TS 33.523
Security Assurance Specification (SCAS) for
Split gNB Product Classes
V19.1.0 (Wzip)
2025/03 25 p.
V18.2.0 (PDF)
2024/03 26 p.
- Rapporteur:
- Dr. Escott, Adrian
Qualcomm CDMA Technologies
full Table of Contents for TS 33.523 Word version: 18.2.0
1 Scope
2 References
3 Definitions of terms, symbols and abbreviations
4 gNB-CU-specific security requirements and related test cases
5 gNB-CU-CP-specific security requirements and related test cases
6 gNB-CU-UP-specific security requirements and related test cases
7 gNB-DU-specific security requirements and related test cases
$ Change history
1 Scope p. 7
The gNB can be deployed as more than one entity by splitting the gNB into gNB-CU and gNB-DU(s) and possibly further splitting the gNB-CU into gNB-CU-CP and gNB-CU-UP(s) (see TS 38.401). The present document contains objectives, requirements and test cases that are specific to the various split gNB network product classes. Test cases for such deployments are provided, are based upon and borrow heavily from the specification for the gNB product class (see TS 33.511). The main differences are the inclusion of cases for the F1 signalling and user plane connection and the E1 signalling connection on the top of the gNB cases as well as some revised cases to account for the split functionality. The present document also refers to the Catalogue of General Security Assurance Requirements (see TS 33.117) and formulates specific adaptions of the requirements and test cases given there, as well as specifying requirements and test cases unique to the various split gNB network product class.
2 References p. 7
3 Definitions of terms, symbols and abbreviations p. 7
4 gNB-CU-specific security requirements and related test cases p. 8
4.1 Introduction p. 8
4.2 Security functional adaptations of requirements and related test cases p. 8
4.2.1 Introduction p. 8
4.2.2 Requirements and test cases deriving from 3GPP specifications p. 8
4.2.2.1 Security functional requirements on the gNB-CU deriving from 3GPP specifications - TS 33.501 [3] p. 8
4.2.2.1.1 Security functional requirements inherited from gNB p. 8
4.2.2.1.2 Control plane data confidentiality protection over N2/Xn/F1 interface p. 9
4.2.2.1.3 Control plane data integrity protection over N2/Xn/F1 interface p. 10
4.2.2.1.4 User plane data confidentiality protection over N3/Xn/F1 interface p. 10
4.2.2.1.5 User plane data integrity protection over N3/Xn/F1 interface p. 10
4.2.3 Technical Baseline p. 10
4.2.4 Operating systems p. 11
4.2.5 Web servers p. 11
4.2.6 Network devices p. 11
4.3 Adaptations of hardening requirements and related test cases p. 11
4.4 Adaptations of basic vulnerability testing requirements and related test cases p. 11
4.4.1 Introduction p. 11
4.4.2 Port Scanning p. 11
4.4.3 Vulnerability scanning p. 11
4.4.4 Robustness and fuzz testing p. 11
5 gNB-CU-CP-specific security requirements and related test cases p. 12
5.1 Introduction p. 12
5.2 Security functional adaptations of requirements and related test cases p. 12
5.2.1 Introduction p. 12
5.2.2 Requirements and test cases deriving from 3GPP specifications p. 12
5.2.2.1 Security functional requirements on the gNB-CU-CP deriving from 3GPP specifications - TS 33.501 [3] p. 12
5.2.2.1.1 Security functional requirements inherited from gNB p. 12
5.2.2.1.2 Control plane data confidentiality protection over N2/Xn/F1/E1 interface p. 13
5.2.2.1.3 Control plane data integrity protection over N2/Xn/F1/E1 interface p. 13
5.2.2.1.4 Ciphering of user data based on the security policy sent by the SMF p. 13
5.2.2.1.5 Integrity of user data based on the security policy sent by the SMF p. 14
5.2.3 Technical Baseline p. 15
5.2.4 Operating systems p. 15
5.2.5 Web servers p. 15
5.2.6 Network devices p. 16
5.3 Adaptations of hardening requirements and related test cases p. 16
5.4 Adaptations of basic vulnerability testing requirements and related test cases p. 16
5.4.1 Introduction p. 16
5.4.2 Port Scanning p. 16
5.4.3 Vulnerability scanning p. 16
5.4.4 Robustness and fuzz testing p. 16
6 gNB-CU-UP-specific security requirements and related test cases p. 16
6.1 Introduction p. 16
6.2 Security functional adaptations of requirements and related test cases p. 17
6.2.1 Introduction p. 17
6.2.2 Requirements and test cases deriving from 3GPP specifications p. 17
6.2.2.1 Security functional requirements on the gNB-CU-UP deriving from 3GPP specifications - TS 33.501 [3] p. 17
6.2.2.1.1 Security functional requirements inherited from gNB p. 17
6.2.2.1.2 Control plane data confidentiality protection over E1 interface p. 17
6.2.2.1.3 Control plane data integrity protection over E1 interface p. 17
6.2.2.1.4 User plane data confidentiality protection over N3/Xn/F1 interface p. 18
6.2.2.1.5 User plane data integrity protection over N3/Xn/F1 interface p. 18
6.2.2.1.6 Integrity protection of user data between the UE and the gNB-CU-UP p. 18
6.2.2.1.7 Ciphering of user data between the UE and the gNB-CU-UP p. 19
6.2.3 Technical Baseline p. 20
6.2.4 Operating systems p. 20
6.2.5 Web servers p. 20
6.2.6 Network devices p. 20
6.3 Adaptations of hardening requirements and related test cases p. 20
6.4 Adaptations of basic vulnerability testing requirements and related test cases p. 20
6.4.1 Introduction p. 20
6.4.2 Port Scanning p. 20
6.4.3 Vulnerability scanning p. 20
6.4.4 Robustness and fuzz testing p. 20
7 gNB-DU-specific security requirements and related test cases p. 21
7.1 Introduction p. 21
7.2 Security functional adaptations of requirements and related test cases p. 21
7.2.1 Introduction p. 21
7.2.2 Requirements and test cases deriving from 3GPP specifications p. 21
7.2.2.1 Security functional requirements on the gNB-DU deriving from 3GPP specifications - TS 33.501 [3] p. 21
7.2.2.1.1 Control plane data confidentiality protection over F1 interface p. 21
7.2.2.1.2 Control plane data integrity protection over F1 interface p. 21
7.2.2.1.3 User plane data confidentiality protection over F1 interface p. 22
7.2.2.1.4 User plane data integrity protection over F1 interface p. 22
7.2.3 Technical Baseline p. 22
7.2.4 Operating systems p. 22
7.2.5 Web servers p. 22
7.2.6 Network devices p. 22
7.3 Adaptations of hardening requirements and related test cases p. 23
7.4 Adaptations of basic vulnerability testing requirements and related test cases p. 23
7.4.1 Introduction p. 23
7.4.2 Port Scanning p. 23
7.4.3 Vulnerability scanning p. 23
7.4.4 Robustness and fuzz testing p. 23
$ Change history p. 24
