Method for Securing OpenRAN Interfaces
Systems, methods, and computer software are disclosed for securing OpenRAN Interfaces. In ne embodiment a method is disclosed, comprising placing a stateful firewall at a node between a base station and a core network; wherein the stateful firewall mitigates compromised traffic from a radio access network (RAN).
1 . A method for securing OpenRAN Interfaces, comprising:
placing a stateful firewall at a node between a base station and a core network;
wherein the stateful firewall mitigates compromised traffic from a radio access network (RAN).
2 . The method of claim 1 further comprising performing network address translation (NAT) at the stateful firewall.
3 . The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at a management node.
4 . The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at a controller node.
5 . The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at a centralized unit (CU) in a case of a CU/DU split.
6 . The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at the base station itself.
7 . The method of claim 1 further comprising performing aggregation and brokering.
8 . The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at both ends of a CU/DU split.
9 . The method of claim 1 further comprising the stateful firewall blocking non-meaningful outbound traffic.
10 . A non-transitory computer-readable medium containing instructions for securing OpenRAN Interfaces, which, when executed, cause a system to perform steps comprising:
operating a stateful firewall placed at a node between a base station and a core network; wherein the stateful firewall mitigates compromised traffic from a radio access network (RAN).
11 . The computer-readable medium of claim 10 further comprising instructions for performing network address translation (NAT) at the stateful firewall.
12 . The computer-readable medium of claim 10 further comprising instructions for performing aggregation and brokering.
13 . The computer-readable medium of claim 10 further comprising instructions for blocking non-meaningful outbound traffic.
14 . A system securing OpenRAN Interfaces, comprising:
a base station;
a core network;
a node between the base station and the core network and in communication with the base station and a core network; and
wherein the node includes a stateful firewall mitigates compromised traffic from a radio access network (RAN).
15 . The system of claim 14 the stateful firewall performs network address translation (NAT).
16 . The system of claim 14 wherein the stateful firewall is placed at a management node or at a controller node.
17 . The system of claim 14 wherein the stateful firewall is placed at a centralized unit (CU) in a case of a CU/DU split.
18 . The system of claim 14 wherein the stateful firewall is placed at the base station itself.
19 . The system of claim 14 wherein the stateful firewall is placed at both ends of a CU/DU split.
20 . The system of claim 14 wherein the stateful firewall blocks non-meaningful outbound traffic.