{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,27]],"date-time":"2026-03-27T16:58:42Z","timestamp":1774630722805,"version":"3.50.1"},"reference-count":23,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2022,3,8]],"date-time":"2022-03-08T00:00:00Z","timestamp":1646697600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Network"],"abstract":"<jats:p>This article reveals an adequate comprehension of basic defense, security challenges, and attack vectors in deploying multi-network slicing. Network slicing is a revolutionary concept of providing mobile network on-demand and expanding mobile networking business and services to a new era. The new business paradigm and service opportunities are encouraging vertical industries to join and develop their own mobile network capabilities for enhanced performances that are coherent with their applications. However, a number of security concerns are also raised in this new era. In this article, we focus on the deployment of multi-network slicing with multi-tenancy. We identify the security concerns and discuss the defense approaches such as network slice isolation and insulation in a multi-layer network slicing security model. Furthermore, we identify the importance to appropriately select the network slice isolation points and propose a generic framework to optimize the isolation policy regarding the implementation cost while guaranteeing the security and performance requirements.<\/jats:p>","DOI":"10.3390\/network2010011","type":"journal-article","created":{"date-parts":[[2022,3,9]],"date-time":"2022-03-09T01:53:54Z","timestamp":1646790834000},"page":"153-167","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":22,"title":["5G Network Slice Isolation"],"prefix":"10.3390","volume":"2","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2507-9144","authenticated-orcid":false,"given":"Stan","family":"Wong","sequence":"first","affiliation":[{"name":"Hong Kong Telecommunication Limited, Hong Kong SAR 999077, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2086-2487","authenticated-orcid":false,"given":"Bin","family":"Han","sequence":"additional","affiliation":[{"name":"Division of Wireless Communications and Radio Positioning, University of Kaiserslautern, 67663 Kaiserslautern, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5005-3635","authenticated-orcid":false,"given":"Hans D.","family":"Schotten","sequence":"additional","affiliation":[{"name":"Division of Wireless Communications and Radio Positioning, University of Kaiserslautern, 67663 Kaiserslautern, Germany"},{"name":"German Research Center of Artificial Intelligence (DFKI GmbH), 67663 Kaiserslautern, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,3,8]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"102","DOI":"10.1186\/s13638-021-01983-7","article-title":"Network Slicing: A next generation 5G perspective","volume":"2021","author":"Subedi","year":"2021","journal-title":"Eurasip J. Wirel. Commun. Netw."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"e125","DOI":"10.1002\/itl2.125","article-title":"Network slicing security: Challenges and directions","volume":"2","author":"Cunha","year":"2019","journal-title":"Wiley Int. Technol. Lett."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"99999","DOI":"10.1109\/ACCESS.2020.2997702","article-title":"5G network slicing: A security overview","volume":"8","author":"Olimid","year":"2020","journal-title":"IEEE Access"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Ordonez-Lucena, J., Ameigeiras, P., Contreras, L.M., Folgueira, J., and L\u00f3pez, D.R. (2021). On the rollout of network slicing in carrier networks: A technology radar. Sensors, 21.","DOI":"10.3390\/s21238094"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1007\/s10922-021-09623-7","article-title":"Design of a security and trust framework for 5G multi-domain scenarios","volume":"30","author":"Lekidis","year":"2022","journal-title":"J. Netw. Syst. Manag."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Wichary, T., Mongay Batalla, J., Mavromoustakis, C.X., \u017burek, J., and Mastorakis, G. (2022). Network slicing security controls and assurance for verticals. Electronics, 11.","DOI":"10.3390\/electronics11020222"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"701","DOI":"10.1109\/TNSM.2021.3052208","article-title":"Cross-network-slice authentication scheme for the 5th Generation mobile communication system","volume":"18","author":"Fan","year":"2021","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_8","unstructured":"Su\u00e1rez, L., Espes, D., Le Parc, P., Cuppens, F., Bertin, P., and Phan, C.T. (2018, January 16\u201317). Enhancing network slice security via Artificial Intelligence: Challenges and solutions. Proceedings of the Conference C & ESAR 2018, Rennes, France."