Zero Trust Security Framework for 5G MEC Applications: Evaluating UE Dynamic Network Behaviour

This paper presents a Zero Trust Security (ZTS) framework that enhances the security of Multi-Access Edge Computing (MEC) applications and services for 5G / 6G mobile networks. The ZTS framework incorporates a zero trust policy engine deployed in the 5G Core (5GC) network, which assesses User Equipment (UE) trustworthiness to access the MEC applications. The policy engine evaluates the UE Dynamic Network Behaviour (UDNB). Interactive procedures were designed to realise the proposed framework in a 3GPP-defined 5G network. Cooperation between mobile operators and vertical industries is achieved by leveraging the 5G Network Exposure Function and open interfaces. We propose that behaviour entropy be used as a quantitative measure to evaluate the UE trust value. An access control matrix was developed based on UE behaviour attributes. The performance evaluation demonstrates the effectiveness of our scheme in preventing unauthorised access to various MEC applications.