Context-based security by inspecting interfaces between ran and core in mobile networks

A method, comprising:

• monitoring network traffic at an interface between a radio access network (RAN) and a core of a mobile network at a security platform to identify an attach request message or an initial context setup message associated with a new session;
• extracting a plurality of parameters from the attach request message or the initial context setup message to associate contextual information with the new session at the security platform;
• and
• enforcing a security policy at the security platform on the new session based on one or more of the plurality of parameters to apply context-based security to the network traffic in the mobile network.

A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

• monitoring network traffic at an interface between a radio access network (RAN) and a core of a mobile network at a security platform to identify an attach request message or an initial context setup message associated with a new session;
• extracting a plurality of parameters from the attach request message or the initial context setup message to associate contextual information with the new session at the security platform;
• and
• enforcing a security policy at the security platform on the new session based on one or more of the plurality of parameters to apply context-based security to the network traffic in the mobile network.