Booz Allen Hamilton Inc

Purpose: the Research Effort Seeks to Materially Advance the State-of-the-art Security of O-ran Enabled Systems Against Sophisticated Threats by Addressing Test Methods Applicable to the Security of Open and Interoperable, Standards-based, 5G Radio Access Networks. Activities to Be Performed: the Project Will Investigate Enhancing Existing Testing Methods and Adding New Testing Methods by: Performing Threat Modeling for Sophisticated Threats, Conducting Security Analysis and Penetration Testing, Building Advanced Security Tests as Open-source Exemplars, and Submitting Updates to Oran Alliance Specifications. Creating Approaches and Procedures to Effectively Fuzz an O-ran System, Updating an Existing Open Source Fuzzer (e.g., Boofuzz, Berserker, Etc.) With O-ran Protocols as a Reference Implementation, and Submitting Updates to O-ran Alliance Specifications. Expected Outcomes: Driving Advanced Security Tests for Sophisticated Attackers Into Specifications. Increasing Industry and Community Adoption of Advanced Security Tests for Sophisticated Attacker. Intended Beneficiaries: Operators Purchasing O-ran Systems, O-ran Alliance Members, and Small Non-traditional O-ran Component Vendors Who Lack Funding for Commercial Testing Tools to Verify Their Own Components Prior to Conducting Formal Test Compliance. Subrecipient Activities: Virginia Tech Will Receive a Subaward to Work on Threat Model and Security Analysis, and on Interface Fuzzing on This Project.