5G has more attack points than existing LTE
ETRI Consortium Develops 5G Edge Security Technology
Demonstration of 5G B2B services applied to smart factories


LTE provides internet services through a centralized core network, so the scope of security management is relatively limited. However, 5G involves the large-scale connection of various devices such as IoT, the network becoming software-driven, and the significant role of the edge, resulting in many attack points outside the core network.

The Electronics and Telecommunications Research Institute (ETRI) announced on the 19th that it is developing technology capable of detecting and responding to potential security threats in 5G 'Edge Networks' and 'Multi-access edge computing (MEC)'.

An edge network refers to the initial access segment in a 5G network extending from a base station physically close to a terminal to a local area or wide-area central office. MEC is a technology that reduces latency by providing computing services using the cloud in the edge network.

MEC requires greater attention to security, particularly as an open system where applications from external service developers can run, which poses a relatively high risk of intrusion and causes significant ripple effects if an attack occurs. However, the relevant technology is still insufficient.

ETRI is moving away from responding to security threats centered on the core network boundary and is pursuing developments that guarantee the stability of 5G convergence services. The technologies being developed by the research team include 5G edge network security technology, MEC and container security technology, and AI-based security threat analysis and monitoring technology.

5G edge network security technology analyzes abnormal data captured in the Radio Access Network (RAN) and detects intrusion attempts through fake base stations. The research team also plans to develop a hardware platform for real-time intrusion threat detection and blocking to protect mobile carriers and private MECs.

MEC and container security technology is a technology that detects anomalies in virtualization platforms and running containers to control unauthorized access, prevent information leakage, and verify the integrity of application software.

Intelligent security threat analysis and monitoring technology is a technology that detects security threats using AI technology based on big data regarding security situations collected from edge networks and MEC, and guarantees infrastructure security across the entire 5G network by sharing threat information with the core network.

The research team plans to apply the developed technologies to smart factories and verify the effectiveness of the technology through security demonstrations of 5G MEC-based B2B convergence services.

Meanwhile, this technology development was conducted as part of the information security core source technology development project supported by the Ministry of Science and ICT and the Institute of Information and Communication Technology Planning and Evaluation (IITP). It will be carried out for four years starting in April of this year, with ETRI serving as the lead organization and an industry-academia-research consortium consisting of Sungkyunkwan University, SGA Solutions, SK Telecom, Somansa, Soongsil University, Sysmate, LGU+, and Wins participating in the research and development.