Swathi Sama

Abstract

As 5G deployments accelerate globally, security concerns surrounding its decentralized, software- defined architecture are gaining prominence. This paper critically evaluates the security posture of 5G networks with a specific focus on Open Radio Access Network (O-RAN) frameworks and network slicing within the 5G core. These architectural features, while enhancing flexibility and efficiency, introduce new risks that traditional security models fail to address. We conduct a structured risk assessment using the NIST 5G Cybersecurity Framework and identify multiple attack vectors, including rogue gNodeBs, insecure slice segmentation, and vulnerable RAN Intelligent Controller (RIC) components. Through simulations using open-source 5G stacks, we demonstrate how improper orchestration and poor API management can compromise slice integrity and allow adversarial lateral movement. In response, we propose a multilayered defense architecture leveraging secure boot, mutual TLS, slice-spe