Tech-invite  3GPPspace  IETFspace
21  22  23  24  25  26  27  28  29  31  32  33  34  35  36  37  38  4‑5x
Top   in Index   Prev   Next

TS 33.527
Security Assurance Specification (SCAS) for
3GPP Virtualized Network products

3GPP‑Page   ETSI‑search  
V18.2.0 (Wzip)  2024/03  … p.
Rapporteur:
Mr. Qi, Minpeng
China Mobile Com. Corporation

full Table of Contents for  TS 33.527  Word version:  18.0.1

Here   Top
1 Scope  2 References  3 Definitions of terms, symbols and abbreviations  4 Catalogue of security requirements and related test cases for virtualized network product  4.1 Introduction  4.2 Security functional requirements and related test cases  4.3 Security requirements and related test cases related to hardening  4.4 Basic vulnerability testing requirements  $ Change history 

 

1  Scope  p. 7

The present document contains objectives, requirements and test cases to virtualized network product classes.
Several virtualized network product classes share very similar if not identical security requirements for some aspects. Therefore, these are collected in the present document applicable to many virtualized network product classes. In addition to this catalogue, requirements specific to different network product classes will be captured in separate documents.

2  References  p. 7

3  Definitions of terms, symbols and abbreviations  p. 7

3.1  Terms  p. 7

3.2  Symbols  p. 7

3.3  Abbreviations  p. 8

4  Catalogue of security requirements and related test cases for virtualized network product  p. 8

4.1  Introduction  p. 8

4.1.1  Pre-requisites for testing  p. 8

4.1.2  Use of tools in testing  p. 8

4.1.3  Documentation Requirements  p. 9

4.2  Security functional requirements and related test cases  p. 9

4.2.1  Introduction  p. 9

4.2.2  Security functional requirements deriving from 3GPP specifications and related test cases  p. 9

4.2.3  technical baseline  p. 9

4.2.3.1  Introduction  p. 9

4.2.3.2  Protecting data and information  p. 9

4.2.3.3  Protecting availability and integrity  p. 10

4.2.3.3.1  System handling during overload situations  p. 10
4.2.3.3.2  Boot from intended memory devices only  p. 10
4.2.3.3.3  System handling during excessive overload situations  p. 10
4.2.3.3.4  System robustness against unexpected input  p. 10
4.2.3.3.5  Virtualized Network product software package integrity  p. 10
4.2.3.3.5.1  Overview  p. 10
4.2.3.3.5.2  VNF package and VNF image integrity  p. 10

4.2.3.4  Authentication and authorization  p. 11

4.2.3.5  Protecting sessions  p. 11

4.2.3.6  Logging  p. 11

4.2.4  Operating systems  p. 11

4.2.5  Web servers  p. 11

4.2.6  Network devices  p. 11

4.2.7  Security functional requirements deriving from virtualisation and related test cases  p. 12

4.2.7.1  Security functional requirements on GVNP lifecycle management  p. 12

4.2.7.2  Security functional requirements on executive environment provision  p. 13

4.2.7.3  Instantiating VNF from trusted VNF image  p. 14

4.3  Security requirements and related test cases related to hardening  p. 15

4.3.1  Introduction  p. 15

4.3.2  Technical baseline  p. 15

4.3.2.1  No unnecessary or insecure services / protocols  p. 15

4.3.2.2  Restricted reachability of services  p. 15

4.3.2.3  No unused software  p. 15

4.3.2.4  No unused functions  p. 15

4.3.2.5  No unsupported components  p. 15

4.3.2.6  Remote login restrictions for privileged users  p. 15

4.3.2.7  File system Authorization privileges  p. 16

4.3.3  Operating systems  p. 16

4.3.4  Web servers  p. 16

4.3.5  Network devices  p. 16

4.3.6  Virtualized Network Products  p. 16

4.3.6.1  Traffic separation  p. 16

4.3.6.2  Separation of inter-VNF and intra-VNF traffic  p. 16

4.4  Basic vulnerability testing requirements  p. 17

4.4.1  Introduction  p. 17

4.4.2  Port Scanning  p. 17

4.4.3  Vulnerability Scanning  p. 17

4.4.4  Robustness and Fuzz testing  p. 17

$  Change history  p. 18

Up   Top