5G network functions to prevent cyber security threats
In some implementations, the techniques described herein relate to a method including: receiving a network request from a second network function, the network request including a parameter; validating the parameter upon receipt of the network request to determine a status of the network request, the status indicating a valid or invalid request; processing, by a first network function, a resource managed by the first network function based on the network request and returning a network response when the status indicates a valid request; and denying the network request and returning an error code when the status indicates an invalid request.
1 . A method comprising:
receiving, by a first network function, a network request from a second network function, the network request including a parameter;
validating, by the first network function, the parameter upon receipt of the network request to determine a status of the network request, the status indicating a valid or invalid request;
processing, by the first network function, a resource managed by the first network function based on the network request and returning a network response when the status indicates a valid request; and
denying the network request and returning, by the first network function, an error code when the status indicates an invalid request.
2 . The method of claim 1 , wherein the first network function and the second network function each comprise containerized applications executing in a cellular core network.
3 . The method of claim 1 , wherein the network request comprises a HyperText Transfer Protocol (HTTP) request.
4 . The method of claim 3 , wherein the HTTP request comprises an HTTP/2 request.
5 . The method of claim 1 wherein validating the parameter comprises one or more of performing cross-site scripting detection, structured query language (SQL) injection detection, special character detection, or denial of service (DoS) detection.
6 . The method of claim 1 , wherein receiving the network request comprises receiving the network request at a gateway function and wherein validating the parameter comprises validating the parameter via the gateway function.
7 . The method of claim 6 , further comprising forwarding, by the gateway function, the network request to the first network function when the status indicates a valid request.
8 . A non-transitory computer-readable storage medium for tangibly storing instructions capable of being executed by a processor, the instructions defining steps of:
receiving, by a first network function, a network request from a second network function, the network request including a parameter;
validating, by the first network function, the parameter upon receipt of the network request to determine a status of the network request, the status indicating a valid or invalid request;
processing, by the first network function, a resource managed by the first network function based on the network request and returning a network response when the status indicates a valid request; and
denying the network request and returning, by the first network function, an error code when the status indicates an invalid request.
9 . The non-transitory computer-readable storage medium of claim 8 , wherein the first network function and the second network function each comprise containerized applications executing in a cellular core network.
10 . The non-transitory computer-readable storage medium of claim 8 , wherein the network request comprises a HyperText Transfer Protocol (HTTP) request.
11 . The non-transitory computer-readable storage medium of claim 10 , wherein the HTTP request comprises an HTTP/2 request.
12 . The non-transitory computer-readable storage medium of claim 8 wherein validating the parameter comprises one or more performing cross-site scripting detection, structured query language (SQL) injection detection, special character detection, or denial of service (DoS) detection.
13 . The non-transitory computer-readable storage medium of claim 8 , wherein receiving the network request comprises receiving the network request at a gateway function and wherein validating the parameter comprises validating the parameter via the gateway function.
14 . The non-transitory computer-readable storage medium of claim 13 , further comprising forwarding, by the gateway function, the network request to the first network function when the status indicates a valid request.
15 . A device comprising:
a processor configured to:
receive, by a first network function, a network request from a second network function, the network request including a parameter;
validate, by the first network function, the parameter upon receipt of the network request to determine a status of the network request, the status indicating a valid or invalid request;
process, by the first network function, a resource managed by the first network function based on the network request and returning a network response when the status indicates a valid request; and
deny the network request and return, by the first network function, an error code when the status indicates an invalid request.
16 . The device of claim 15 , wherein the first network function and the second network function each comprise containerized applications executing in a cellular core network.
17 . The device of claim 15 , wherein the network request comprises a HyperText Transfer Protocol (HTTP) request.
18 . The device of claim 17 , wherein the HTTP request comprises an HTTP/2 request.
19 . The device of claim 15 , wherein validating the parameter comprises one or more performing cross-site scripting detection, structured query language (SQL) injection detection, special character detection, or denial of service (DoS) detection.
20 . The device of claim 15 , wherein processing a resource managed by the first network function based on the network request and returning a network response when the status indicates a valid request forwarding the network request to the first network function when the status indicates a valid request.