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"6655216","DOI":"10.1155\/2021\/6655216","article-title":"Small-scale 5G testbeds for network slicing deployment: A systematic review","volume":"2021","author":"Esmaeily","year":"2021","journal-title":"Wiley Wirel. Commun. Mob. Comput."},{"key":"ref_10","unstructured":"GSM Association (2022, January 27). Whitepaper. An Introduction to Network Slicing. Available online: https:\/\/www.gsma.com\/futurenetworks\/wp-content\/uploads\/2017\/11\/GSMA-An-Introduction-to-Network-Slicing.pdf."},{"key":"ref_11","unstructured":"GSM Association (2022, January 27). NG.116. Generic Network Slice Template v6.0. Available online: https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/NG.116-v6.0.pdf."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Valsamas, P., Papadimitriou, P., Sakellariou, I., Petridou, S., Mamatas, L., Clayman, S., Tusa, F., and Galis, A. (2019, January 4\u20136). Multi-PoP network slice deployment: A feasibility study. Proceedings of the IEEE 8th International Conference on Cloud Networking (CloudNet), Coimbra, Portugal.","DOI":"10.1109\/CloudNet47604.2019.9064124"},{"key":"ref_13","unstructured":"(2022, January 27). Available online: https:\/\/www.cisecurity.org\/resources\/?type=benchmark."},{"key":"ref_14","unstructured":"NIST (2022, January 27). Defending against Software Supply Chain Attacks, Available online: https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/defending_against_software_supply_chain_attacks_508_1.pdf."},{"key":"ref_15","unstructured":"GSM Association (2022, January 27). Whitepaper. Mobile Telecommunications Security Landscape. Available online: https:\/\/www.gsma.com\/security\/wp-content\/uploads\/2021\/03\/id_security_landscape_02_21.pdf."},{"key":"ref_16","unstructured":"(2022, January 27). Available online: https:\/\/www.ncsc.gov.uk\/collection\/supply-chain-security."},{"key":"ref_17","unstructured":"(2022, January 27). ISO\/IEC 22237\u20141:2021.Information Technology\u2014Data Centre Facilities and Infrastructure\u2014Part I General Concept. Available online: https:\/\/www.iso.org\/standard\/78550.html."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"1545","DOI":"10.1109\/TSC.2018.2876254","article-title":"Sifter: A Service Isolation Strategy for Internet Applications","volume":"14","author":"Ye","year":"2021","journal-title":"IEEE Trans. Serv. Comput."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"1479","DOI":"10.1109\/TKDE.2019.2947676","article-title":"Extended Isolation Forest","volume":"33","author":"Hariri","year":"2021","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"ref_20","unstructured":"Carnes, J.R., and Fisher, D.H. (1993, January 10\u201313). Machine Learning Techniques for Fault Isolation and Sensor Placement. Proceedings of the 1993 Goddard Conference on Space Applications of Artificial Intelligence, Greenbelt, MD, USA."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"e186","DOI":"10.1002\/spy2.186","article-title":"An end-to-end trusted architecture for network slicing in 5G and beyond networks","volume":"5","author":"Ksentini","year":"2022","journal-title":"Secur. Priv."},{"key":"ref_22","unstructured":"3GPP, TS 38.300 (2022, January 27). NR; NR and NG-RAN Overall Description; Stage-2. Release 16. Available online: https:\/\/www.3gpp.org\/DynaReport\/38300.htm."},{"key":"ref_23","unstructured":"3GPP, TS 33.501 (2022, January 27). Security Architecture and Procedures for 5G System. Release 17. Available online: https:\/\/www.3gpp.org\/DynaReport\/33501.htm."}],"container-title":["Network"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2673-8732\/2\/1\/11\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T22:34:02Z","timestamp":1760135642000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2673-8732\/2\/1\/11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,3,8]]},"references-count":23,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2022,3]]}},"alternative-id":["network2010011"],"URL":"https:\/\/doi.org\/10.3390\/network2010011","relation":{},"ISSN":["2673-8732"],"issn-type":[{"value":"2673-8732","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,3,8]]}}}