The National Cybersecurity Center of Excellence (NCCoE) has published the fifth white paper in its series Applying 5G Cybersecurity and Privacy Capabilities. The series targets technology, cybersecurity, and privacy program managers within commercial mobile network operators, potential private 5G network operators, and organizations using and managing 5G-enabled technology who are concerned with how to identify, understand, assess, and mitigate risk for 5G networks. In the series we provide recommended practices and illustrate how to implement them. All of the capabilities featured in the white papers have been demonstrated on the NCCoE testbed on commercial-grade 5G equipment.
We are pleased to announce the availability of the fifth white paper in the series:
No SUPI-Based Paging — This publication provides an overview of “no Subscription Permanent Identifier (SUPI) based paging,” a 5G capability for protecting users from being identified and located by an attacker. Unlike previous generations of cellular systems, new requirements in 5G protect subscriber confidentiality by using a temporary identity (ID) instead of SUPI for the paging protocol, and explicitly define when the temporary ID must be reallocated (refreshed). 5G network operators and organizations using 5G technologies are encouraged to verify that the paging is happening as described in the 5G standards.
The white paper is open for public comment through February 28, 2025.
As each white paper is published, you can download it from the NCCoE’s website.
Don’t miss an issue! Join the 5G Community of Interest and we’ll notify you when a paper is released.