Multi-Stage Threat Modeling and Security Monitoring in 5GCN
Robert Pell, Sotiris Moschoyiannis, Emmanouil Panaousis · 2021
This chapter presents a framework for modeling threats for the purpose of identifying security-monitoring requirements in the fifth generation core network (5GCN) that includes sensor placement and detection methods through threat decomposition and threat modeling using graphs. It presents the related work in 5GCN threat assessments and modeling of multi-stage attack scenarios. With threat-based risk assessments, the first step of the process involves the identification of threats, which helps to define the requirements for protecting the network and detection. The chapter demonstrates a method of modeling multi-stage attack threat scenarios using graphs applicable to the 5GCN. It describes how threat graphs can be used to provide decision support on security monitoring through sensor placement and how this can be used for the detection of multi-stage attack threat scenarios. Finally, the chapter outlines the open research challenges and future work.