Application and network slice security profile mapping for secure tunneling

A network device residing in a mobile network, comprising:

• a memory configured to store a plurality of security profiles;
• and
• one or more processors, or logic, configured to:
• identify a first network slice of the mobile network for use by a first session between a first user equipment device (UE) and a first application hosted by a first hosting device,
• obtain a first security profile, from the plurality of security profiles stored in the memory, based on an identity of the first application and based on the identified first network slice, and
• establish, using the obtained first security profile, a first secure tunnel between the network device and the first hosting device for transporting first data units associated with the first session between the network device and the first hosting device.

A non-transitory storage medium storing instructions executable by a network device, residing in a mobile network, with one or more processors, wherein execution of the instructions causes the network device to:

• identify a first network slice of the mobile network for use by a first session between a first user equipment device (UE) and a first application hosted by a first hosting device;
• obtain a first security profile based on an identity of the first application and based on the identified first network slice;
• and
• establish, using the obtained first security profile, a first secure tunnel between the network device and the first hosting device for transporting first data units associated with the first session between the network device and the first hosting device.