Collaborative Research: SaTC: CORE: Medium: Enabling Practically Secure Cellular Infrastructure

全球蜂窝电信系统是数十亿用户的关键基础设施，为互联网连接提供了一个无处不在的平台，支持消费者和行业的广泛使用案例。我们现在正处于广泛采用5G技术的尖端。虽然5G因其千兆每秒速率和超低延迟而得到广泛营销，但它也从根本上改变了内部网络架构，提供动态配置软件定义的服务，为包括虚拟运营商和企业在内的网络租户提供增强的控制。然而，这些重大的架构变化使5G系统面临新的对手和威胁，而对组成这些系统的许多技术组件进行推理的能力至关重要。这项工作的目标是帮助移动网络运营商部署确保安全的蜂窝系统，通过开发工具和技术来提取、建模和分析蜂窝网络基础设施中存在的源代码和二进制代码的安全敏感逻辑。该项目寻求解决将蜂窝网络基础设施的安全关键要求转换为程序分析工具以评估给定实施的这些要求这一广泛的研究挑战。这个项目不是严格地识别传统的软件缺陷(例如，内存安全)，而是专注于发现三个关键方面的逻辑漏洞：密码协议、访问控制和核心功能。每一个方面都提出了独特的挑战和机遇，以推进最先进的技术。虽然之前的工作已经研究了蜂窝密码协议本身，但当开发人员无法正确实现正式证明所做的假设(例如，安全随机性和加密值验证)时，漏洞可能会出现。同时，将传统蜂窝系统组件分解为在云环境中运行的微服务增加了核心功能的攻击面，特别是在网络租户的数量和复杂性增长的情况下。因此，规范和实施5G核心网络功能之间的访问控制对部署的安全性至关重要。最后，每个计算系统都代表一个软件组件和依赖项的生态系统。当后门和逻辑炸弹存在于这样的关键基础设施中时，它们可能会产生重大后果。该项目将结合开源和专有5G实施来评估这些考虑因素，并推广用于评估移动运营商部署的实施的知识。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The global cellular telecommunications system is critical infrastructure for billions of users, providing a ubiquitous platform for Internet connectivity that supports a wide range of use cases for both consumers and industry. We are now on the cusp of widespread adoption of 5G technology. While 5G is widely marketed for its gigabit per second rates and ultra-low latency, it also fundamentally changes the internal network architecture, providing dynamic provisioning of software-defined services that offer enhanced control to network tenants including virtual operators and enterprises. However, these major architectural changes expose 5G systems to new adversaries and threats, and the ability to reason about the many technical components that comprise these systems is critical. The goal of this work is to aid mobile network operators in deploying cellular systems that are assured to be secure, through the development of tools and techniques that extract, model, and analyze the security-sensitive logic of the source and binary code existing within the cellular network infrastructure.This project seeks to address the broad research challenge of translating security-critical requirements of cellular network infrastructure into program analysis tools to assess those requirements for a given implementation. Rather than strictly identifying traditional software flaws (e.g., memory safety), this project focuses on the discovery of logic vulnerabilities within three key aspects: cryptographic protocols, access control, and core functionality. Each aspect presents unique challenges and opportunities to advance the state-of-the-art. While prior work has studied the cellular cryptographic protocols themselves, vulnerabilities can emerge when developers fail to correctly implement assumptions made by formal proofs (e.g., secure randomness and verification of cryptographic values). Simultaneously, the disaggregation of traditional cellular system components into microservices running in cloud environments increases the attack surface for core functionality, particularly as the number and complexity of network tenants grows. As such, specification and enforcement of access control between 5G core network functions is critical to the security of the deployment. Finally, every computing system represents an ecosystem of software components and dependencies. Backdoors and logic bombs can have significant consequences when they exist within such critical infrastructure. This project will assess these considerations within a combination of open source and proprietary 5G implementations and generalize the knowledge for assessment of implementations deployed by cellular providers.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.