Extended zero-trust and intelligent security for resilient and quantum-safe 6G networks and services

The project aims to establish a robust security framework for 6G ecosystems, underpinned by the zero-trust principle and emphasizing core tenets like resilience, privacy, and dependability.

Dynamic access control via a context-aware risk-based policy engine, leveraging rich cyber-threat intelligence and behavioral insights gathered from the 6G infrastructure, is at the core of the proposed approach.

Micro-segmentation of vulnerable virtualized functions from critical O-RAN assets is a primary goal to prevent attackers’ lateral movement capabilities and minimize damage.

Proactive security measures, will be deployed alongside sophisticated AI tools to optimize attacksurface reduction and enhance intrusion detection capabilities.

An intelligent extended detection and response solution will be developed, covering all layers of a 6G network; this entails the integration of collaborative intrusion detection networks and graph-based threat models, facilitating real-time and optimal responses to sophisticated multi-stage attacks targeting the 6G ecosystem.

Automation will be pivotal in various aspects, including threat modeling, and response orchestration, aided by blockchain to secure integration and lifecycle management of 6G applications.

Moreover, the project will prioritize supply chain security by implementing automated vulnerability scanning and introducing O-RAN application certification.

Quantum-safe technologies (QKD and PQC) and AI-driven solutions will be employed to safeguard against physical layer attacks, ensuring uninterrupted and secure data transmission in 6G networks.

Additionally, privacy-preserving and trusted AI/ML schemes will be developed upholding principles like fairness, explainability, and sustainability to ensure high energy efficiency and minimal environmental footprint of the proposed solutions.

These efforts aim to ensure that critical 6G communications infrastructure achieves high security and resilience of against evolving cyber-threats.