5G APIs security and privacy threat analysis within 5G technology domain

The evolution of mobile technology is always persistent since the beginning of 1G in 1979 by Nippon Telegraph and Telephone in Tokyo till now with 5G which became available in 2019 in Spain and next would be 6G in coming years. Each G phase in mobile world had introduced modification in network architecture and use cases which prominently created new security and privacy concerns. This next generation mobile networks are designed to run in a virtualized environment, enabling rapid infrastructure deployment and high flexibility for coping with increasing traffic demands and new service requirements. This thesis work investigates and analyses security and privacy concerns for 5G networks that have been created by exposing 5G network based on its programmable principle in which 5G APIs (Application Programming Interface) are key enablers for it. One aspect of these APIs is that the developers will create applications which will underneath use network platform provided by mobile operators and 5G network would act as Network as a Service (NaaS) provider, which is kind of similar approach as platform as a service in cloud infrastructure. Other aspect of these APIs is exposer 0f 5G capabilities via these APIs to the external communication service providers (CSPs) which has created usecases for communication platform as a service (CPaaS).