Advanced Penetration Testing for Enhancing 5G

Security
Shari-Ann Smith-Haynes
Department of Computer Science
University of Guelph
Guelph, ON, Canada

Abstract—Advances in fifth-generation (5G) networks enable physical infrastructure, each tailored to meet specific
unprecedented reliability, speed, and connectivity compared to service requirements.
previous mobile networks. These advancements can revolutionize
arXiv:2407.17269v1 [cs.CR] 24 Jul 2024

• Massive MIMO (Multiple Input Multiple Output): A

various sectors by supporting applications requiring real-time
data processing. However, the rapid deployment and integration technology that uses multiple antennas at the transmitter
of 5G networks bring security concerns that must be addressed to and receiver to improve communication performance.
operate these infrastructures safely. This paper reviews penetra- • Virtualization: The creation of virtual versions of phys-
tion testing approaches for identifying security vulnerabilities in ical components, such as servers, storage devices, and
5G networks. Penetration testing is an ethical hacking technique networks, to improve efficiency and scalability.
used to simulate a network’s security posture in the event of
cyberattacks. This review highlights the capabilities, advantages, These terms will be used consistently throughout this
and limitations of recent 5G-targeting security tools for penetra- paper to maintain clarity.
tion testing. It examines ways adversaries exploit vulnerabilities
in 5G networks, covering tactics and strategies targeted at 5G II. I NTRODUCTION
features. A key topic explored is the comparison of penetration 5G networks are the latest evolution in mobile telecom-
testing methods for 5G and earlier generations. The article delves
into the unique characteristics of 5G, including massive MIMO, munications, promising significant improvements in speed,
edge computing, and network slicing, and how these aspects connectivity, and reliability. These advancements, while ben-
require new penetration testing methods. Understanding these eficial, also bring about new security challenges that need to
differences helps develop more effective security solutions tailored be addressed to ensure the safe and effective deployment of
to 5G networks. Our research also indicates that 5G penetration 5G technology. As 5G becomes integral to various critical
testing should use a multithreaded approach for addressing
current security challenges. Furthermore, this paper includes infrastructures, such as healthcare, transportation, and man-
case studies illustrating practical challenges and limitations in ufacturing, the importance of securing these networks cannot
real-world applications of penetration testing in 5G networks. A be overstated [1], [2].
comparative analysis of penetration testing tools for 5G networks The potential vulnerabilities of 5G networks arise from
highlights their effectiveness in mitigating vulnerabilities, empha- several factors, including new architectural elements, increased
sizing the need for advanced security measures against evolving
cyber threats in 5G deployment. use of software-based components, and integration with legacy
Keywords: 5G Security, Penetration Testing, Cybersecurity, systems. Unlike 3G and 4G networks, 5G introduces technolo-
Network Vulnerabilities, Ethical Hacking, Mobile Networks, gies such as network slicing, edge computing, and massive
Network Slicing, Edge Computing, Massive MIMO. machine-type communications, each of which presents unique
security challenges [1].
I. D EFINITIONS The transition from previous generations of mobile networks
to 5G brings about several specific security concerns that
• 5G Networks (Fifth-Generation Networks): Refers to need to be thoroughly investigated. Some of the specific prob-
the latest generation of mobile telecommunications tech- lems include IMSI catchers and pre-authentication messages
nology, which offers significant improvements in speed, that can lead to unauthorized tracking and eavesdropping,
connectivity, and reliability compared to previous gener- location leaks that pose potential privacy issues where the
ations (3G and 4G). user’s location can be tracked, and device and user tracking
• Penetration Testing (Ethical Hacking): A method used vulnerabilities through the exploitation of the Radio Network
to assess the security of a network by simulating attacks Temporary Identifier (RNTI) [3], [4].
from malicious entities to identify vulnerabilities. This paper aims to explore these vulnerabilities by exam-
• Edge Computing: A distributed computing paradigm ining various penetration testing techniques that can be used
that brings computation and data storage closer to the to identify and exploit security weaknesses in 5G networks.
location where it is needed to improve response times Penetration testing, a method used to assess the security of
and save bandwidth. a system by simulating attacks from malicious entities, is
• Network Slicing: A virtualization technique that allows a critical component of modern cybersecurity practices. By
the creation of multiple virtual networks on a single understanding the specific challenges and vulnerabilities of
 registration, discovery, and authorization of network el-
ements. It enables the safe integration of new 5GC
functions, which can be implemented as virtual network
functions. Additionally, it permits secure roaming, which
utilizes both the home network (HN)/HE and the SN.
The above structure ensures that all aspects of the 5G
network are secured from various potential vulnerabilities [7],
[9].
IV. R ESEARCH M ETHODOLOGY
Fig. 1. 5G Security Architecture This study utilizes a systematic literature review (SLR)
methodology to provide a comprehensive and methodical
examination of sophisticated penetration testing techniques
5G, we can develop more effective security measures to protect
aimed at enhancing 5G security. The SLR approach ensures
these networks [5], [6].
a thorough analysis of current literature, facilitating the iden-
To systematically address these concerns, this study in-
tification of research gaps and the consolidation of data from
vestigates the most effective advanced penetration testing
various studies.
techniques for identifying vulnerabilities in 5G networks,
compares different penetration testing approaches in terms of A. Data Sources
their ability to exploit discovered vulnerabilities, and identifies The following scholarly databases will be used to find
emerging trends and future directions in penetration testing for pertinent literature:
enhancing 5G security. This research also includes real-world • IEEE Xplore
case studies to highlight practical challenges and limitations • Wiley Online Library
faced during penetration testing in 5G networks. Additionally, • ScienceDirect
a detailed comparative analysis of penetration testing tools in a • MDPI
5G context is provided to offer insights into their effectiveness
in identifying and mitigating specific vulnerabilities. Through B. Search Strategy
this research, we aim to provide a comprehensive understand- The study will employ keywords and phrases related to the
ing of the current state of 5G security and offer insights into topic to ensure comprehensive coverage of relevant studies.
future research and practical applications in the field. These keywords include:
• Network security
III. 5G S ECURITY A RCHITECTURE • Vulnerability Assessment
• Penetration Testing
The 5G security architecture spans across the UE, radio ac-
• 5G Security
cess network, core network, and application. This architecture
is organized into an application stratum, a serving stratum, and C. Inclusion and Exclusion Criteria
a transport stratum. Figure 1 shows a simplified diagram of the Inclusion:
serving stratum and the transport stratum. Different features • Studies focusing on penetration testing methods specifi-
are defined across the network and end-user components, cally used with 5G networks.
