Collaborative Research: CyberTraining: Pilot: A Zero Trust-Based Security Training Program in Open RAN Cyberinfrastructure

The Open Radio Access Network (O-RAN) has emerged as a transformative advancement in next-generation cellular cyberinfrastructure through its support for open interfaces, modular architectures, virtualization, and multi-vendor interoperability. Although these capabilities significantly accelerate innovation in future mobile network design, the open and disaggregated nature of O-RAN also introduces substantial cybersecurity challenges, rendering traditional perimeter-based and static security mechanisms insufficient for protecting the O-RAN ecosystem. To address these challenges, Zero Trust Architecture (ZTA), based on the principle of “never trust, always verify,” has emerged as a promising security framework that naturally aligns with the operational characteristics of O-RAN systems. Recent research efforts, together with the white paper released by the O-RAN Alliance, have emphasized the critical role of ZTA in enhancing the security, resilience, and trustworthiness of O-RAN deployments. Aligned with the NSF mission of securing the national defense, and driven by the rapidly growing demands for both O-RAN cyberinfrastructure and Zero Trust-enabled cybersecurity workforce development, this project develops a comprehensive interdisciplinary training program to equip the next generation of researchers and professionals with cutting-edge knowledge and hands-on experience in O-RAN cyberinfrastructure, wireless networking, and securing cloud-native O-RAN ecosystems using ZTA. This pilot project includes three tasks. Specifically, task 1 focuses on establishing a high-fidelity, over-the-air O-RAN cyberinfrastructure across collaborating institutions, serving as a real-world testbed for education and training. The developed platform not only emulates practical mobile network environments but also provides a cyberinfrastructure-in-the-loop learning environment that enables students to directly observe and understand how ZTA influences the operation, security, and management of O-RAN cyberinfrastructure. Task 2 focuses on developing a set of hands-on, lab-based security training modules covering user access control, network functions, and open computing platforms. Leveraging the established O-RAN cyberinfrastructure, each module provides experiential learning opportunities that allow participants to evaluate and understand how ZTA can secure key O-RAN layers, interfaces, and system units within distributed wireless environments. Task 3 focuses on the development of a two-week on-site summer workshop designed to provide participants with in-depth exposure to O-RAN cyberinfrastructure deployment, operation, and security. Through immersive hands-on activities and real-world case studies, the workshop bridges the gap between theoretical cybersecurity concepts and practical implementation challenges in securing O-RAN systems. This project will also enable various broader impacts, including undergraduate student training opportunities, openly disseminated training materials, and outreach activities. This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.