Detection and mitigation plan for the external threats on 5G network/devices while using network functions virtualization (NFV)
One example method includes receiving a request to scan a file, storing the file, performing a vulnerability scan on the file, based on an outcome of the vulnerability scan, making a copy of the file, scanning the copy of the file, when the scanning identifies an attack pattern, applying a rule concerning the attack pattern, and performing a remedial action specified by the rule with respect to the file and/or with respect to a device that handled the file.
1 . A method, comprising:
receiving a request to scan a file;
storing the file;
performing a vulnerability scan on the file;
based on an outcome of the vulnerability scan, making a copy of the file;
scanning the copy of the file;
when the scanning identifies an attack pattern, applying a rule concerning the attack pattern; and
performing a remedial action specified by the rule with respect to the file and/or with respect to a device that handled the file.
2 . The method as recited in claim 1 , wherein the file is associated with a request that was incoming to a device on a 5G communication network.
3 . The method as recited in claim 1 , wherein the scanning is performed in a trust boundary outside of a communication network with which the file is associated.
4 . The method as recited in claim 1 , wherein the request to scan the file is an automated request.
5 . The method as recited in claim 1 , wherein the attack pattern is a new attack pattern not previously identified, and the new attack pattern is stored in a database.
6 . The method as recited in claim 1 , wherein the vulnerability scan and the scanning of the copy of the file are provided as a web service to a client.
7 . The method as recited in claim 1 , wherein the vulnerability scan and the scanning of the copy of the file are performed by a risk mitigation module, operating out of band with respect to a 5G communication network, that communicates with the 5G communication network by way of a pass through channel.
8 . The method as recited in claim 1 , wherein the vulnerability scan and the scanning of the copy of the file are performed with regard to a device which is associated with the file and that is included in a network that further includes a network functions virtualization device whose security requirements differ from security requirements of a legacy device that is included in the network.
9 . The method as recited in claim 1 , wherein the attack pattern relates to an attack initiated external to a communications network to which the attack was directed.
10 . The method as recited in claim 1 , wherein a trusted boundary is created outside of a communications network, and the trusted boundary prevents a user from accessing the communications network unless the scanning reveals that the file has not been compromised.
11 . A non-transitory storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
receiving a request to scan a file;
storing the file;
performing a vulnerability scan on the file;
based on an outcome of the vulnerability scan, making a copy of the file;
scanning the copy of the file;
when the scanning identifies an attack pattern, applying a rule concerning the attack pattern; and
performing a remedial action specified by the rule with respect to the file and/or with respect to a device that handled the file.
12 . The non-transitory storage medium as recited in claim 11 , wherein the file is associated with a request that was incoming to a device on a 5G communication network.
13 . The non-transitory storage medium as recited in claim 11 , wherein the scanning is performed in a trust boundary outside of a communication network with which the file is associated.
14 . The non-transitory storage medium as recited in claim 11 , wherein the request to scan the file is an automated request.
15 . The non-transitory storage medium as recited in claim 11 , wherein the attack pattern is a new attack pattern not previously identified, and the new attack pattern is stored in a database.
16 . The non-transitory storage medium as recited in claim 11 , wherein the vulnerability scan and the scanning of the copy of the file are provided as a web service to a client.
17 . The non-transitory storage medium as recited in claim 11 , wherein the vulnerability scan and the scanning of the copy of the file are performed by a risk mitigation module, operating out of band with respect to a 5G communication network, that communicates with the 5G communication network by way of a pass through channel.
18 . The non-transitory storage medium as recited in claim 11 , wherein the vulnerability scan and the scanning of the copy of the file are performed with regard to a device which is associated with the file and that is included in a network that further includes a network functions virtualization device whose security requirements differ from security requirements of a legacy device that is included in the network.
19 . The non-transitory storage medium as recited in claim 11 , wherein the attack pattern relates to an attack initiated external to a communications network to which the attack was directed.
20 . The non-transitory storage medium as recited in claim 11 , wherein a trusted boundary is created outside of a communications network, and the trusted boundary prevents a user from accessing the communications network unless the scanning reveals that the file has not been compromised.