How to Implement Cybersecurity 5G Networks in NS2

To implement the cybersecurity for 5G networks using NS2 (Network Simulator 2), we require to replicate a 5G network architecture, containing mobile devices, base stations, and core networks, although incorporating security mechanisms like encryption, authentication, and threat detection. This 5G networks are provides higher speeds and lower latency however are exposed to new security risks, like vulnerabilities in the Internet of Things (IoT) ecosystem, distributed denial of service (DDoS) attacks, and man-in-the-middle (MITM) attacks. We share the implementation technique to execute the Cybersecurity in a 5G network using NS2:

Steps to Implement Cybersecurity in 5G Networks with NS2:

1. Set Up NS2

Make certain that NS2 is installed and configured appropriately. The simulation tool NS2 does not natively support 5G protocols, however we can be mimicked a 5G-like network by creating the network topology including mobile devices, base stations (representing 5G towers), and core networks (cloud servers).

2. Define the 5G Network Topology

In a 5G network, mobile devices are attack to the 5G base stations (also called gNodeBs) that forward data to the 5G core network (cloud servers or routers). We will be replicated this in NS2.

Example: Define 5G network topology

set ns [new Simulator]

# Create nodes representing mobile devices, base stations, and core networks

set mobile_device1 [$ns node]

set mobile_device2 [$ns node]

set base_station1 [$ns node]

set base_station2 [$ns node]

set core_network [$ns node]

set router [$ns node]

# Set up communication links (mobile devices to base stations, base stations to core network)

$ns duplex-link $mobile_device1 $base_station1 1Mb 5ms DropTail

$ns duplex-link $mobile_device2 $base_station2 1Mb 5ms DropTail

$ns duplex-link $base_station1 $router 10Mb 2ms DropTail

$ns duplex-link $base_station2 $router 10Mb 2ms DropTail

$ns duplex-link $router $core_network 100Mb 1ms DropTail

This topology mimics a 5G network in which various mobile devices communicate with base stations (gNodeBs) and the base stations relay data to the core network via routers.

3. Simulate Data Traffic in the 5G Network

Mimic the data transmission among the mobile devices and core network components to model how data flows via a 5G network. Also we can replicate the traffic, which passes via the base stations to the core network.

Example: Simulate data transmission from mobile devices to the core network

# Set up TCP agents for communication between mobile devices and the core network

set tcp1 [new Agent/TCP]

set tcp2 [new Agent/TCP]

set tcp_core1 [new Agent/TCP]

set tcp_core2 [new Agent/TCP]

$ns attach-agent $mobile_device1 $tcp1

$ns attach-agent $mobile_device2 $tcp2

$ns attach-agent $core_network $tcp_core1

$ns attach-agent $core_network $tcp_core2

# Connect mobile devices to the core network through base stations

$ns connect $tcp1 $tcp_core1

$ns connect $tcp2 $tcp_core2

# Simulate data transfer between mobile_device1 and the core network

set ftp1 [new Application/FTP]

$ftp1 attach-agent $tcp1

$ns at 1.0 “$ftp1 start”

$ns at 50.0 “$ftp1 stop”

Above instance emulates data transfer among a mobile device and the core network via a base station.

4. Implement Security Mechanisms (Encryption, Authentication, etc.)

To secure the communication within the 5G network that execute numerous security mechanisms, like encryption to defend the data in transit, and authentication to make sure only authorized users and devices can attach to the network.

1. Encryption

Encryption make sure that data transmitted among the mobile devices and the core network is confidential and defended from eavesdropping.

# Define encryption and decryption procedures

proc encrypt_message {message key} {

set encrypted_message “”

for {set i 0} {$i < [string length $message]} {incr i} {

set encrypted_message [string append $encrypted_message \

[expr [scan [string index $message $i] %c] ^ $key]]

}

return $encrypted_message

}

proc decrypt_message {encrypted_message key} {

return [encrypt_message $encrypted_message $key]  ;# XOR encryption is reversible

}

# Encrypt data before sending it from mobile_device1 to the core network

set message “5G data packet”

set key 7  ;# Example encryption key

set encrypted_msg [encrypt_message $message $key]

puts “Encrypted message: $encrypted_msg”

1. Authentication

Authentication make sure that only legitimate mobile devices can be connected to the 5G base stations and access network services.

# Simple authentication procedure for mobile devices

proc authenticate_device {device key} {

set pre_shared_key 98765  ;# Example pre-shared key

if {$key == $pre_shared_key} {

puts “Device $device authenticated”

return 1

} else {

puts “Device $device authentication failed”

return 0

}

}

# Authenticate mobile_device1

set device_key 98765

set auth_status [authenticate_device “mobile_device1” $device_key]

5. Simulate Cybersecurity Attacks

In a 5G network, general cybersecurity threats contains the DDoS attacks, man-in-the-middle attacks, and unauthorized access. Replicating these attacks are helps to assess the efficiency of security mechanisms.

