O-RAN A1-P Consumer

Sorry, not available in this language yet

English
日本語
简体中文

Polaris Platform | Integrated, cloud-based AST solution optimized for development and DevSecOps teams
fAST Static | Easy-to-use, cloud-based static application security testing (SAST)
fAST SCA | Automated, cloud-based software composition analys (SCA)
fAST Dynamic | Streamline dynamic application security testing

Coverity SAST | Address security and quality defects in code as it's being developed
Black Duck SCA | Secure and manage open source risks in applications and containers
WhiteHat Dynamic | Continuous web application security testing in production
Seeker IAST | Automate web security testing within your DevOps pipelines
Software Risk Manager ASPM | Manage application security programs at enterprise scale
Defensics Protocol Fuzzing | Identify defects and zero-day vulnerabilities in services and protocols

Code Sight IDE Plugin | Secure code as you write it in your IDE
DevSecOps Integrations | Integrate AppSec tools into DevOps workflows

Program Strategy & Planning | Measure, scale, and optimize your AppSec program
Threat & Risk Assessments | Understand and address internal and external security risks
Security Training | Equip development teams with the skills they need to produce more secure software
Implementation & Deployment | Optimize utilization, management and deployment of AppSec tools
Security Testing Services | On-demand AppSec testing resources and expertise
Penetration Testing | Identify business-critical vulnerabilities with on-demand testing expertise
Mobile Application Security Testing (MAST) | Security testing, optimized for the unique risks of mobile applications
Open Source & Security Audits | Comprehensive technical due diligence services for M&A

AI-generated code | Harness the power of AI coding assistants while managing the risks
API Security Testing | Manage software risks with a holistic API security testing program
AppSec Consolidation | Simplify your application security program
Application Security Testing | Solutions to address security risks at all stages of the application life cycle
DevSecOps | Solutions to help shift security left without slowing down your development teams
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end
Manage AppSec Risk | Scale your application security program without increasing complexity or adding friction
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud
Open Source License Compliance | Effective solutions for ensuring open source license compliance
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP
Quality & Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators

Static Analysis (SAST) | Address security and quality defects in code as it's being developed
Software Composition Analysis (SCA) | Secure and manage open source risks in applications and containers
Dynamic Analysis (DAST) | Continuous web application security testing in production
Interactive Analysis (IAST) | Automate web security testing within your DevOps pipelines
Penetration Testing | Identify business-critical vulnerabilities with on-demand testing expertise
Mobile Application Security Testing (MAST) | On-demand security testing, optimized for the unique risks of mobile applications
Application Security Posture Mangagement (ASPM) | Manage application security programs at enterprise scale
Fuzz Testing | Identify defects and zero-day vulnerabilities in services and protocols

Financial Services | Protect sensitive customer and financial data from rapidly evolving security threats
IoT & Embedded | Ensure your embedded and IoT devices are safe, secure, and reliable
Automotive | Build software security & reliability into the modern connected car
Telecommunications | Create seamless and safe mobile experiences, from silicon to software
Aerospace & Defense | Solutions for automating mission-critical development
Public Sector | Application security for government agencies and their suppliers
Medical Device | Safeguard medical devices and applications

Dev and DevOps Teams | Build secure software while maintaining developer productivity and pipeline velocity.
Security Teams | Align people, processes, and technology to minimize software risk and transform your business.
Legal Teams | Solutions to protect your IP and manage risk.

O-RAN A1-P Consumer Test Suite Data Sheet

Test Suite:

O-RAN A1-P Consumer Test Suite

Direction:

Consumer

The O-RAN A1-P Consumer Test suite is a Defensics test suite designed for testing the robustness of O-RAN A1 policy consumers. It attempts to discover bugs in tested implementations by sending them invalid, incorrect, and malformed JSON data. The test suite is intended strictly for automated black-box negative testing in an isolated lab environment.

Used specifications

Specification

Title

Notes

O-RAN.WG2.A1GAP-R003-v03.01

O-RAN A1 interface: General Aspects and Principles 3.01

O-RAN.WG2.A1TD-v05.01

O-RAN A1 interface: Type Definitions 5.01

O-RAN.WG2.A1AP-R003-v04.00

O-RAN A1 interface: Application Protocol 4.0

O-RAN.WG2.A1TP-R003-v02.01

O-RAN A1 interface: Transport Protocol 2.01

Tool-specific information

Tested messages

Specifications

Notes

Query policy type identifiers

O-RAN A1 interface: Application Protocol 4.0

Query policy type schema

O-RAN A1 interface: Application Protocol 4.0

Query policies

O-RAN A1 interface: Application Protocol 4.0

Create policy

O-RAN A1 interface: Application Protocol 4.0

Update policy

O-RAN A1 interface: Application Protocol 4.0

Query policy status

O-RAN A1 interface: Application Protocol 4.0

Delete policy

O-RAN A1 interface: Application Protocol 4.0

Supported features

Specifications

Notes

HTTP 1.1

RFC 2616

HTTP 2

RFC 7540

JSON

RFC 8259

TLS 1.2/1.3

RFC 8446

Unsupported features

Specifications

Notes

HTTP Post notification

O-RAN A1 interface: Application Protocol 4.0

Notification message from producer to consumer is not supported

Test tool general features

Fully automated black-box negative testing
Ready-made test cases
Written in Java(tm)
GUI command line remote interface modes
Instrumentation (health-check) capability
Support and maintenance
Comprehensive user documentation
Results reporting and analysis