Secure the 5G and Beyond Networks with Zero Trust and Access Control Systems for Cloud Native Architectures
Hisham A. Kholidy, Keven Disen, Andrew Karam, Elhadj Benkhelifa, Mohammad Ashiqur Rahman, Atta Rahman, Ibrahim Almazyad, Ahmed F. Sayed, Rakia Jaziri
Abstract
5G networks are highly distributed, built on an open service-based architecture that requires multi-vendor hardware and software development environments, all of which create a high attack surface in the 5G networks than other proprietary fixed-function networks. Besides that, cloud-native architectures also present new security challenges. Cloud-native separates monolithic virtual machines into microservice pods, resulting in higher volumes of signaling and communication flowing through and between microservices. In addition, secure connections in monolithic applications have been replaced by untrusted communication between microservice pods, requiring additional cybersecurity capabilities. Access control systems were created to provide reliability and limit access to an organization’s assets. However, due to technology's constant evolution and dynamicity, these conventional security systems lack the security to protect an organization’s information because they were created to address access control for known users. For 5G based cloud native technology, these access controls need to be taken further by implementing a Zero Trust model to secure one’s essential assets for all users within the system. Zero Trust is implemented in an access control system under the concept "Never Trust, Always Verify". In this paper, we implement zero trust as a factor within access control systems by combining the principles of access control systems and zero-trust security by factoring in the user’s historical behavior and recommendations into the mix.