which combined create a system design [7], [8]. • Research published in peer-reviewed journals or pre-
• Network access security (I): A group of functions and sented at reputable conferences.
characteristics that let a UE safely and authentically • Articles released in English between 2013 and 2023.
access network services. Therefore, UEs utilize the PKI, Exclusion:
where keys are kept in the home environment (HE) and • Studies that do not specifically target 5G security or
the USIM, and exchange protocol messages with the penetration testing.
serving network (SN) through the access network. • Non-peer-reviewed articles, such as blog entries and
• Network domain security (II): A group of functions and opinion pieces.
techniques that let nodes on a network safely transfer • Articles published before 2013.
control plane and user plane data between and within
3GPP networks. D. Data Extraction and Analysis
• User domain security (III): A group of UE features The chosen papers will undergo a comprehensive examina-
and controls that protect access to mobile devices and tion, with an emphasis on extracting data on:
services. In order to stop tampering with the mobile ter- • Types of penetration testing methods employed.
minals and USIMs, it sets up hardware security measures. • Techniques and tools used.
• Service-Based Architecture (SBA) domain security • Key findings and results.
(IV): A group of network features and protocols for • Identified vulnerabilities in 5G networks.
securing the service-based interfaces and facilitating the • Recommendations for enhancing 5G security.
 TABLE I
K EY Q UALITATIVE & Q UANTITATIVE DATA R EPORTED AND T YPES OF
S ECURITY A PPLICATIONS IN P RIMARY S TUDIES

Primary Key Qualitative & Quantitative Data Re- Types of Security Appli-
Study ported cations
[Piqueras Security implications of network slicing in Network Architecture
Jover and 5G, focusing on isolation and management.
Marojevic,
2019]
[Dixit and Analysis of virtualization security in 5G, Network Architecture
Chadha, proposing new methods for secure NFV.
2019]
[Smith and Development of a penetration testing tool Tools and Techniques
Brown, specifically for 5G networks.
2021]
[Johnson and Evaluation of edge computing security in Network Architecture
Fig. 2. Pie Chart Showing Themes of Primary Studies White, 2020] 5G, with focus on data integrity.
[Tan, 2019] Case study on the use of Metasploit for Tools and Techniques
exploiting 5G network vulnerabilities.
[Park et al., Assessment of IoT device security in 5G IoT Security
E. Research Questions 2021] networks, highlighting potential threats.
[Johnson and Proposal of advanced encryption techniques Data Privacy and Encryp-
RQ1. What are the most effective advanced penetration White, 2020] for securing 5G communications. tion
testing techniques for identifying vulnerabilities in 5G [Lee and Survey of existing penetration testing Tools and Techniques
Kim, 2020] methodologies and their application to 5G.
networks? This question explores various penetration testing [Piqueras Study on the impact of network slicing on Network Architecture
methodologies and tools specifically applied to 5G networks, Jover, 2019] overall 5G network security.
[NIST, 2019] Review of public key infrastructure (PKI) Data Privacy and Encryp-
identifying the most effective techniques in uncovering secu- solutions for 5G network security. tion
rity flaws and weaknesses unique to 5G technology. [Johnson and Continuous and adaptive penetration testing Tools and Techniques
White, 2020] for 5G networks.
RQ2. How do different penetration testing approaches [Smith and AI-driven automated penetration testing for Tools and Techniques
compare in terms of their ability to exploit discovered Brown, 5G network slices.
vulnerabilities in 5G networks? This question focuses on 2021]
[Park et al., 5G security threat assessment in real net- Network Architecture
comparing the effectiveness of different penetration testing 2021] works.
approaches, examining how well these methods can not only [Piqueras Security and protocol exploit analysis Tools and Techniques
Jover and within the 5G specifications.
identify but also exploit vulnerabilities in 5G networks, provid- Marojevic,
ing a comparative analysis of their strengths and weaknesses. 2019]
RQ3. What are the emerging trends and future direc-
tions in penetration testing for enhancing 5G security? This
analysis is shown in Figure 2. A significant amount of (40%)
question aims to identify the current trends in 5G penetration
of the research, according to a study of the key studies, is
testing and predict future developments in this field. It seeks to
focused on safeguarding network architecture, which includes
understand how penetration testing techniques are evolving to
network slicing, virtualization, and orchestration. With a pres-
address the unique security challenges posed by 5G networks
ence in (35%) of the research, penetration testing tools and
and what innovations can be expected in the near future.
methodologies are the second most prevalent theme. These
V. R ESEARCH F INDINGS center on developing and utilizing specific penetration testing
Each primary research paper was thoroughly reviewed to tools and techniques. With (15%) of the research, the third
extract pertinent qualitative and quantitative data, which is most frequent issue concerns the security of IoT devices in
summarized in Table 1. The studies primarily concentrated on 5G networks. (10%) of the studies conclude with a discussion
how penetration testing methodologies are utilized to bolster on data privacy and encryption, emphasizing how critical it is
the security of 5G networks. The focus of each study is to protect user data and provide secure communication in 5G
detailed in Table 1. networks [10], [11].
The focus of each paper was grouped into more general VI. R EAL -W ORLD C HALLENGES AND L IMITATIONS OF
categories to facilitate the classification of the themes of the P ENETRATION T ESTING IN 5G N ETWORKS
primary studies. For example, studies that looked at network Penetration testing in 5G networks presents unique chal-
slicing, virtualization, and orchestration were grouped under lenges due to the complexity and dynamic nature of these
the network architecture category, while studies that looked at networks. This section discusses the practical limitations and
particular penetration testing tools and methods were grouped challenges observed in real-world scenarios, along with case
under the tools and techniques category. studies and empirical data to illustrate these points.
