Collaborative Research: CyberTraining: Pilot: A Zero Trust-Based Security Training Program in Open RAN Cyberinfrastructure

Abstract

The Open Radio Access Network (O-RAN) has emerged as a transformative advancement in next-generation cellular cyberinfrastructure through its support for open interfaces, modular architectures, virtualization, and multi-vendor interoperability. Although these capabilities significantly accelerate innovation in future mobile network design, the open and disaggregated nature of O-RAN also introduces substantial cybersecurity challenges, rendering traditional perimeter-based and static security mechanisms insufficient for protecting the O-RAN ecosystem. To address these challenges, Zero Trust Architecture (ZTA), based on the principle of “never trust, always verify,” has emerged as a promising security framework that naturally aligns with the operational characteristics of O-RAN systems. Recent research efforts, together with the white paper released by the O-RAN Alliance, have emphasized the critical role of ZTA in enhancing the security, resilience, and trustworthiness of O-RAN deployments. Aligned with the NSF mission of securing the national defense, and driven by the rapidly growing demands for both O-RAN cyberinfrastructure and Zero Trust-enabled cybersecurity workforce development, this project develops a comprehensive interdisciplinary training program to equip the next generation of researchers and professionals with cutting-edge knowledge and hands-on experience in O-RAN cyberinfrastructure, wireless networking, and securing cloud-native O-RAN ecosystems using ZTA. This pilot project includes three tasks. Specifically, task 1 focuses on establishing a high-fidelity, over-the-air O-RAN cyberinfrastructure across collaborating institutions, serving as a real-world testbed for education and training. The developed platform not only emulates practical mobile network environments but also provides a cyberinfrastructure-in-the-loop learning environment that enables students to directly observe and understand how ZTA influences the operation, security, and management of O-RAN cyberinfrastructure. Task 2 focuses on developing a set of hands-on, lab-based security training modules covering user access control, network functions, and open computing platforms. Leveraging the established O-RAN cyberinfrastructure, each module provides experiential learning opportunities that allow participants to evaluate and understand how ZTA can secure key O-RAN layers, interfaces, and system units within distributed wireless environments. Task 3 focuses on the development of a two-week on-site summer workshop designed to provide participants with in-depth exposure to O-RAN cyberinfrastructure deployment, operation, and security. Through immersive hands-on activities and real-world case studies, the workshop bridges the gap between theoretical cybersecurity concepts and practical implementation challenges in securing O-RAN systems. This project will also enable various broader impacts, including undergraduate student training opportunities, openly disseminated training materials, and outreach activities.