Preface xxxv
On the other hand, today’s networks host various values – examples include revenue
streams and brand reputation. The accessibility of these values via the Internet has
already attracted hacktivists, underground economies, cybercrime and cyber‐ terrorists.
The values hosted in, and generated by, the 5G system are estimated to be even higher,
and the assets (hardware, software, information and revenue streams) will be even more
attractive for different types of attacks. Furthermore, considering the possible consequences of an attack, the damage may not be limited to a business or reputation; it could
even have a severe impact on public safety.
This leads to a need to strengthen certain security functional areas. Attack resistance
needs to be a design consideration when defining new 5G protocols. Security and
privacy are cornerstones for 5G to become a platform for the Networked Society.
Cellular systems pioneered the creation of security solutions for public communication, providing a vast, trustworthy ecosystem – 5G will drive new requirements due
to new business and trust models, new service delivery models, an evolved threat
landscape and an increased concern for privacy.
5G is going to offer similar impact to communication as once “fiber” technology did;
it has the potential to transform the mobility concept. Applications for 5G are beyond
the traditional mobile connectivity needs to new public communication, IoT, smart
world based out of smart cities, smart transportation and more. One of the major
challenges for 5G adoption is security related challenges.
To the best of our knowledge, no book is published yet that addresses the 5G security,
comprehensively, and very little is written on this topic. Although the security is the
mandatory requirement of 5G networks, many of the 5G security related issues are still
under development. However, the rapid adaptation of 5G network will soon raise the
requirement of a comprehensive handbook of 5G security.
5G Security Standardization
At the time of writing, 5G standardization has not yet started as the system architecture is still in research phase. Despite its name, the Third Generation Partnership
Project (3GPP) continues its work for defining also 5G specifications. In February
2017, 3GPP published “Service Requirements for the 5G system” (TS22.261) that
defines performance targets in various scenarios such as indoor, urban, rural and
different applications (intelligent transport, remote monitoring, etc.). 3GPP plans to
publish 5G Phase 1 specifications in 2018 as Release 15 and Phase 2 in 2020 as
Release 16.
Since 5G is expected to be completely converged with Internet protocols, the standards produced by the Internet Engineering Task Force (IETF) in Request for Comments
(RFCs) are expected to play a key role. The relevant Working Groups are, for example,
IP Wireless Access in Vehicular Environments (IPWAVE) WG and Host Identity
Protocol (HIP) WG on secure mobility protocols.
If 5G networks will serve safety‐crucial applications as envisaged, the ISO
(International Organization for Standardization) will introduce standards such as
Common Criteria (ISO 15408) will apply. For instance, for car connectivity, a specific
standard is ISO 26262, which covers car safety requirements. For tele‐health, EU and
USA‐specific standards, such as HIPAA (Health Insurance Portability and Accountability
On the other hand, today’s networks host various values – examples include revenue
streams and brand reputation. The accessibility of these values via the Internet has
already attracted hacktivists, underground economies, cybercrime and cyber‐ terrorists.
The values hosted in, and generated by, the 5G system are estimated to be even higher,
and the assets (hardware, software, information and revenue streams) will be even more
attractive for different types of attacks. Furthermore, considering the possible consequences of an attack, the damage may not be limited to a business or reputation; it could
even have a severe impact on public safety.
This leads to a need to strengthen certain security functional areas. Attack resistance
needs to be a design consideration when defining new 5G protocols. Security and
privacy are cornerstones for 5G to become a platform for the Networked Society.
Cellular systems pioneered the creation of security solutions for public communication, providing a vast, trustworthy ecosystem – 5G will drive new requirements due
to new business and trust models, new service delivery models, an evolved threat
landscape and an increased concern for privacy.
5G is going to offer similar impact to communication as once “fiber” technology did;
it has the potential to transform the mobility concept. Applications for 5G are beyond
the traditional mobile connectivity needs to new public communication, IoT, smart
world based out of smart cities, smart transportation and more. One of the major
challenges for 5G adoption is security related challenges.
To the best of our knowledge, no book is published yet that addresses the 5G security,
comprehensively, and very little is written on this topic. Although the security is the
mandatory requirement of 5G networks, many of the 5G security related issues are still
under development. However, the rapid adaptation of 5G network will soon raise the
requirement of a comprehensive handbook of 5G security.
5G Security Standardization
At the time of writing, 5G standardization has not yet started as the system architecture is still in research phase. Despite its name, the Third Generation Partnership
Project (3GPP) continues its work for defining also 5G specifications. In February
2017, 3GPP published “Service Requirements for the 5G system” (TS22.261) that
defines performance targets in various scenarios such as indoor, urban, rural and
different applications (intelligent transport, remote monitoring, etc.). 3GPP plans to
publish 5G Phase 1 specifications in 2018 as Release 15 and Phase 2 in 2020 as
Release 16.
Since 5G is expected to be completely converged with Internet protocols, the standards produced by the Internet Engineering Task Force (IETF) in Request for Comments
(RFCs) are expected to play a key role. The relevant Working Groups are, for example,
IP Wireless Access in Vehicular Environments (IPWAVE) WG and Host Identity
Protocol (HIP) WG on secure mobility protocols.
If 5G networks will serve safety‐crucial applications as envisaged, the ISO
(International Organization for Standardization) will introduce standards such as
Common Criteria (ISO 15408) will apply. For instance, for car connectivity, a specific
standard is ISO 26262, which covers car safety requirements. For tele‐health, EU and
USA‐specific standards, such as HIPAA (Health Insurance Portability and Accountability