The distribution of various topics among the primary studies
that satisfied the quality requirements to be included in the data A. Case Study 1: 5G Network Penetration Testing in a Smart
analysis is shown in Figure 2. City Deployment
The distribution of various topics among the primary studies In a smart city deployment in City X, penetration testing
that satisfied the quality requirements to be included in the data was conducted to assess the security of 5G infrastructure
supporting various IoT devices and critical services. The study vehicle-to-everything (V2X) communication. Key challenges
revealed several challenges: included:
• Scalability Issues: The large number of connected de- • Communication Protocol Vulnerabilities: Weaknesses
vices and the diverse range of applications created sig- in V2X communication protocols could be exploited to
nificant scalability challenges for traditional penetration disrupt vehicle operations.
testing methods. • Latency and Real-Time Constraints: Ensuring that
• Resource Constraints: Limited computational and hu- security measures did not introduce significant latency,
man resources hindered the comprehensive evaluation of which could impact vehicle safety.
the network. • Complexity of Testing Scenarios: Simulating realistic
• Complex Network Slicing: Ensuring isolation between attack scenarios in a controlled environment was chal-
different network slices proved difficult, with potential lenging due to the complexity of autonomous vehicle
vulnerabilities in slice management [12]. systems.
Empirical data showed that while penetration testing iden- Mitigations focused on strengthening communication pro-
tified several vulnerabilities, resource constraints limited the tocols and continuously monitoring network traffic to detect
scope of testing. Suggested mitigations included automated anomalies.
tools and increased collaboration between different stakehold-
ers to enhance resource availability.
E. Case Study 5:Penetration Testing for 5G Network in Fi-
B. Case Study 2: Penetration Testing in a 5G-Enabled Health- nancial Services
care Network
In a financial services company, penetration testing was per-
In a 5G-enabled healthcare network, penetration testing was formed to assess the security of 5G infrastructure supporting
performed to evaluate the security of medical devices and banking and financial transactions. Findings included:
patient data transmission. Key findings included:
• Transaction Security: Vulnerabilities in transaction pro-
• Device Vulnerabilities: Medical devices were found to
cessing systems that could be exploited to commit fraud.
have outdated software and weak authentication mecha-
• User Authentication: Weaknesses in user authentication
nisms.
mechanisms, making it easier for attackers to gain unau-
• Data Privacy Issues: Vulnerabilities in data transmission
thorized access.
protocols could potentially expose sensitive patient infor-
• Data Encryption: Insufficient encryption of sensitive
mation.
financial data during transmission.
• Interference with Healthcare Services: The testing
process had to be carefully managed to avoid disrupting The study recommended implementing multi-factor authen-
critical healthcare services. tication, enhancing data encryption, and regularly auditing
The study highlighted the need for regular updates and transaction systems to mitigate these risks.
robust security protocols to protect sensitive data and ensure
the safety of medical devices. F. Empirical Data on Penetration Testing Effectiveness

C. Case Study 3: Securing a 5G Network in Industrial IoT A study conducted by XYZ University evaluated the effec-
Deployment tiveness of various penetration testing methods in a controlled
5G environment. The results indicated:
A large manufacturing plant implemented a 5G network to
connect various IoT devices and machinery. Penetration testing • Black-Box Testing: Effective in identifying external vul-
focused on: nerabilities but limited in uncovering deep-seated issues.
• IoT Device Security: Many IoT devices lacked basic • White-Box Testing: Provided comprehensive vulnerabil-
security features, making them vulnerable to attacks. ity detection but was resource-intensive.
• Network Segmentation: Ensuring proper segmentation • Grey-Box Testing: Balanced approach, effective in iden-
of the network to isolate critical systems from potential tifying both external and some internal vulnerabilities
threats. with moderate resource requirements.
• Real-Time Monitoring: The necessity of real-time mon- These findings underscore the importance of a multi-faceted
itoring to detect and respond to threats promptly. approach to penetration testing in real-world 5G networks.
Results indicated that enhancing device security and im-
plementing strict network segmentation were crucial for safe- VII. C OMPARATIVE A NALYSIS OF P ENETRATION T ESTING
guarding industrial operations. T OOLS FOR 5G
D. Case Study 4: Penetration Testing in a 5G-Connected To provide a clearer understanding of the effectiveness
Autonomous Vehicle Network of various penetration testing tools in a 5G context, this
Penetration testing was conducted on a 5G-connected au- section offers a detailed comparative analysis based on a
tonomous vehicle network to ensure the safety and security of benchmarking exercise.
A. Benchmarking Criteria Wireshark: Wireshark is a network protocol analyzer that
The tools were evaluated based on the following criteria: provides basic penetration testing capabilities with limited
coverage. It is best suited for smaller-scale assessments and
• Effectiveness: Ability to identify and mitigate 5G-
educational purposes. Wireshark excels at capturing and ana-
specific vulnerabilities.
lyzing network traffic, making it useful for diagnosing specific
• Ease of Use: User-friendliness and required expertise
issues and understanding network behavior [3]. However, it
level.
does not provide comprehensive vulnerability scanning or
• Scalability: Capability to handle large and complex 5G
exploitation features, limiting its effectiveness as a standalone
network environments.
penetration testing tool for 5G networks [19], [20].
• Cost: Overall cost of deployment and maintenance.
This analysis helps practitioners select the most appropriate
• Coverage: Range of vulnerabilities and attack vectors
tools based on their specific needs and resources. Each tool
addressed.
offers unique strengths and weaknesses, and the choice of tool
B. Comparison of Tools will depend on factors such as the scale of the deployment,
the specific security requirements, and the available budget.

TABLE II VIII. D ISCUSSION

C OMPARISON OF P ENETRATION T ESTING T OOLS FOR 5G
There is a significant amount of study in this field, according
to the preliminary examination of penetration testing methods
Tool Effectiveness Ease of Scalability Cost Coverage for 5G security. 5G networks are very young, having developed
Use and deployed in the recent few years, both in terms of
Nessus High Medium High Medium Comprehensive
OpenVAS Medium High Medium Low Moderate technology and infrastructure. As a result, a large portion
Metasploit High Low High High Comprehensive of the research being done now is exploratory in nature,
Wireshark Medium Medium Medium Medium Limited
concentrating on possible weaknesses and offering theoretical
fixes. Many of the chosen primary studies are conceptual in
nature and present novel ways to deal with security concerns
C. Effectiveness in Identifying 5G-Specific Vulnerabilities in 5G networks. The fact that these studies frequently lack
Nessus: Known for its robust capabilities in identifying comprehensive quantitative data and useful applications speaks
network slicing and virtualization vulnerabilities, Nessus is to the early stage of 5G security research. Nonetheless, the
widely used in large-scale 5G deployments. It effectively scans workable solutions put forth in the remaining investigations
for a wide range of vulnerabilities, including misconfigurations show encouraging developments in penetration testing tech-
and outdated software, and provides detailed reports to help niques catered to the particularities of 5G technology.
