IIT Madras develops software solution to proactively detect and prevent zero-day vulnerability attacks on 5G networks

A new indigenous software technology solution can now proactively detect and prevent zero-day vulnerability attacks in the 5G networks thereby reducing the network downtime. This can help smoothen countrywide communication as 5G networks become its lifeline in the near future. 

IITM Pravartak Technologies Foundation at IIT Madras, a Technology Innovation Hub for Sensors, Networking, Actuators and Control Systems (SNACS), supported by the Department of Science and Technology (DST) under National Mission on Interdisciplinary Cyber Physical Systems (NM-ICPS), along with its incubated startup, is developing an indigenous security testing solution for 5G core network functions and Radio Access Network (RAN) software. This technology solution can automatically identify zero-day vulnerabilities in the network in advance by using techniques such as fuzzing and test oracles. 

The new solution has been manually tested in the 5G security lab of IITM Pravartak. Since it can help avoid the attacks in advance, it protects organisations against loss and saving the credibility of the brands.  

The team used ethical hacking for finding vulnerabilities in the system. They tested the functionality issue in the network, created various attack scenarios based on topology, feature interaction, and the number of nodes involved by following the defined 5G standards of 3GPP. 

The team is testing interoperability and security issues with multi-vendor products. Tests are conducted at the network packet level, the binary level, the code level and also using the code vulnerability scanners. A combination of all these methods will help reducing zero-day attacks by pre-emption mechanism. 

Reducing zero-day vulnerabilities will reduce attack surface area, which in turn will reduce the need to pay ransom and also decrease network downtime of 5G networks which are crucial for communication.