3GPP
Explorer: Standards, Releases & Security Specifications
Standards Intelligence Engine for 5G & LTE Security
- ►Cross-Release Mapping
Instantly compare change requests (CRs) across Release 15, 16, and 17 specifications.
- ►Protocol Indexing
Deep-linked indexing for NAS (TS 24.501), NGAP (TS 38.413), HTTP/2 (SBA), and PFCP protocol definitions. Navigate from high-level architecture down to bit-level message formats.
// LAUNCH 3GPP EXPLORER
The 3GPP Explorer is a core module of the TelcoSec Intelligence Hub. Sign in or register to begin mapping standards.
ACCESS NOW [→]The 3GPP Explorer provides a comprehensive map of the 5G security landscape, tracking the evolution from 4G (Release 14) to the fully realized 5G architecture in Release 17. We focus specifically on the transition to the Service Based Architecture (SBA).
TS 33.501 CORE
In-depth indexing of the primary 5G Security Architecture specification. Map secondary authentication (EAP-TLS), unified data management (UDM) security, and SEPP-to-SEPP roaming encryption.
SBA THREAT MODELING
Detailed references for the HTTP/2 and JSON-based signaling stack. Track how OAuth2 and TLS 1.3 are implemented across N32 and N33 interfaces to mitigate legacy signaling exploits.
The 3GPP Explorer incorporates specialized indexing for Security Assurance Specifications (SCAS) and Security Assurance Methodology (SECAM). These standards define the security requirements and test cases for network product classes, allowing operators and testing laboratories to validate the hardware and software integrity of core and radio access nodes before deployment.
TS 33.511 gNodeB SCAS
Tracks specific security requirements and test cases for the 5G base station (gNodeB). This includes validating user plane ciphering protection, checking integrity protection thresholds for signaling protocols, verifying secure key storage, and auditing security boundaries between the distributed unit (DU) and central unit (CU) of the split RAN architecture.
TS 33.117 COMMON SECURITY
Catalogues security assurance requirements applicable to all 3GPP network products. It defines test cases for software package integrity verification, operating system hardening, authentication strengths, and secure storage of cryptographic keys.
Standards are dynamic documents that evolve rapidly in response to newly discovered security vulnerabilities and operational challenges. The 3GPP Explorer integrates an automated parser that monitors and tracks Change Requests (CRs) approved by the SA3 (Security) working group. These CRs represent official modifications that rectify logic flaws, protocol omissions, or cryptographic weaknesses in existing releases.
Failing to implement these approved changes in cellular infrastructure often leaves network implementations vulnerable to exploits, even when the vendor claims compliance with a major base release (e.g. Release 15 or 16). By mapping CR dependencies directly to standard reference architectures, the explorer helps telecom auditors identify gaps between theoretical standards compliance and actual operational security postures.