Study on Reducing Information Exposure over SBI
The present document identifies scenarios where excessive data may be exposed over SBI when an NF-Consumer accesses an API exposed by an NF-Producer, and studies potential solutions to limit the same. The document will focus on following aspects:
- To study the need and potential solutions for avoiding excessive data exposure over SBI.
- To study the need and potential solutions for avoiding indirect access to data via, e.g. subscriptions, even as direct access to the data-set is not allowed.
NOTE 1: The study does not preclude API specific solutions or a generic solution applicable to all APIs.
NOTE 2: The study does not preclude issues not relating to security aspects of excessive data exposure.