Service-Based Interface attack vectors

SBI Attack Vectors

The Service-Based Interface — HTTP/2 over TLS with OAuth tokens — has several attack vectors. Token theft: an attacker who obtains a valid OAuth token can make SBI calls until the token expires. Mitigations: short token lifetimes (typically 30-60 minutes), scope limitations, monitoring for token reuse patterns from unexpected sources. NF impersonation: an attacker who can present a valid TLS client certificate matching a legitimate NF can impersonate that NF. Mitigations: strict certificate issuance with internal CA, short certificate lifetimes, certificate revocation monitoring, and binding…