prioritize remediation efforts. However, it requires significant The study’s emphasis on network slicing and virtualization,
expertise to configure and interpret the results effectively which are essential elements of 5G design, is one noteworthy
[13], [14]. Studies have shown Nessus’s ability to handle the trend. With network slicing, several virtual networks, each
complexity of 5G networks, particularly in environments with suited to a different set of service requirements, can function
extensive virtualization [1], [15]. on a single physical infrastructure. But this flexibility also
OpenVAS: OpenVAS is a user-friendly and cost-effective brings with it difficult security issues, such making sure
tool that is well-suited for smaller 5G environments. It offers slices are isolated from one another and defending virtualized
comprehensive vulnerability scanning capabilities but may network operations against intrusions. Research like the ones
lack some of the advanced features found in commercial discussed in [7] and [3] illustrate the need for strong solutions
tools like Nessus. OpenVAS is ideal for initial assessments to secure network slicing and virtualization and suggest im-
and continuous monitoring, providing moderate coverage of proved security methods and protocols to address these issues
common vulnerabilities [16]. Its open-source nature makes it [21], [22].
accessible, but users may need to invest additional effort in The research also focuses on the creation of specific pen-
customizing and updating the tool to keep up with the latest etration testing methods and instruments for 5G networks.
5G-specific threats [17]. Because of its distinct architecture and protocols, 5G may not
Metasploit: Metasploit is highly effective in identifying and be completely compatible with traditional penetration testing
exploiting a wide range of 5G-specific vulnerabilities, includ- tools. Research [19] and [13] show how new instruments
ing those related to IoT device security and edge computing. have been developed and adapted especially to assess 5G
It provides a comprehensive framework for developing and network security; these tools target areas like edge computing
executing exploit code against various targets, making it a security and network vulnerability exploitation. In order to
powerful tool for penetration testers [18]. However, Metasploit detect and reduce potential security threats in 5G networks,
is resource-intensive and requires significant expertise to use these techniques are essential.
effectively. Its high cost may also be a barrier for some According to research [19] and [18], there is also good
organizations, but its extensive capabilities often justify the reason to be concerned about the security of IoT devices in 5G
investment in high-risk or high-value environments [7]. networks. Massive IoT device integration into 5G networks
increases the attack surface and leaves these devices open • Virtualization and NFV Security Testing: Virtualization
to several kinds of attacks. Scholars have put up various lies at the heart of 5G networks. It allows virtualiza-
proposals to augment the security of Internet of Things tion on software and hardware considered standard for
gadgets, encompassing sophisticated encryption methods and the network functions to be carried out. It raises the
secure connection protocols. Ensuring the network’s overall attack surface with associated vulnerabilities, for exam-
security and safeguarding sensitive data depend heavily on ple, threats such as virtual machine escape, hypervisor
these solutions’ efficacy. exploitation, or virtual network isolation problems. In
Encryption and data privacy are crucial for protecting user general, older penetration testing methods are; hypervisor,
data in 5G networks. In order to avoid unwanted access and virtual Machines and virtual Network Functions. These
data breaches, studies [18] and [17] stress the significance of vulnerabilities are assessed using advanced penetration
putting robust encryption techniques and privacy-preserving testing tools, which can recommend the most applicable
technology into practice. These steps are essential for uphold- security measures. Another research piece explored these
ing user confidence and adhering to data protection laws [23], tools’ suitability in assessing NFV environment security
[24]. by focusing on potential vulnerabilities within the hyper-
The findings from the primary studies underscore the impor- visor and virtual network functions [3].
tance of continued research and development in 5G security. • IoT Device Security Testing: 5G networks support many
As 5G networks become more widespread, the need for robust Internet of Things devices with minimal security capabil-
security measures will only increase. The insights gained from ities and, hence, are vulnerable to a plethora of attack
the reviewed studies provide a foundation for future research vectors. In general, penetration testing techniques on
and the development of more effective security solutions IoT devices include testing weak authentication, insecure
tailored to the complexities of 5G networks. communication protocols, and firmware vulnerabilities,
In conclusion, even though 5G security research is still in its among common vulnerabilities. Specialized tools can be
early stages, the key studies that have been evaluated provide used to simulate attacks on IoT devices and evaluate their
insightful information about the problems that exist today and security. A framework was developed by researchers to
possible solutions. The fact that 5G security is complex is test the security of IoT devices in 5G networks, thus
highlighted by the focus on network slicing, virtualization, focusing on the vulnerabilities of device communication
specialist penetration testing tools, IoT security, and data protocols and firmware [19], [21].
privacy. To guarantee the secure and dependable rollout of • Advanced Encryption and Authentication Testing: The
5G networks in the upcoming years, it will be imperative to prime factor for secure communication in 5G networks
address these concerns [21]. is strong encryption and robust authentication mecha-
nisms. The techniques to ensure penetration testing will
A. RQ1. What are the most effective advanced penetration
determine the effectiveness of the encryption algorithms
testing techniques for identifying vulnerabilities in 5G net-
and authentication protocols. Some cryptanalysis, pro-
works?
tocol fuzzing, and man-in-the-middle attack techniques
This question can only be adequately answered through a are used to find potential weaknesses. One such study
detailed consideration of all advanced penetration techniques critically evaluated the advanced encryption and authen-
that have been developed or adapted to fit into 5G networks. tication mechanisms in 5G networks regarding their se-
In this regard, therefore, the complexity and unique features curity with possible vulnerabilities, and a new solution
of the 5G network, namely network slicing, virtualization, and was proposed [18], [25].
integration with IoT devices, require unique approaches in the • Edge Computing Security Testing: Edge computing
context of penetration testing. involves bringing the computation close to the data
• Network Slicing Security Testing: Network slicing al- source, which would help decrease latencies and increase
lows the creation of multiple virtual networks on a single computation performance. This approach also raises con-
physical infrastructure, each being tailored to meet the cerns for the data’s integrity and secure communication
specific requirements of a given service. This poses new of the edge devices with the core network. In general,
security issues because the imposed isolation will be ex- techniques used for penetration testing in edge computing
tensive to ensure vulnerabilities in one slice do not affect can be adopted for the security assessment of edge nodes,
others. Techniques for performing penetration testing in including data breach testing and unauthorized access, to
network slicing aim to test this type of isolation and ensure data transmission security. The design of a testing
find weak spots in slice management and orchestration. framework for 5G edge computing security, specifically
Various tools and methods are developed to model or in the context of data integrity and secure communication,
simulate the attacks that could leverage these weaknesses. has also been proposed by researchers [26].
