Abstract:The virtualization and softwarization of 5G and NextG are critical enablers of the shift to flexibility, but they also present a potential attack surface for threats. However, current security research in communication systems focuses on specific aspects of security challenges and lacks a holistic perspective. To address this challenge, a novel systematic fuzzing approach is proposed to reveal, detect, and predict vulnerabilities with and without prior knowledge assumptions from attackers. It also serves as a digital twin platform for system testing and defense simulation pipeline. Three fuzzing strategies are proposed: Listen-and-Learn (LAL), Synchronize-and-Learn (SyAL), and Source-and-Learn (SoAL). The LAL strategy is a black-box fuzzing strategy used to discover vulnerabilities without prior protocol knowledge, while the SyAL strategy, also a black-box fuzzing method, targets vulnerabilities more accurately with attacker-accessible user information and a novel probability-based fuzzing approach. The white-box fuzzing strategy, SoAL, is then employed to identify and explain vulnerabilities through fuzzing of significant bits. Using the srsRAN 5G platform, the LAL strategy identifies 129 RRC connection vulnerabilities with an average detection duration of 0.072s. Leveraging the probability-based fuzzing algorithm, the SyAL strategy outperforms existing models in precision and recall, using significantly fewer fuzzing cases. SoAL detects three man-in-the-middle vulnerabilities stemming from 5G protocol vulnerabilities. The proposed solution is scalable to other open-source and commercial 5G platforms and protocols beyond RRC. Extensive experimental results demonstrate that the proposed solution is an effective and efficient approach to validate 5G security; meanwhile, it serves as real-time vulnerability detection and proactive defense.

Automated Vulnerability Discovery Method for 5G Core Network Protocol

Systematic Meets Unintended: Prior Knowledge Adaptive 5G Vulnerability Detection via Multi-Fuzzing

Formal and Fuzzing Amplification: Targeting Vulnerability Detection in 5G and Beyond

Vulnerability Detection For Smart Grid Devices Via Static Analysis

Formal-Guided Fuzz Testing: Targeting Security Assurance from Specification to Implementation for 5G and Beyond

Machine Learning Assisted Security Analysis of 5G-Network-Connected Systems

Toward Vulnerability Assessment for 5G Mobile Communication Networks

Discovering Vulnerabilities in COTS IoT Devices Through Blackbox Fuzzing Web Management Interface

Smart Fuzzing of 5G Wireless Software Implementation

Fifth Generation Mobile Communication Technology Network Attack Defense Based on Software Defined network Technology in Power Internet of Things

NLP-based Cross-Layer 5G Vulnerabilities Detection via Fuzzing Generated Run-Time Profiling

Automated Attack and Defense Framework for 5G Security on Physical and Logical Layers

PROV5GC: Hardening 5G Core Network Security with Attack Detection and Attribution Based on Provenance Graphs

Security Vulnerabilities in 5G Non-Stand-Alone Networks: A Systematic Analysis and Attack Taxonomy

Multi-Layer Attack Graph Analysis in the 5G Edge Network Using a Dynamic Hexagonal Fuzzy Method

Attacks Against Security Context in 5G Network

A Novel Method of Software Vulnerability Detection based on Fuzzing Technique

A formal security analysis of the fast authentication procedure based on the security context in 5G networks

Analysis for Threat Models and Improvement Scheme of 5G AKA Protocol Based on Petri-net.

Protocol vulnerability detection based on network traffic analysis and binary reverse engineering

Exploiting Cross-Layer Vulnerabilities: Off-Path Attacks on the TCP/IP Protocol Suite