TS 33.512
SA3
★
5G Security Assurance Specification (SCAS) –
Access and Mobility management Function (AMF)
use "3GPP‑Page" to get the Word version
for a better overview, the Table of Contents (ToC) is reproduced
for a better overview, the Table of Contents (ToC) is reproduced
V16.1.0 (Wzip)
2019/12 17 p.
WI Acronym: SCAS_5G
Rapporteur: Ms. Deng, Juan
Rapporteur: Ms. Deng, Juan
The present document contains objectives, requirements and test cases that are specific to the AMF network product class. It refers to the Catalogue of General Security Assurance Requirements and formulates specific adaptions of the requirements and test cases given there, as well as specifying requirements and test cases unique to the AMF network product class.
full Table of Contents for TS 33.512 Word version: 16.1.0
1 Scope Word-p. 6
2 References
3 Definitions of terms, symbols and abbreviations
4 AMF-specific security requirements and related test cases Word-p. 7
4.1 Introduction
4.2 AMF-specific adaptations of security functional requirements and related test cases.
A Change history Word-p. 17
4.2.1 Introduction
4.2.2 Security functional requirements on the AMF deriving from 3GPP specifications and related test cases 
4.3 AMF-specific adaptations of hardening requirements and related test cases
4.2.2.1 Authentication and key agreement procedure
4.2.2.2 Void
4.2.2.3 Security mode command procedure Word-p. 9
4.2.2.6 Security in registration procedure Word-p. 14
4.2.3 Technical Baseline
4.2.2.3.1 Replay protection of NAS signalling messages
4.2.2.3.2 NAS NULL integrity protection Word-p. 10
4.2.2.4 Security in intra-RAT mobility Word-p. 11
4.2.2.4.1 Bidding down prevention in Xn-handover
4.2.2.4.2 NAS protection algorithm selection in AMF change Word-p. 12
4.2.2.5 5G-GUTI allocation
4.2.2.6 Security in registration procedure Word-p. 14
4.2.3.1 Introduction
4.2.3.2 Protecting data and information
4.2.4 Operating Systems
4.2.5 Web Servers
4.2.6 Network Devices
4.2.3.2.1 Protecting data and information - general
4.2.3.2.2 Protecting data and information - unauthorized viewing Word-p. 15
4.2.3.2.3 Protecting data and information in storage
4.2.3.2.4 Protecting data and information in transfer
4.2.3.2.5 Logging access to personal data
4.2.3.3 Protecting availability and integrity
4.2.3.4 Authentication and authorization
4.2.3.5 Protecting sessions
4.2.3.6 Logging
4.2.3.2.5 Logging access to personal data
4.3.1 Introduction
4.3.2 Technical baseline
4.3.3 Operating systems Word-p. 16
4.3.4 Web servers
4.3.5 Network devices
4.3.6 Network functions in service-based architecture
4.4 AMF-specific adaptations of basic vulnerability testing requirements and related test cases
4.3.2 Technical baseline
4.3.3 Operating systems Word-p. 16
4.3.4 Web servers
4.3.5 Network devices
4.3.6 Network functions in service-based architecture