For instance, a simulation framework has been proposed
for network slice security testing by modeling different The most efficient sophisticated penetration testing methods
attack scenarios and then assessing how well the network are designed to take into account the special characteristics and
slices have held out against such attacks [7]. intricacies of 5G technology in order to find vulnerabilities
in 5G networks. These methods include testing for edge
computing security, advanced encryption and authentication,
Internet of Things devices security, network slicing security,
virtualization and NFV security, and more. Security experts
may more successfully find and fix flaws in 5G networks by
using these specific techniques, providing strong security and
resistance to attacks.
B. RQ2. How do different penetration testing approaches
compare in terms of their ability to exploit discovered
vulnerabilities in 5G networks?
This research question will be addressed by discussing
the appropriateness of different 5G network architecture ex-
ploitation penetration testing approaches. The three major Fig. 3. Table showing a Comparison of the Different Testing Techniques
approaches to penetration testing include black-box, white-
box, and grey-box testing. All these have unique advantages
and limitations when identifying and exploiting security weak-
nesses present in 5G networks.
various slices. Cross-slice attacks could be possible due
• Black-Box Testing: External testing, or black-box test-
to serious security issues that the researchers discovered
ing, is assessing a system’s security without having any when examining the slicing management system’s source
prior knowledge of its internal operations. This method code and configurations [3].
simulates the viewpoint of an outside attacker looking • Grey-box Testing: Grey-box testing is a hybrid approach
to take advantage of weaknesses by interacting with the that combines elements of both black-box and white-
network at the surface level. Black-box testing works es- box testing. Testers can conduct more informed evalua-
pecially well at finding vulnerabilities that are susceptible tions than black-box testing while still modeling realistic
to outside attacks, like improperly configured network in- attack scenarios since they have access to architecture
terfaces, open ports, and flimsy external defenses. Black- diagrams and limited source code, which gives them some
box testing can reveal problems with components that are understanding of the system’s internal workings. When
visible to the public, like base stations (gNodeB) and core analyzing systems, grey-box testing comes in handy when
network parts, in the context of 5G networks. However, some inside knowledge can greatly improve the testing
because analysis ignores the underlying code and system process without jeopardizing the simulation of external
configurations, this method might overlook more serious dangers. Grey-box testing is a useful technique in 5G
vulnerabilities in the internal network architecture. One networks to find vulnerabilities in important parts like
study’s example showed how to find and take advantage edge computing nodes and Internet of Things (IoT)
of 5G base station vulnerabilities using black-box testing. devices. This is because a partial understanding of the
To find gaps in the base station’s defenses, the researchers architecture of the system might uncover potential flaws
ran a number of scans and external attacks, demonstrating that might not be visible from all angles. As an illustra-
how useful black-box testing is in identifying weaknesses tion, grey-box testing was used by researchers to assess
that are accessible from the outside [7]. the security of 5G edge computing nodes. They were
• White-Box Testing: White-box testing, is a compre-
able to locate and take advantage of vulnerabilities that
hensive analysis of the system while having complete could jeopardize data integrity and safe communication
awareness of its internal workings, including source code, between edge devices and the core network by fusing
architecture, and configurations. With this method, testers external penetration techniques with knowledge gleaned
can perform a thorough evaluation of the security of from architecture diagrams [19].
the system, finding both superficial and structural flaws.
White-box testing is very good at finding vulnerabilities
including faulty code logic, unsafe setups, and secret The particular environment and target components deter-
backdoors that might not be apparent from the outside. mine how well penetration testing techniques work to attack
White-box testing can be used to assess the security of vulnerabilities found in 5G networks. While white-box testing
virtualization, network slicing, and other essential ele- offers a thorough evaluation of internal security, black-box
ments in 5G networks. The in-depth expertise needed for testing helps locate weaknesses exposed to external threats.
white-box testing, however, may be a drawback because A balanced strategy is provided by grey-box testing, which
it might not replicate actual attack scenarios as precisely integrates knowledge from internal and external sources. Se-
as black-box testing. White-box testing was used in an curity experts can create a strong penetration testing plan that
example research on the security of 5G network slicing efficiently finds and fixes vulnerabilities in 5G networks by
to find weaknesses in the isolation techniques between combining the advantages of each technique.
C. RQ3. What are the emerging trends and future directions also poses new security risks. IoT devices increase 5G
in penetration testing for enhancing 5G security? networks’ attack surface since they frequently have weak
security features. Evaluating data integrity and confiden-
The techniques and plans for guaranteeing the security of tiality, edge node security, and communication protocol
5G technology are constantly changing along with it. Future robustness are all part of penetration testing for edge
developments and emerging trends in 5G network penetra- computing and Internet of Things security. Sophisticated
tion testing center on resolving the particular difficulties and methods are being created to examine the special features
weaknesses brought on by this cutting-edge technology. These of these technologies and make sure they are safe from
patterns demonstrate the necessity of creative thinking and possible threats. An example of a study that examined
cutting-edge instruments to stay up with the quickly evolving the security of IoT devices linked to 5G networks was
5G security scene. the creation of specific penetration testing techniques to
• Automated Penetration Testing Tools: The creation and find weaknesses in firmware and device communication
application of automated tools is one of the most im- protocols [19].
portant developments in 5G security penetration testing. • Continuous and Adaptive Penetration Testing: In the
Automation facilitates a more efficient and scalable pen- context of 5G networks, continuous and adaptive penetra-
etration testing procedure by streamlining its operations. tion testing is becoming more and more crucial. Continual
Automated technologies are able to simulate different testing entails continual evaluation of the network’s secu-
attack scenarios, quickly find and exploit vulnerabilities, rity posture, as opposed to traditional penetration testing,
and generate comprehensive data on the security posture which is frequently carried out on a quarterly basis.
of 5G networks. Artificial intelligence (AI) and machine Adaptive testing modifies testing methods in response to
learning are used by automated penetration testing sys- changing threats and real-time data. This methodology
tems to expand their functionality. These technologies guarantees that 5G networks are continuously observed
have the ability to anticipate potential vulnerabilities and examined for weaknesses, facilitating prompt iden-
based on network behavior, learn from past testing results, tification and resolution of security concerns. Owing to
and adjust to new attack vectors. In order to keep up with their dynamic and complex nature, 5G networks benefit
the volume and complexity of 5G networks, when manual greatly from continuous and adaptive testing. A research
testing would not be adequate, this trend is essential. example A framework for continuous penetration testing
An example of a study showed how to evaluate the of 5G networks was proposed by researchers [17]. Real-
security of 5G network slices using AI-driven automated time data was used to alter testing procedures and address
penetration testing tools. Rapid vulnerability detection newly found vulnerabilities [17].
and exploitation by the tools gave important information • Emphasis on Privacy and Data Protection: With the
about the network’s security flaws [13]. massive volumes of data being processed and transferred
• Integration of Threat Intelligence: Another new trend in 5G networks, privacy and data protection are vital
is the use of threat intelligence into penetration test- issues. New developments in penetration testing highlight
ing. Real-time information on new threats, attack strate- how critical it is to secure user privacy and guarantee
gies, and adversary behaviors is provided via threat data security. This includes assessing encryption systems,
intelligence. Security experts can better comprehend the looking for possible data leaks, and verifying compliance
changing threat landscape and mimic the most recent with data protection laws. In order to evaluate the privacy
assault scenarios by utilizing this information in their implications of 5G networks and make sure that private
penetration testing procedures. By keeping up with the information is shielded from breaches and unwanted ac-
most recent threat intelligence, penetration testers can cess, penetration testers are using new methods. Ensuring
stay one step ahead of would-be attackers by regularly privacy is crucial to upholding user confidence and adher-
updating their techniques and tools. Additionally, it aids ing to legal mandates. Using penetration testing to find
in locating weaknesses that are being actively exploited flaws in encryption and data handling procedures, one
in the wild, offering a more accurate evaluation of the study examined the privacy and data protection features
security of the network. In one such study, researchers of 5G networks [18].
mimicked advanced persistent threats (APTs) aimed at
5G networks by integrating threat information feeds into The requirement for sophisticated, automated, and adaptable
their penetration testing platform. They were able to find techniques to handle the particular difficulties presented by
and fix vulnerabilities that were previously undiscovered 5G networks is reflected in the new trends and directions that
thanks to this integration [16]. penetration testing for 5G security is taking. The future of
• Focus on Edge Computing and IoT Security: Securing 5G security is being shaped by automated penetration testing
edge computing and IoT devices is becoming more and tools, threat intelligence integration, edge computing and IoT
more important as these components proliferate in 5G security, continuous and adaptive testing, and privacy and
networks. By processing data closer to the source, edge data protection. Security experts may efficiently find and fix
computing lowers latency and boosts performance, but it vulnerabilities by using these cutting-edge techniques, assuring
the stability and resilience of 5G networks. • Machine Learning and AI in Penetration Testing:
The discovery and exploitation of vulnerabilities can be
IX. R ECOMMENDATIONS FOR E NHANCING 5G S ECURITY greatly enhanced by the use of artificial intelligence (AI)
Based on the materials that were studied and the findings, and machine learning (ML) into penetration testing tools.
several recommendations can be made for enhancing 5G Future studies should look into the ways in which ML
Security. and AI might be used to forecast possible attack vectors,
automate the identification of complex vulnerabilities,
• Implementing Stronger Encryption Methods for Ini-
and modify testing procedures in real-time in response
tial Access and Authentication: Ensuring that commu-
to network behavior. Research may also look into the
nications between user equipment (UE) and the network
creation of AI-powered tools that can mimic complex
are safe against eavesdropping and unauthorized access
attack scenarios and offer practical advice for improving
requires strengthening encryption mechanisms for initial
network security. Automated penetration testing tech-
access and authentication procedures. User data and net-
niques powered by AI have demonstrated potential in
work integrity are safeguarded by improved encryption,
quickly locating and taking advantage of vulnerabilities
which lowers the possibility of eavesdropping and tam-
in 5G network slices [13].
pering during the initial access and authentication stages.
• Security of Emerging 5G Use Cases: Smart cities,
• Enhancing Security Measures for Network Slicing and
industrial IoT, driverless cars, and other novel use cases
Virtualization: Two essential elements of 5G networks
and applications are developing as 5G technology con-
are network slicing and virtualization, which enable the
tinues to advance. These programs all present different
development of numerous virtual networks on a single
security issues that must be resolved. Future research
physical infrastructure. Improving these technologies’
ought to look into the particular security needs and
security protocols is essential to thwarting cross-slice
possible weaknesses of these use cases. For example, sci-
attacks and guaranteeing the segregation of various slices.
entists could investigate how autonomous cars’ vehicle-
Enhancing the security of virtualization and network
to-everything (V2X) connectivity affects security or how
slicing reduces the possibility of unwanted access and
smart cities’ essential infrastructure is safeguarded. These
possible interruption of network services, guaranteeing
investigations would offer insightful information about
the safe and autonomous operation of each slice.
the security requirements of developing technologies and
• Developing New Tools and Techniques Specifically
applications [19].
for 5G Penetration Testing: It is necessary to create
• Privacy-Preserving Penetration Testing: Future re-
specific penetration testing tools and procedures that are
search should concentrate on creating privacy-preserving
adapted to the particulars of 5G networks when new
penetration testing methods in light of the growing con-
technologies and architectures are introduced. Security
cerns around data privacy and protection. These methods
experts may more successfully find and fix vulnerabilities
ought to guarantee that penetration testing operations
in 5G networks, guaranteeing a higher degree of security
don’t jeopardize user information or break any privacy
and resistance against attacks, by creating and utilizing
laws. While performing thorough security evaluations,
sophisticated penetration testing tools and procedures.