1. Simulate DDoS Attack on the 5G Core Network

A Distributed Denial of Service (DDoS) attack can be flooded the core network including a high volume of requests, causing service degradation or outages.

# Set up a malicious node to simulate a DDoS attack on the core network

set attacker [new Agent/UDP]

$ns attach-agent $attacker

$ns connect $attacker $core_network

# Simulate a DDoS attack by flooding the core network with traffic

proc simulate_ddos_attack {attacker target} {

global ns

for {set i 0} {$i < 10000} {incr i} {

$ns at [expr 1.0 + $i*0.01] “$attacker send”

}

}

# Launch the DDoS attack on the core network

$ns at 10.0 “simulate_ddos_attack $attacker $core_network”

1. Simulate Man-in-the-Middle (MITM) Attack on the 5G Network

A man-in-the-middle (MITM) attack happens, once an attacker intercepts the communication among the mobile devices and the core network, possibly altering or stealing sensitive details.

# Simulate an attacker intercepting data between mobile_device1 and the core network

proc simulate_mitm_attack {attacker target} {

global ns

puts “Attacker intercepting data from $target”

}

# Eavesdrop on communication between mobile_device1 and the core network

$ns at 20.0 “simulate_mitm_attack $attacker $mobile_device1”

6. Implement Intrusion Detection System (IDS)

An Intrusion Detection System (IDS) observes the network for abnormal activities such as unusual traffic patterns or unauthorized access attempts. In a 5G network, an IDS can be identified anomalies that may signify the DDoS or MITM attacks.

Example: Simple IDS to detect DDoS attacks

# IDS to monitor traffic and detect DDoS attacks

proc detect_ddos_attack {packet_count threshold} {

if {$packet_count > $threshold} {

puts “DDoS attack detected!”

} else {

puts “Traffic is normal.”

}

}

# Monitor traffic and detect DDoS attack

set packet_count 1200  ;# Example packet count

detect_ddos_attack $packet_count 1000

7. Collect and Analyze Traffic Data

Allow tracing within NS2 to gather the network data like packet size, delay, and packet drops. This data is vital for computing the network performance and detecting anomalies.

Enable tracing to collect traffic data

# Enable trace file to log network traffic

set tracefile [open 5g_trace.tr w]

$ns trace-all $tracefile

This trace file records the network events, like packet sends, receives, and drops, with timestamps, node information, and packet details.

8. Block Malicious Nodes

Once a malicious node is identified (e.g., through a DDoS or MITM attack), we can be blocked the node to avoid further damage to the 5G network.

Example: Blocking the attacker after detecting a DDoS attack

# Block malicious node after detecting an attack

proc block_attacker {attacker} {

global ns

puts “Blocking attacker node $attacker due to malicious activity.”

$ns detach-agent $attacker

}

# Block attacker after detecting DDoS attack

$ns at 50.0 “block_attacker $attacker”

9. Run the Simulation and Analyze Results

Run the simulation to examine how the 5G network manages the normal traffic and attacks, and how well security measures are defend the network.

Finalize and run the simulation

proc finish {} {

global ns tracefile

$ns flush-trace

close $tracefile

puts “Simulation finished. Analyze the trace file for results.”

exit 0

}

# Schedule the end of the simulation

$ns at 100.0 “finish”

$ns run

10. Analyze Trace Data

Evaluate the trace data to calculate the performance of the 5G network and the efficiency of security mechanisms, after the simulation is complete. We can process the trace file using tools such as the Python for further analysis.

Example: Analyze the trace file using Python

import pandas as pd

# Function to parse NS2 trace file and extract relevant fields

def parse_trace_file(trace_file):

data = []

with open(trace_file, ‘r’) as f:

for line in f:

fields = line.strip().split()

event, time, node, packet_size, flow_id, src, dest = fields[:7]

data.append([time, node, packet_size, src, dest])

return pd.DataFrame(data, columns=[‘time’, ‘node’, ‘packet_size’, ‘src’, ‘dest’])

# Load and parse the trace data

trace_data = parse_trace_file(‘5g_trace.tr’)

print(trace_data.head())

Through the simplified procedure, we explained how to implement and analyse the Cybersecurity 5G Networks using the NS2 platform. Also, we will be delivered further informations on this topic in another tool. If you need guidance on implementing Cybersecurity for 5G Networks in ns2 tool , feel free to contact ns2project.com.