ScasDK—An all-in-one test platform for security assurance in 5G core networks

This paper introduces ScasDK, an innovative proxy-based framework designed to enable advanced security assurance testing within virtualized 5G Core Networks. Unlike conventional 5G-specific security assurance approaches meant to be employed in offline, certification-oriented testing, ScasDK utilizes programmable proxies between network functions, enabling testing directly within online environments—in principle even in production scenarios. Additionally, ScasDK allows third-party test labs and infrastructure providers to efficiently define, deploy, and manage not only the standardized Security Assurance Specifications (SCAS) tests established by 3GPP but also custom, scenario-specific testing methodologies. Seamlessly integrated into a DevSecOps pipeline, ScasDK was validated through comprehensive security assessments on three open-source 5G Core Networks, uncovering several vulnerabilities and identifying areas for improvement. The performance evaluation further demonstrates the feasibility of online testing, setting the stage for future security testing practices in 5G core networks.