Tenant-based Blackbox Security Auditing in a Container-based Environment

Telecommunication networks are becoming critical in our daily lives, especially after the during Covid-19 global pandemic outbreak. To respond to such a surge in demands and satisfy new requirements of high agility, scalability, and cost-effectiveness, telecom operators have been adopting new strategies to develop and deploy mobile networks. However, this new technology also brings new security threats to its users (a.k.a. tenants). In this proposed project, the intern will develop a novel approach that enables the tenant to assess the security posture of his underlying deployment in a container-based cloud environment managed by a third-party without relying on the provider-level data. The objective of this project is to investigate and identify blackbox techniques (i.e., which do not require to access data from cloud providers) to leverage tenant-level side channel information to infer about provider-level security state about the security state and audit the underlying deployments of their 5G network services.

Faculty Supervisor:

Lingyu Wang;Suryadipta Majumdar

Student:

Partner:

Ericsson Canada Inc (Montreal, QC)

Discipline:

Engineering

Sector:

Information and cultural industries; Professional, scientific and technical services

University:

Concordia University

Program: