Anomaly Detection Employing a 5G Core Data Analytics Framework

The Network Data Analytics Function (NWDAF) within the 5G core is not an inherent feature of open-source 5G cores, making its implementation necessary based on provider demands. However, for those seeking to integrate NWDAF into the core but lacking expertise in core architecture or application programming interface (API) integration, this task can be daunting, potentially resulting in the abandonment of data analytics implementation efforts. While the current version of NWDAF specifies certain use cases, it does not provide alternatives for developing new analytics scenarios. To fill this gap, this paper proposes a framework for 5G network data analytics designed to facilitate algorithmic modifications and the addition of new analytical contexts. The framework was developed considering the 3GPP technical specifications related to data analytics. Its evaluation was performed through a use case focused on cybersecurity anomaly detection applied to a 5G network core. The results demonstrated that the framework simplifies installation, increases flexibility for new algorithms, and integrates seamlessly into the 5G network core, effectively addressing previously identified shortcomings.