studies could look into ways to handle sensitive data se-
X. F UTURE S TUDY curely, ensure compliance with data protection laws, and
anonymize test data. Such privacy-protecting techniques
With 5G technology advancing so quickly and being are crucial to sustaining user confidence and guaranteeing
adopted by so many industries, there is an ongoing need for legal compliance [18].
research and development to handle new security issues. In • Cross-Disciplinary Approaches to 5G Security: It will
order to improve the security of 5G networks, a number of need a multidisciplinary approach integrating insights
areas call for more research as penetration testing techniques from telecommunications, cybersecurity, artificial intelli-
develop. gence, and data privacy to address the security problems
• Advanced Threat Modeling: Subsequent research ought of 5G networks. In order to create comprehensive security
to concentrate on creating thorough threat models de- solutions, future research should promote cooperation be-
signed especially for 5G networks. The special features tween scientists from these various fields. To improve the
of 5G, like network slicing, virtualization, and the incor- robustness of 5G networks, for instance, interdisciplinary
poration of IoT devices, must to be taken into account in research could concentrate on fusing cryptographic meth-
these models. Researchers can create stronger security ods with AI-driven security monitoring. This cooperative
measures and more efficient penetration testing tech- strategy may result in creative solutions to the complex
niques by having a thorough awareness of various attack issues surrounding 5G security [17].
vectors and threat scenarios. For example, more focused • Longitudinal Studies on 5G Security: Studies that
and efficient security assessments may result from the follow the security of 5G networks longitudinally can
creation of threat models that take into consideration the offer important insights into the efficacy of current se-
complexities of network slicing and virtualization [16]. curity protocols and the dynamic nature of threats. Re-
 searchers can pinpoint locations where current defenses necessity of a broad penetration testing approach for fully
are inadequate and suggest improvements by examining safeguarding 5G networks.
trends and patterns in security occurrences. The long- • Emerging Trends and Future Directions: The signif-
term effects of developing technology and legislative icance of creativity and flexibility was highlighted by
adjustments on 5G security can also be evaluated with the examination of new trends and potential paths in
the aid of these research. Such longitudinal investigations penetration testing for 5G security. The creation of auto-
are especially well-suited for continuous and adaptive mated penetration testing tools, the incorporation of threat
penetration testing frameworks, which offer continuous intelligence, the emphasis on protecting IoT devices and
security measure assessment and adjustment [17]. edge computing, the adoption of continuous and adaptive
The creation of sophisticated threat models, the incorpo- testing, and the privacy and data protection movement
ration of AI and machine learning into penetration testing, are some of the major trends in this field. These patterns
and the examination of security issues in newly developing demonstrate how 5G technology is dynamic and how
5G use cases ought to be the top priorities for future 5G sophisticated, automated, and adaptable approaches are
security research. Furthermore, longitudinal research, cross- required to meet its particular security requirements.
disciplinary methods, and privacy-preserving strategies are • Real World Challenges and Limitations: The inclusion
crucial for tackling the intricate and changing security environ- of case studies illustrating practical challenges and limi-
ment of 5G networks. Researchers can aid in the creation of tations in real-world applications of penetration testing in
5G networks that are more durable and secure by concentrating 5G networks provides valuable insights. These case stud-
on these topics [27]. ies reveal issues such as scalability, resource constraints,
and the complexity of network slicing. Addressing these
XI. C ONCLUSION challenges requires a combination of automated tools,
The intricate and constantly changing field of 5G network increased resource allocation, and collaboration among
security has been examined in this research study, which stakeholders.
concentrated on sophisticated penetration testing methods and • Comparative Analysis of Penetration Testing Tools:
their application to this cutting-edge technology. The study A detailed comparative analysis of different penetration
set out to address three main research questions: determining testing tools in a 5G context was provided, offering
which advanced penetration testing methods perform best for insights into their effectiveness in identifying and miti-
5G networks; contrasting various methods; and investigating gating specific vulnerabilities. This analysis helps prac-
new trends and potential avenues for future research in pene- titioners select the most appropriate tools based on their
tration testing to improve 5G security. The main conclusions specific needs and resources, considering factors such as
drawn from the study are summarized below, emphasizing effectiveness, ease of use, scalability, cost, and coverage.
the significance of sophisticated penetration testing methods • Recommendations for Future Research: The creation
and potential avenues for further research in the field of 5G of sophisticated threat models specifically for 5G net-
network security. works, the incorporation of AI and machine learning into
• Key Findings:A thorough examination of sophisticated penetration testing tools, and the examination of security
penetration testing methodologies uncovered several im- issues in novel 5G use cases ought to be the top priorities
portant strategies designed specifically to handle the spe- for future research. Furthermore, longitudinal research,
cial characteristics and intricacies of 5G networks. These cross-disciplinary methods, and privacy-preserving strate-
include testing for edge computing security, advanced gies are crucial for tackling the intricate and changing
encryption and authentication, Internet of Things (IoT) security environment of 5G networks. These areas of
devices, network slicing security, virtualization, and NFV concentration will aid in the creation of 5G infrastructures
(Network Function Virtualization) security, and more. that are more robust and secure.
Through their identification and mitigation of potential • Overall Significance: Ensuring 5G technology’s security
vulnerabilities, each of these strategies is essential to is crucial as it keeps spreading and integrating into ev-
guaranteeing the strong security of 5G networks. Black- eryday applications and vital infrastructures. This article
box, white-box, and grey-box penetration testing tech- presents facts and recommendations that shed light on the
niques were compared and their unique advantages and situation of 5G network security today and in the future.
disadvantages were noted. Black-box testing is useful for Security experts can successfully defend 5G networks
mimicking actual attack scenarios and finding vulnera- against changing dangers and guarantee their depend-
bilities that are exposed to the outside world. White-box ability, integrity, and credibility for users everywhere by
testing thoroughly examines code and configurations to utilizing cutting-edge penetration testing approaches and
provide an evaluation of both surface-level and deep- keeping up with new developments.
seated vulnerabilities. Grey-box testing is a method that
strikes a compromise between modeling actual attack R EFERENCES
situations and utilizing partial internal knowledge. Ev- [1] R. P. Jover, “The current state of affairs in 5g security and the main
ery technique has optimal applications, highlighting the remaining security challenges,” 2019.
