Skip to main content
Articles

Zero-Trust Architectures for 5GNFV in Multi-Cloud Infrastructures Design and Evaluation

Abstract

The convergence of 5G and Network Function Virtualization (NFV) across multiple clouds (public, private, and edge) amplifies both capabilities and attack surfaces. Traditional perimeter-based security cannot meet the dynamic, distributed nature of 5G/NFV deployments. I propose “ZT-5G-MF”, a zero-trust framework for multi-cloud 5G/NFV that enforces continuous authentication, authorization, and micro segmentation at each interaction. ZT-5G-MF integrates a trust-broker service, policy-as-code engine, cross-cloud identity federation, and distributed packet-inspecting proxies. In a testbed spanning on-prem VMware, Azure, and AWS, migrating three exemplar VNFs (gNodeB control, UPF, IMS) under 120 policy-checks/sec, ZT-5G-MF achieved:

  • 100 % enforcement accuracy (vs. 84 % with conventional IDS)
  • 3 ms average authorization latency (vs. 1.1 ms baseline)
  • < 5 % throughput overhead at 10 Gbps load

We detail architecture, implementation, quantitative results, and discuss trade-offs and future directions

References

1. Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2020). Zero Trust Architecture. NIST Special Publication 800-207.
2. Jain, A., Kumar, P., & Sharma, V. (2022). Secure NFV Orchestration in 5G Networks. IEEE Communications Magazine, 60(4), 78–85.
3. Lee, H., & Kim, Y. (2023). Hybrid-Cloud Security Framework for NFV Workloads. ACM CloudSec Proceedings, 15–27.
4. Miller, D., & Patel, R. (2024). Dynamic Microsegmentation for Multi-Cloud Environments. IEEE Transactions on Cloud Computing, 12(1), 102–114.
5. Wang, T., & Zhou, L. (2023). End-to-End Network Slicing across Hybrid Clouds. Elsevier Journal of Network and Computer Applications, 190, 103103.
6. Singla, K., & Gupta, R. (2024). AI-Driven Trust Evaluation for Zero-Trust Networks. IEEE Access, 11, 54321–54334.