Zero-Trust Security Framework for Cloud-Native MBNO/MVNE Architectures

References

[1] R. Chandramouli and Z. Butcher, “A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Location Environments,” NIST Special Publication 800-207A, National Institute of Standards and Technology, 2023.

[2] K. Cherladine, “AI-Powered Networked Management: The Future of MVNOs and MVNAs,” International Journal of Computer Trends and Technology, vol. 72, no. 8, pp. 180–189, 2024.

[3] K. Cherladine, “Innovative Telecom: MVNOs and MVNAs Leveraging Cloud-Based Technologies,” International Journal of Computer Trends and Technology, vol. 72, no. 8, pp. 190–198, 2024.

[4] ITU-T, “Guidelines for zero trust-based access control platform in telecommunication networks,” Technical Report TR.zt-acp, 2024.

[5] ITU-T, “Assessing trust evaluation models for telecommunication networks,” Recommendation Y.3260, 2024.

[6] NIST, “Zero Trust Networks,” National Institute of Standards and Technology, 2024.

[7] NIST, “Advanced Security Architectures for Next Generation Wireless,” National Institute of Standards and Technology, 2024.

[8] NIST, “NIST Participates in First Workshop on Zero Trust Architecture in Mobile Networks,” National Institute of Standards and Technology, Nov. 2024.

[9] NIST, “NIST Hosts Meeting of O-RAN Alliance Security Experts,” National Institute of Standards and Technology, May 2024.

[10] K. Cherladine, “Navigating Security and Privacy: Best Practices in MVNO Networks,” 2024/06, vol. 12, no. 6, pp. 1–4, 2024.

[11] NIST, “The Fundamentals of 6G: AI, Security, and Open RAN,” National Institute of Standards and Technology, 2025.

[12] R. Chandramouli, “Zero Trust Architecture,” NIST Special Publication 800-207, National Institute of Standards and Technology, 2022 edition/revisions.

[13] National Cybersecurity Center of Excellence, “Implementing a Zero Trust Architecture,” NIST Cybersecurity Practice Guide, National Institute of Standards and Technology, 2024.

[14] ITU-T, “Guidelines for high-level zero trust model and its security capabilities in telecommunication networks,” Work Item X.ztmc, Study Period 2022–2024.

[15] K. Cherladine and B. R. Rallabandi, “The Future of Carrier Integration: Leveraging AWS and 5G SA to Build Scalable Telecom Infrastructure,” in 2025 IEEE Connecting the Unconnected Europe, Middle East, and Africa …, 2025.

[16] IEEE, “A Run-Time Framework for Ensuring Zero-Trust State of Client’s Machines in Cloud Environment,” IEEE Transactions on Cloud Computing, vol. 13, no. 1, pp. 61–74, 2025. DOI: 10.1109/TCC.2024.3503358.

[17] K. Cherladine, “Cybersecurity Challenges and Solutions in 5G SA and AWS Cloud-Based Telecom Networks,” Journal of Information Systems Engineering and Management, vol. 9, no. 4, pp. 1–13, 2024.

[18] O-RAN Alliance, “O-RAN Security Protocols Specifications,” O-RAN Alliance, 2023.

[19] 3GPP, “Security architecture and procedures for 5G System,” 3GPP TS 33.501, Release 17/18, 2022–2024.

[20] 3GPP, “Security assurance specification for 5G network products,” 3GPP TS 33.511, Release 17/18, 2022–2025.

@article{1723750,
      author = {Karthick Cherladine},
      title = {Zero-Trust Security Framework for Cloud-Native MBNO/MVNE Architectures},
      journal = {Iconic Research And Engineering Journals},
      year = {2025},
      volume = {8},
      number = {7},
      pages = {962-968},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1723750.pdf},
      abstract = {The rapid adoption of cloud-native technologies in Mobile Virtual Network Operator (MVNO) and Mobile Virtual Network Enabler (MVNE) architectures has introduced new security challenges due to distributed services, dynamic workloads, multi-cloud environments, and extensive third-party integrations. Traditional perimeter-based security models are insufficient for protecting highly dynamic telecom infrastructures. This paper proposes a Zero-Trust Security Framework for cloud-native MVNO/MVNE architectures that continuously verifies users, devices, workloads, applications, and network services before granting access. The proposed framework integrates identity-centric authentication, micro-segmentation, least-privilege access control, continuous monitoring, policy-based authorization, workload protection, and real-time threat detection. It further emphasizes secure API communication and protection of sensitive subscriber and operational data across distributed environments. The framework aims to reduce unauthorized access, lateral movement, insider threats, and service disruption while improving security visibility and regulatory compliance. The proposed approach provides a scalable and adaptive security foundation for next-generation telecom networks.},
      keywords = {Zero Trust, Cloud-Native Security, MVNO, MVNE, Cybersecurity, Micro-Segmentation, Identity Management, Network Security, Telecom Security, Cloud Computing.},
      month = {January},
      doi = {https://doi.org/10.64388/IREV8I7-1723750}
  }