Open RAN Security Test

Malicious actors are constantly probing for weaknesses in networks. Open RAN networks and interfaces offer many benefits but also open up more threat surfaces. Equipment vendors, operators and Open Test and Integration Center (OTIC) Labs face an increasingly complex task to both ensure that network elements have been designed to withstand security threats and are kept up-to-date. Growing usage of open-source software makes this more complex: a missed patch or expired certificate can provide an open door for a hacker.

A network security breach can result in significant impact to an operator with a knock-on effect for their vendors. And the situation is made worse if an organization cannot track what software is embedded and whether it is up-to-date. 

The VIAVI Open RAN Security Solution provides a suite of automated tests to check for compliance to standards offering vendors, labs and operators peace of mind when deploying Open RAN. Test coverage includes 3GPP SCAS compliance, DoS and fuzzing attack, O-Cloud resource exhaustion, protocol validation, port scanning and open fronthaul security test. 

Vulnerabilities in an Open RAN Network

VIAVI Open RAN Security Validation

Key Use Cases

• 3GPP Security Assurance Specs (SCAS) and System Security – Test E2E network against 3GPP TS 33.511 and TS 33.117 for security functional requirements as well as security requirements derived from threats specific to gNB. Automated tests include Integrity check, Ciphering, AS algorithms, security key validation. 
• DoS and Fuzzing Tests – Ensure security and resilience by safeguarding the Open RAN network and O-Cloud against potential vulnerabilities and weaknesses which could disrupt network availability and compromise data integrity. 
• Software Security Evaluation – Verify validity of the software by testing for Software Bill of Material (SBOM) and minimum set of data fields, in accordance with National Communications and Information Administration (NTIA) guidance.

Benefits

• Proven Security Test Tool 
  • Over 15 years testing next-generation firewalls for leading vendors. 
• Multi Tool Solution 
  • Improved security risk mitigation. 
• O-RAN Alliance Participation 
  • VIAVI holds senior roles within Open RAN Alliance such as WG chairperson, Test Group chair, Specifications author. 
• OTIC Lab Preferred Tool
  • Securing all Open RAN Equipment entering OTIC labs.