Enhancing 5G Core security with eBPF/XDP

5G technology brings several improvements to mobile communication systems. The ability to provide much faster connections, lower latency and greater scalability enables 5G to be employed in scenarios where previous generations failed to succeed. However, the growing number of connected devices, with a high proportion of Internet of Things (IoT) devices, expands the cyberattack surface and creates new vulnerabilities, including the heightened risk of Distributed Denial of Service (DDoS) attacks. This research explores the feasibility of using extended Berkeley Packet Filter/eXpress Data Path (eBPF/XDP) technology to enhance the security and robustness of 5G SA Core Network services against DDoS attacks. We evaluate the effectiveness of this approach through several SYN flooding attacks to the 5G Network Repository Function (NRF). In scenarios without eBPF/XDP, DDoS attacks caused significant disruptions, highlighting its impact in the 5G Core Network. With the eBPF/XDP framework in place, the NRF service demonstrated considerable resilience against the SYN Flooding attacks. Thus, we conclude eBPF/XDP effectively helped detecting and mitigating potential DDoS threats, ensuring uninterrupted service for legitimate traffic.