A Framework for TLS Implementation Vulnerability Testing in 5G.

A 5G TLS implementation vulnerability testing framework is proposed. By constructing a TLS vulnerability database using the public TLS security vulnerabilities, the framework can estimate vulnerabilities for the TLS implementation deployed in 5G core network and entity devices, based on the TLS version and TLS implementation library information obtained during the scanning. Multi-dimensional features of the interactive information of the TLS implementation and online machine-learning methods are used to build a model, thus being used to obtain the TLS implementation library information. The vulnerabilities are also tested by simulating the handshake process and sending customized interactive information.