TS 33.529
5G Security Assurance Specification (SCAS)
for Short Message Service Function (SMSF)
V19.0.0 (Wzip)
2024/09 17 p.
- Rapporteur:
- Prof. Hanawal, Manjesh Kumar
IIT Bombay
full Table of Contents for TS 33.529 Word version: 19.0.0
1 Scope
2 References
3 Definitions of terms, symbols and abbreviations
4 SMSF-specific security requirements and related test cases
$ Change history
1 Scope p. 6
The present document contains objectives, security assurance requirements and test cases specific to the SMSF network product class. It refers to the Catalogue of General Security Assurance Requirements. It formulates specific adaptations of the requirements and test cases given in the catalogue. It also specifies requirements derived from other technical specifications and test cases unique to the SMSF network product class.
2 References p. 6
3 Definitions of terms, symbols and abbreviations p. 6
4 SMSF-specific security requirements and related test cases p. 7
4.1 Introduction p. 7
4.2 SMSF-specific security functional requirements and related test cases p. 7
4.2.1 Introduction p. 7
4.2.2 Security functional requirements on the SMSF deriving from 3GPP specifications and related test cases p. 7
4.2.3 Technical Baseline p. 7
4.2.3.1 Introduction p. 7
4.2.3.2 Protecting data and information p. 8
4.2.3.3 Protecting availability and integrity p. 8
4.2.3.4 Authentication and authorization p. 8
4.2.3.5 Protecting sessions p. 8
4.2.3.6 Logging p. 8
4.2.4 Operating Systems p. 8
4.2.5 Web Servers p. 8
4.2.6 Network Devices p. 8
4.2.7 Security functional requirements on the SMSF - Non Service-Based Interfaces p. 8
4.2.7.1 Protection on SGd Diameter Interface between SMSF and the Diameter application node p. 8
4.2.7.2 Protection of Diameter Session on SGd Interface p. 9
4.2.7.3 Protecting availability and integrity on Diameter-based SGd interface p. 10
4.2.7.4 Protecting from unknown peers on Diameter-based SGd interface p. 12
4.2.7.5 Protecting availability and integrity on Map-based SS7 interface p. 14
4.3 SMSF-specific adaptations of hardening requirements and related test cases p. 15
4.3.1 Introduction p. 15
4.3.2 Technical Baseline p. 15
4.3.3 Operating Systems p. 15
4.3.4 Web Servers p. 15
4.3.5 Network Devices p. 15
4.3.6 Network Functions in service-based architecture p. 15
4.4 SMSF-specific adaptations of basic vulnerability testing requirements and related test cases p. 16
4.4.1 Introduction p. 16
4.4.2 Port Scanning p. 16
4.4.3 Vulnerability scanning p. 16
4.4.4 Robustness and fuzz testing p. 16
$ Change history p. 17
