ERNW says source code for Huawei 5G Core Network UDG is "good quality"

ERNW, an independent IT security service provider in Germany, has conducted a technical review of the source code for Huawei's unified distributed gateway (UDG) on 5G core networks.

ERNW senior auditors reviewed the source code by using leading tools and methods as well as the industry's best practices, and released a review report. The report showed that the source code quality is a good indicator that Huawei has established a mature and appropriate software engineering process for UDG.

This is a convincing proof that Huawei 5G core networks are secure and reliable.

The UDG is a converged network element that can process both 4G and 5G services. On a 5G core network, it can function as a user plane function (UPF). On a traditional network, it can function as a serving gateway for the user plane and a packet data network gateway for the user plane.

ERNW reviewed the source code for UDG components in the Huawei Cyber Security Transparency Center in Brussels, Belgium.

The review covered source code quality, build processes, and open-source component lifecycle management. The source code quality review showed that the complexity of the source code is below their threshold, duplicate code is rarely present only where appropriate, and unsafe functions seemed to be avoided wherever possible.

The build process review indicated that all binaries are compiled with secure compilation options and are also built with an acceptable level of binary equivalence.

The review of the lifecycle management of open-source components showed that the separation of open-source code, code handling, as well as documentation and patch management are all reasonable and meet modern standards.

Considering all the results of the technical review, the source code quality is a good indicator that Huawei has established a mature and appropriate software engineering process.

Socio-economic development has become more dependent on 5G, and the world has taken note, believing that threats and potential impacts are increasing and that global supply chains need to be kept under control to reduce their risks.

To keep up with the rapid change of technology, Huawei is actively exploring its security capabilities and will be more open, frank, and transparent when collaborating with customers, industry partners, and government agencies. This shift is best seen in its collaboration with ERNW throughout this review.

Over the past 30 years, Huawei's products and solutions have been deployed in more than 170 countries and regions, and have maintained a good reputation for security in the industry. Under the new technical and security environment, Huawei regards building and implementing an E2E global cyber security assurance system as one of its key development strategies.

Huawei will continue investing in cyber security R&D and innovation to enhance cyber security capabilities. Huawei will also strengthen its collaboration with carriers, industry partners, and governments to be more transparent and open, aiming to build a trustworthy cyber security environment for 5G.

About Huawei

Huawei is a leading global provider of information and communications technology (ICT) infrastructure and smart devices. With integrated solutions across four key domains – telecom networks, IT, smart devices, and cloud services – Huawei is committed to bringing digital to every person, home and organisation for a fully connected, intelligent world.

Huawei's end-to-end portfolio of products, solutions and services are both competitive and secure. Through open collaboration with ecosystem partners, Huawei creates lasting value for our customers, working to empower people, enrich home life, and inspire innovation in organisations of all shapes and sizes.

At Huawei, innovation focuses on customer needs. Huawei invests heavily in basic research, concentrating on technological breakthroughs that drive the world forward. Huawei has more than 194,000 employees and operates in over 170 countries and regions. Founded in 1987, Huawei is a private company fully owned by its employees.

In Europe, Huawei currently employs over 13,300 staff and runs two regional offices and 23 R&D sites. So far, Huawei has established 230 technical cooperation projects and has partnered with over 150 universities across Europe.