O-RAN A1-P Producer

Sorry, not available in this language yet

English
日本語
简体中文

AI-generated code | Harness the power of AI coding assistants while managing the risks.
API Security Testing | Manage software risks with a holistic API security testing program.
AppSec Program Consolidation | Simplify your application security program.
Application Security Testing | Solutions to address security risks at all stages of the application life cycle.
DevSecOps | Solutions to help shift security left without slowing down your development teams.
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end.
Manage Enterprise AppSec Risk | Scale your application security program without increasing complexity or adding friction.
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud.
Open Source License Compliance | Effective solutions for ensuring open source license compliance.
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP.
Quality and Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators.

Static Analysis (SAST) | Analyzing code for security vulnerabilities without executing it.
Software Composition Analysis (SCA) | Analyzing software components for security and license compliance.
Dynamic Analysis (DAST) | Testing running applications for security vulnerabilities.
Interactive Analysis (IAST) | Real-time security testing during application execution.
Penetration Testing | Simulated cyberattacks to identify vulnerabilities.
Mobile Application Security Testing (MAST) | Ensuring the security of mobile applications.
Application Security Posture Management (ASPM) | Managing and improving application security posture.
Fuzz Testing Solutions | Identifying vulnerabilities by inputting random data to applications.

Automotive | Security solutions for automotive industry applications.
Financial Services | Security solutions tailored for financial services.
IoT & Embedded | Security for Internet of Things and embedded systems.
Medical Devices | Security solutions for medical devices.
Public Sector | Security solutions for government and public sector organizations.

Dev and DevOps Teams | Security tools and practices for development and DevOps teams.
Security Teams | Solutions and support for dedicated security teams.
Legal Teams | Resources and compliance tools for legal teams.

O-RAN A1-P Producer Test Suite Data Sheet

Test Suite:

O-RAN A1-P Producer Test Suite

Direction:

Producer

The A1-P-Producer suite is a Defensics test suite designed for testing the robustness of O-RAN A1 policy producer. It attempts to discover bugs in tested implementations by sending them invalid, incorrect, and malformed JSON data. The test suite is intended strictly for automated black-box negative testing in an isolated lab environment.

Used specifications

Specification

Title

Notes

O-RAN.WG2.A1GAP-R003-v03.01

O-RAN A1 interface: General Aspects and Principles 3.01

O-RAN.WG2.A1TD-v05.01

O-RAN A1 interface: Type Definitions 5.01

O-RAN.WG2.A1AP-R003-v04.00

O-RAN A1 interface: Application Protocol 4.0

O-RAN.WG2.A1TP-R003-v02.01

O-RAN A1 interface: Transport Protocol 2.01

Tool-specific information

Tested messages

Specifications

Notes

Query policy type identifiers

O-RAN A1 interface: Application Protocol 4.0

Create policy

O-RAN A1 interface: Application Protocol 4.0

Update policy

O-RAN A1 interface: Application Protocol 4.0

Query policy status

O-RAN A1 interface: Application Protocol 4.0

Delete policy

O-RAN A1 interface: Application Protocol 4.0

Supported features

Specifications

Notes

HTTP 1.1

RFC 2616

HTTP 2

RFC 7540

JSON

RFC 8259

TLS 1.2/1.3

RFC 8446

OAuth2.0

RFC 6749

Only client credentials authentication scheme supported

Unsupported features

Specifications

Notes

HTTP Post notification

O-RAN A1 interface: Application Protocol 4.0

Notification message from producer to consumer is not supported

Test tool general features

Fully automated black-box negative testing
Ready-made test cases
Written in Java(tm)
GUI command line remote interface modes
Instrumentation (health-check) capability
Support and maintenance
Comprehensive user documentation
Results reporting and analysis