Tomasz Wojciech Nowak

Dr. Tomasz Wojciech Nowak

orcid

Research Focus & Metrics

Academic Career Length

9Years (2018-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
10 June 2021 in IEEE Access
Verified
Journal Article
Open access
TNTomasz Wojciech Nowak
Tomasz Wojciech Nowak
MSMariusz Sepczuk
Mariusz Sepczuk
Zbigniew KotulskiZbigniew Kotulski
Zbigniew Kotulski
WNWojciech Niewolski
Wojciech Niewolski
RARafal Artych
Rafal Artych
WJWARY Jean-Philippe
WARY Jean-Philippe
5G is the fifth-generation cellular network satisfying the requirements IMT-2020 (International Mobile Telecommunications-2020) of the International Telecommunication Union. Mobile network operators started using it worldwide in 2019. Generally, 5G achieves exceptionally high values of performance parameters of access and transmission. The application of edge servers has been proposed to facilitate implementing such requirements of 5G, resulting in 5G MEC (Multi-access Edge Computing) technology. Moreover, to optimize services for specific business applications, the concept of 5G vertical industries has been proposed. In this article, we study how the application of the MEC technology affects the functioning of 5G MEC-based services. We consider twelve representative vertical industries of 5G MEC by presenting their essential characteristics, threats, vulnerabilities, and known attacks. Furthermore, we analyze their functional properties, give efficiency patterns and identify the effect of applying the MEC technology in 5G on the resultant network's quality parameters to determine the expected security requirements. As a result of the research, we identify the impact of classified threats on the 5G empowered vertical industries and identify the most sensitive cases to focus on their protection against network attacks in the first place.

20 March 2018 in EURASIP Journal on Information Security
Verified
Journal Article
Open access
PDF file
Zbigniew KotulskiZbigniew Kotulski
Zbigniew Kotulski
TNTomasz Wojciech Nowak
Tomasz Wojciech Nowak
MSMariusz Sepczuk
Mariusz Sepczuk
MTMarcin Tunia
Marcin Tunia
RARafal Artych
Rafal Artych
JWJean-Philippe Wary
Jean-Philippe Wary
Although 5G (fifth generation) networks are still in the realm of ideas, their architecture can be considered as reaching a forming phase. There are several reports and white papers which attempt to precise 5G architectural requirements presenting them from different points of view, including techno-socio-economic impacts and technological constraints. Most of them deal with network slicing aspects as a central point, often strengthening slices with slice isolation. The idea of isolation in the network is not new. However, currently considered technologies give new capabilities that can bring added value in this field. The goal of this paper is to present and examine the isolation capabilities and selected approaches to its realization in network slicing context. As the 5G architecture is still evolving, the specification of isolated slices operation and management brings new requirements that need to be addressed, especially in a context of end-to-end (E2E) security. Thus, an outline of recent trends in slice isolation and a set of challenges are presented. The challenges, if properly addressed, could be a step from the concept of 5G networks to proof-of-concept solutions which provide E2E user’s security based on slices isolation. Among other things, the key features are proper slice design and establishment, security at interfaces, suitable access protocols, correct virtual resources sharing, and an adaptable management and orchestration architecture (MANO). In conclusion of the paper, short outlines of two of the main secure isolation challenges are given: a proper definition of isolation parameters and designing suitable MANO system.

18 July 2021 in Electronics
Verified
Journal Article
Open access
PDF file
WNWojciech Niewolski
Wojciech Niewolski
TNTomasz Wojciech Nowak
Tomasz Wojciech Nowak
MSMariusz Sepczuk
Mariusz Sepczuk
Zbigniew KotulskiZbigniew Kotulski
Zbigniew Kotulski
MEC technology provides a distributed computing environment in 5G mobile networks for application and service hosting. It allows customers with different requirements and professional competencies to use the services offered by external suppliers. We consider a service access control framework on 5G MEC networks that is efficient, flexible, and user-friendly. Its central element is the MEC Enabler, which handles AAA requests for stakeholders accessing services hosted on the edge servers. The JSON Web Token (JWT) open standard is a suitable tool for the MEC Enabler to manage access control credentials and transfer them securely between parties. In this paper, in the context of access control, we propose the token reference pattern called JSON MEC Access Token (JMAT) and analyze the effectiveness of its available protection methods in compliance with the standard requirements of MEC-hosted services in 5G networks.

10 February 2021
Verified
Book Chapter
Closed access
PDF file
Zbigniew KotulskiZbigniew Kotulski
Zbigniew Kotulski
WNWojciech Niewolski
Wojciech Niewolski
TNTomasz Wojciech Nowak
Tomasz Wojciech Nowak
MSMariusz Sepczuk
Mariusz Sepczuk

28 October 2022 in Electronics
Verified
Journal Article
Open access
PDF file
WNWojciech Niewolski
Wojciech Niewolski
TNTomasz Wojciech Nowak
Tomasz Wojciech Nowak
MSMariusz Sepczuk
Mariusz Sepczuk
Zbigniew KotulskiZbigniew Kotulski
Zbigniew Kotulski
RARafal Artych
Rafal Artych
WJWARY Jean-Philippe
WARY Jean-Philippe
Modern and future services require ultra-reliable mobile connections with high bandwidth parameters and proper security protection. It is possible to ensure such conditions by provisioning services in the Multi-Access Edge Computing system integrated with fifth-generation mobile networks. However, the main challenge in the mentioned architecture is providing a secure service migration with all related data and security requirements to another edge computing host area when the user changes its physical location. This article aims to present the state of research on the migration of the security context between service instances in Edge/MEC servers, specify steps of the migration procedure, and identify new security challenges inspired by use cases of 5G vertical industries. For this purpose, the analysis of the security context’s structure and basic concept of the Security Service Level Agreement was performed and presented in the document. Next, a further investigation of the security context was conducted, including requirements for its reliable migration between edge serves instances. The study mainly focused on crucial migration challenges and possible solutions to resolve them. Finally, the authors presented how the proposed solution can be used to protect 5G vertical industries services based on several mobile use cases.

31 July 2024 in Journal of Network and Systems Management
Verified
Journal Article
Open access
PDF file
Zbigniew KotulskiZbigniew Kotulski
Zbigniew Kotulski
TNTomasz Wojciech Nowak
Tomasz Wojciech Nowak
MSMariusz Sepczuk
Mariusz Sepczuk
KBKrzysztof Bocianiak
Krzysztof Bocianiak
TPTomasz Pawlikowski
Tomasz Pawlikowski
WJWARY Jean-Philippe
WARY Jean-Philippe
Competing service providers in the cloud environment ensure services are delivered under the promised security requirements. It is crucial for mobile services where user’s movement results in the service’s migration between edge servers or clouds in the Continuum. Maintaining service sovereignty before, during, and after the migration is a real challenge, especially when the service provider has committed to ensuring its quality following the Service Level Agreement. In this paper, we present the main challenges mobile service providers face in a cloud environment to guarantee the required level of security and digital sovereignty as described in the Security Service Level Agreement, with emphasis on challenges resulting from the service migration between the old and new locations. We present the security and sovereignty context intended for migration and the steps of the migration algorithm. We also analyze three specific service migration cases for three vertical industries with different service quality requirements.