages
Class III
The intruder will have access to some of the sensitive components of the
5G network and can cause important impairments by changing the
service logic or modifying the subscriber information stored in the 5G
network entity
Class IV
The intruder has access to communication links connecting the Internet
to the 5G network and can create disruption through transmission of
control/data signaling flowing between the link and adding some new
control/data signaling messages into the link between the two
heterogeneous networks
Class V
The intruder has access to the Internet servers or cross‐network servers
providing services to mobile subscribers connected to the 5G network
and can cause damage by changing the service logic or modifying the
subscriber data (profile, security and services) stored in the cross‐
network servers
152
Table 7.1 Security issues in 5G Networks [13].
Security Issue
Type
Security Issue Description
Based on the type of the security attack
Interception
The intruder intercepts the information through control/data signaling, but
does not modify or delete; this kind of attack affects the privacy of the
subscriber as well as the network operator
Reply attacks
The intruder can insert the unauthentic objects into the system that
depends on the target and physical access type (e.g. spurious messages,
fake service logic or fake subscriber information)
Resource
modification
The intruder creates damage to the system by modifying the system
resources
Interruption
The intruder tries to interrupt the operation by destroying the system
resources (e.g. delete signaling messages, subscriber data, or stop
delivery, etc.)
Based on methodologies used to cause the attack
Attacks based
on data
The intruder targets the information stored in the 5G communication
system and causes damage by altering or inserting and/or deleting the data
stored in the system
Attacks based on
messages
The intruder targets the 5G system by adding, replacing, replaying and
dropping the control/data signaling flowing to and from the 5G network
Service logic
attacks
The intruder tries to inflict significant damage by simply attacking the
service logic running in the various 5G network entities
Based on the level of physical access
Class I
The intruder gains access to the radio interface using a physical device
and then uses the modified mobile stations (eNodeB’s) to broadcast
the radio signal at a higher frequency, eavesdrop and execute “man‐in‐the‐
middle attacks”
Class II
The intruder gains access to the physical cables connecting the 5G network
switches and may cause considerable damage by disrupting the normal
transmission of control/data signaling messages
Class III
The intruder will have access to some of the sensitive components of the
5G network and can cause important impairments by changing the
service logic or modifying the subscriber information stored in the 5G
network entity
Class IV
The intruder has access to communication links connecting the Internet
to the 5G network and can create disruption through transmission of
control/data signaling flowing between the link and adding some new
control/data signaling messages into the link between the two
heterogeneous networks
Class V
The intruder has access to the Internet servers or cross‐network servers
providing services to mobile subscribers connected to the 5G network
and can cause damage by changing the service logic or modifying the
subscriber data (profile, security and services) stored in the cross‐
network servers