Mavenir, VIAVI, and CableLabs Complete Open RAN 3GPP Security Assurance Testing 

Open RANSecurity

Mavenir, VIAVI Solutions and CableLabs announced they have successfully completed 3GPP Security Assurance Testing for the RU, DU, and CU (collectively known as the gNodeB (gNB)) functional security requirements defined in the 3GPP specifications. 

Image generated by ChatGTP

The testing, conducted by CableLabs at the Kyrio Open Test and Integration Center, took place during the O-RAN ALLIANCE Global PlugFest Spring 2024.

The trio showcased a significant advancement in gNB security test automation. According to the release: “This milestone also highlights the security test efficiency gains and potential for expedited security testing cycles in future implementations of OpenRAN gNBs consisting of O-RU plus O-DU and O-CU implemented to O-RAN compliant interface specifications.”

Open RAN security has been a point of contention with some industry experts claiming the technology carries increased risks. Some of the criticisms levelled at the technology include the fact that the larger attack surface, a consequence of its multi-vendor environment, presents more entry points for malicious actors. There is also an increased risk of misconfiguration of networks and potential impacts on other network functions due to resource sharing and extra complexity. 

Proponents of Open RAN on the other hand have consistently argued that many of these fears are unfounded. They point to the fact IT infrastructure has long been open and disaggregated and benefitted from enhanced security as a result. Not only that, but the intelligent automation afforded by Open RAN also means security can be strengthened by being able to quickly detect, isolate, and mitigate threats across different suppliers while also simplifying compliance with appropriate regulations and industry standards. Indeed, Vodafone recently announced they are working on developing an Open RAN automated management system for security with i2CAT.

BG Kumar, President, Access Networks, Platforms and MDE of Mavenir noted: “Our collaboration with VIAVI and CableLabs demonstrates our commitment to ensuring the security and reliability of Open RAN systems, which is critical for widespread adoption. This successful O-RAN ALLIANCE PlugFest 3GPP security assurance testing will contribute towards extending Mavenir’s Security accreditation as defined by the GSMA and 3GPP – NESAS assuring security assessment across Mavenir’s Open RAN products.” 

“The successful completion of 3GPP Security Assurance Testing for gNB security functional requirements is a testament to the power of collaboration in the Open RAN ecosystem,” added Dr. Sameh Yamany, Chief Technology Officer of VIAVI. “Working together with Mavenir and CableLabs, we advanced automation of security testing in a highly efficient and reliable framework that will enable the industry to accelerate adoption.”