Intelligent Zero Trust Architecture for 5G/6G Networks: Principles,
  Challenges, and the Role of Machine Learning in the context of O-RAN
  In this position paper, we discuss the critical need for integrating zero
trust (ZT) principles into next-generation communication networks (5G/6G). We
highlight the challenges and introduce the concept of an intelligent zero trust
architecture (i-ZTA) as a security framework in 5G/6G networks with untrusted
components. While network virtualization, software-defined networking (SDN),
and service-based architectures (SBA) are key enablers of 5G networks,
operating in an untrusted environment has also become a key feature of the
networks. Further, seamless connectivity to a high volume of devices has
broadened the attack surface on information infrastructure. Network assurance
in a dynamic untrusted environment calls for revolutionary architectures beyond
existing static security frameworks. To the best of our knowledge, this is the
first position paper that presents the architectural concept design of an i-ZTA
upon which modern artificial intelligence (AI) algorithms can be developed to
provide information security in untrusted networks. We introduce key ZT
principles as real-time Monitoring of the security state of network assets,
Evaluating the risk of individual access requests, and Deciding on access
authorization using a dynamic trust algorithm, called MED components. To ensure
ease of integration, the envisioned architecture adopts an SBA-based design,
similar to the 3GPP specification of 5G networks, by leveraging the open radio
access network (O-RAN) architecture with appropriate real-time engines and
network interfaces for collecting necessary machine learning data. Therefore,
this work provides novel research directions to design machine learning based
components that contribute towards i-ZTA for the future 5G/6G networks.
