TS 33.520
5G Security Assurance Specification (SCAS)
for the Non-3GPP InterWorking Function (N3IWF)
V18.1.0 (PDF)
2024/06 11 p.
- Rapporteur:
- Dr. Gao, Feng
China Unicom
Content for TS 33.520 Word version: 18.1.0
1 Scope
2 References
3 Definitions of terms and abbreviations
4 N3IWF-specific security requirements and related test cases
$ Change history
1 Scope p. 5
The present document contains objectives, requirements and test cases that are specific to the Non-3GPP InterWorking Function (N3IWF) network product class. It refers to the Catalogue of General Security Assurance Requirements and formulates specific adaptions of the requirements and test cases given there, as well as specifying requirements and test cases unique to the N3IWF network product class.
2 References p. 5
3 Definitions of terms and abbreviations p. 5
3.1 Terms p. 5
3.2 Abbreviations p. 6
4 N3IWF-specific security requirements and related test cases p. 6
4.1 Introduction p. 6
4.2 N3IWF-specific security functional adaptations of requirements and related test cases p. 6
4.2.1 Introduction p. 6
4.2.2 Security functional requirements on the N3IWF deriving from 3GPP specifications and related test cases p. 6
4.2.2.1 Security functional requirements on the N3IWF deriving from 3GPP specifications - TS 33.501 p. 6
4.2.3 Technical Baseline p. 7
4.2.3.1 Introduction p. 7
4.2.3.2 Protecting data and information p. 7
4.2.3.2.1 Protecting data and information - general p. 7
4.2.3.2.2 Protecting data and information - unauthorized viewing p. 7
4.2.3.2.3 Protecting data and information in storage p. 7
4.2.3.2.4 Protecting data and information in transfer p. 7
4.2.3.2.5 Logging access to personal data p. 7
4.2.3.3 Protecting availability and integrity p. 7
4.2.3.4 Authentication and authorization p. 7
4.2.3.5 Protecting sessions p. 7
4.2.3.6 Logging p. 7
4.2.4 Operating Systems p. 7
4.2.5 Web Servers p. 8
4.2.6 Network Devices p. 8
4.3 N3IWF-specific adaptations of hardening requirements and related test cases. p. 8
4.3.1 Introduction p. 8
4.3.2 Technical Baseline p. 8
4.3.3 Operating Systems p. 8
4.3.4 Web Servers p. 8
4.3.5 Network Devices p. 8
4.4 N3IWF-specific adaptations of basic vulnerability testing requirements and related test cases p. 8
$ Change history p. 9
