Modern mobile networks are no longer closed systems used only for connectivity. In 5G and future 6G networks, operators increasingly expose selected network capabilities to external applications through standardised APIs (Application Programming Interfaces).
This openness enables innovation to occur – applications can request network information, optimise performance, support smart mobility, or deliver new digital services specifically designed twardso user needs.
However, opening up network capabilities also introduces new security and privacy risks. PoC#10 focuses on understanding these risks and demonstrating how future networks can expose capabilities securely, without compromising trust, reliability, or user data.
Why Network Exposure Matters
Network capability exposure allows third-party developers, vertical industries and service providers to interact directly with the network. For example, an application may request information about network conditions, subscribe to performance events, or trigger specific network behaviours.
This creates exciting and innovative opportunities, however, it also increases the attack surface of the network. APIs become new entry points that attackers may exploit if these are not properly protected. PoC#10 investigates how these risks can be addressed in a structured and automated way.
Key Threats Addressed in PoC#10
PoC#10 focuses on several realistic threat scenarios that arise when network capabilities are exposed. These include:
- Sensitive data leakage, where poorly protected APIs accidentally reveal confidential information such as subscriber data, network configurations, or operational logs.
- Unauthorised access, where attackers attempt to use exposed interfaces without proper permissions.
- Privilege escalation, where an application gains access to capabilities beyond what it is allowed to use.
- API abuse, including excessive or malicious requests that may disrupt network operations.
These threats are particularly critical in future 6G environments, where networks are more dynamic, cloud-native and distributed across central and edge infrastructures.
What PoC#10 will Demonstrate
PoC#10 will demonstrate how exposed network capabilities can be protected through continuous monitoring, strong access control and intelligent analysis.
Instead of relying on static rules alone, the PoC will show how network interactions can be observed in real time. Telemetry data, access logs and configuration changes can be continuously collected and analysed to identify suspicious behaviour early. This allows the network to detect misuse before it escalates into a serious incident.
A key aspect of PoC#10 is enforcing who can access what and under which conditions. Applications and users will be authenticated and authorised using established identity and access management mechanisms. Communication with exposed APIs will be protected through encryption, ensuring that data cannot be easily intercepted or manipulated.
Seeing the Network as a Whole
One of the challenges in securing exposed network capabilities is understanding how different components, interfaces and services are connected. PoC#10 considers this, by correlating data from multiple sources and building a unified view of network interactions.
By linking operational data, access policies and runtime behaviour, the system can identify inconsistencies, misconfigurations, or unexpected access patterns. This makes it easier to spot issues such as legacy interfaces that should no longer be exposed, or applications using capabilities in unexpected ways.
Responding to Threats Automatically
Detection by its own is not sufficient in highly dynamic networks. PoC#10 will also demonstrate how automated responses can be triggered when a security issue is identified.
Depending on the situation, the network may:
- Restrict or revoke access to certain APIs,
- Enforce stricter policies,
- Generate alerts for operators,
- Adjust exposure rules dynamically.
These actions will help protect against security incidents, containing them quickly and reducing the risk of service disruption or data leakage.
Why this is Important for the Future
As 6G networks become platforms for digital innovation, secure exposure of network capabilities will be essential. Without proper safeguards, openness could undermine trust in the network and limit adoption by industries and public services.
PoC#10 will demonstrate how MARE contributes to building secure, transparent and controllable network exposure mechanisms. By combining monitoring, policy enforcement and intelligent analytics, future networks can remain open to innovation while staying resilient against misuse and attacks.