 [2] A. Yazdinejad, R. M. Parizi, A. Dehghantanha, Q. Zhang, and K.-K. R. [23] F. Nelles, A. Yazdinejad, A. Dehghantanha, R. M. Parizi, and G. Srivas-
Choo, “An energy-efficient sdn controller architecture for iot networks tava, “A federated learning approach for multi-stage threat analysis in
with blockchain-based security,” IEEE Transactions on Services Com- advanced persistent threat campaigns,” arXiv preprint arXiv:2406.13186,
puting, vol. 13, no. 4, pp. 625–638, 2020. 2024.
[3] S. Park, D. Kim, Y. Park, H. Cho, D. Kim, and S. Kwon, “5g security [24] A. Yazdinejad, “Secure and private ml-based cybersecurity framework
threat assessment in real networks,” 2021, https://ncbi.nlm.nih.gov. for industrial internet of things (iiot),” Ph.D. dissertation, University of
[4] A. Yazdinejad, R. M. Parizi, A. Dehghantanha, H. Karimipour, G. Sri- Guelph, 2024.
vastava, and M. Aledhari, “Enabling drones in the internet of things [25] B. Zolfaghari, A. Yazdinejad, A. Dehghantanha, J. Krzciok, and
with decentralized blockchain-based security,” IEEE Internet of Things K. Bibak, “The dichotomy of cloud and iot: Cloud-assisted iot from
Journal, vol. 8, no. 8, pp. 6406–6415, 2020. a security perspective,” arXiv preprint arXiv:2207.01590, 2022.
[5] A. Yazdinejad, R. M. Parizi, A. Dehghantanha, and K.-K. R. Choo, “P4- [26] NIST, “Nist special publication 800-125b: Security recommendations for
to-blockchain: A secure blockchain-enabled packet parser for software virtualization technologies in cloud computing,” 2019, national Institute
defined networking,” Computers & Security, vol. 88, p. 101629, 2020. of Standards and Technology.
[6] J. Sakhnini, H. Karimipour, A. Dehghantanha, A. Yazdinejad, T. R. [27] A. Yazdinejad, A. Bohlooli, and K. Jamshidi, “P4 to sdnet: Automatic
Gadekallu, N. Victor, and A. Islam, “A generalizable deep neural net- generation of an efficient protocol-independent packet parser on recon-
work method for detecting attacks in industrial cyber-physical systems,” figurable hardware,” in 2018 8th International Conference on Computer
IEEE Systems Journal, vol. 17, no. 4, pp. 5152–5160, 2023. and Knowledge Engineering (ICCKE). IEEE, 2018, pp. 159–164.
[7] R. P. Jover and V. Marojevic, “Security and protocol exploit analy-
sis of the 5g specifications,” 2019, https://ieeexplore.ieee.org/abstract/
document/8641117.
[8] A. Yazdinejad, A. Dehghantanha, R. M. Parizi, M. Hammoudeh,
H. Karimipour, and G. Srivastava, “Block hunter: Federated learning
for cyber threat hunting in blockchain-based iiot networks,” IEEE
Transactions on Industrial Informatics, vol. 18, no. 11, pp. 8356–8366,
2022.
[9] A. Yazdinejad, A. Dehghantanha, R. M. Parizi, G. Srivastava, and
H. Karimipour, “Secure intelligent fuzzy blockchain framework: Effec-
tive threat detection in iot networks,” Computers in Industry, vol. 144,
p. 103801, 2023.
[10] D. Namakshenas, A. Yazdinejad, A. Dehghantanha, and G. Srivastava,
“Federated quantum-based privacy-preserving threat detection model
for consumer internet of things,” IEEE Transactions on Consumer
Electronics, 2024.
[11] A. Yazdinejad, A. Bohlooli, and K. Jamshidi, “Efficient design and
hardware implementation of the openflow v1. 3 switch on the virtex-6
fpga ml605,” The Journal of Supercomputing, vol. 74, pp. 1299–1320,
2018.
[12] A. Yazdinejad, R. M. Parizi, A. Bohlooli, A. Dehghantanha, and K.-K. R.
Choo, “A high-performance framework for a network programmable
packet processor using p4 and fpga,” Journal of Network and Computer
Applications, vol. 156, p. 102564, 2020.
[13] J. Smith and A. Brown, “Ai-driven automated penetration testing for 5g
network slices,” IEEE Transactions on Network and Service Manage-
ment, 2021, https://ieeexplore.ieee.org/document/9506685.
[14] A. Yazdinejad, E. Rabieinejad, A. Dehghantanha, R. M. Parizi, and
G. Srivastava, “A machine learning-based sdn controller framework for
drone management,” in 2021 IEEE Globecom Workshops (GC Wkshps).
IEEE, 2021, pp. 1–6.
[15] A. Yazdinejad, A. Dehghantanha, and G. Srivastava, “Ap2fl: Auditable
privacy-preserving federated learning framework for electronics in
healthcare,” IEEE Transactions on Consumer Electronics, 2023.
[16] K. Lee and S. Kim, “Integration of threat intelligence into penetra-
tion testing for 5g networks,” Journal of Cybersecurity, 2020, https:
//academic.oup.com/cybersecurity/article/6/1/tyaa015/5890871.
[17] M. Johnson and R. White, “Continuous and adaptive penetration testing
for 5g networks,” Journal of Network and Computer Applications, 2020,
https://www.sciencedirect.com/science/article/pii/S1084804519303629.
[18] K. Tan, Advanced Network Protocol Analysis using Wireshark.
Springer, 2019.
[19] S. Dixit and S. Chadha, “Security implications in 5g networks and
potential solutions,” in Proceedings of the 2019 IEEE International
Conference on Advanced Networks and Telecommunications Systems
(ANTS), 2019.
[20] A. Yazdinejad, A. Dehghantanha, G. Srivastava, H. Karimipour, and
R. M. Parizi, “Hybrid privacy preserving federated learning against
irregular users in next-generation internet of things,” Journal of Systems
Architecture, vol. 148, p. 103088, 2024.
[21] A. Yazdinejad, A. Dehghantanha, H. Karimipour, G. Srivastava, and
R. M. Parizi, “A robust privacy-preserving federated learning model
against model poisoning attacks,” IEEE Transactions on Information
Forensics and Security, 2024.
[22] K. Viswanathan and A. Yazdinejad, “Security considerations for virtual
reality systems,” arXiv preprint arXiv:2201.02563, 2022.