{"id":"https://openalex.org/W7225318607","doi":"https://doi.org/10.21203/rs.3.rs-11389859/v1","title":"A Memory-Safe eBPF/GPU Data Plane for Adaptive 5G Backdoor Detection","display_name":"A Memory-Safe eBPF/GPU Data Plane for Adaptive 5G Backdoor Detection","publication_year":2026,"publication_date":"2026-11-05","ids":{"openalex":"https://openalex.org/W7225318607","doi":"https://doi.org/10.21203/rs.3.rs-11389859/v1"},"language":"en","primary_location":{"id":"doi:10.21203/rs.3.rs-11389859/v1","doi":"https://doi.org/10.21203/rs.3.rs-11389859/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11389859/v1","pdf_url":"https://www.researchsquare.com/article/rs-11389859/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.researchsquare.com/article/rs-11389859/latest.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001093308","display_name":"Michail\u2010Alexandros Kourtis","orcid":"https://orcid.org/0000-0002-8356-114X","observed_orcids":["https://orcid.org/0000-0002-8356-114X"]},"institutions":[{"id":"https://openalex.org/I203474044","display_name":"National Centre of Scientific Research \"Demokritos\"","ror":"https://ror.org/038jp4m40","country_code":"GR","type":"facility","lineage":["https://openalex.org/I203474044"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Michail Alexandros Kourtis","raw_affiliation_strings":["National Centre of Scientific Research \"Demokritos\""],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Centre of Scientific Research \"Demokritos\"","institution_ids":["https://openalex.org/I203474044"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5159791630","display_name":"George Xilouris","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I203474044","display_name":"National Centre of Scientific Research \"Demokritos\"","ror":"https://ror.org/038jp4m40","country_code":"GR","type":"facility","lineage":["https://openalex.org/I203474044"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"George Xilouris","raw_affiliation_strings":["National Centre of Scientific Research \"Demokritos\""],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Centre of Scientific Research \"Demokritos\"","institution_ids":["https://openalex.org/I203474044"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I203474044"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8672000169754028,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8672000169754028,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.09300000220537186,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.009399999864399433,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ebpf","display_name":"eBPF","score":0.8180000185966492},{"id":"https://openalex.org/keywords/xdp","display_name":"XDP","score":0.7269999980926514},{"id":"https://openalex.org/keywords/rust-programming-language","display_name":"Rust","score":0.781000018119812},{"id":"https://openalex.org/keywords/memory-safety","display_name":"memory safety","score":0.8759999871253967},{"id":"https://openalex.org/keywords/user-plane-function","display_name":"user plane function","score":0.8140000104904175},{"id":"https://openalex.org/keywords/open5gs","display_name":"Open5GS","score":0.6190000176429749},{"id":"https://openalex.org/keywords/ueransim","display_name":"UERANSIM","score":0.8989999890327454},{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.7799999713897705},{"id":"https://openalex.org/keywords/evasion-attacks","display_name":"evasion attacks","score":0.7390000224113464},{"id":"https://openalex.org/keywords/kernel-verification","display_name":"kernel verification","score":0.4169999957084656}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.92330002784729},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6812999844551086},{"id":"https://openalex.org/C197966572","wikidata":"https://www.wikidata.org/wiki/Q915079","display_name":"Elliptic Curve Digital Signature Algorithm","level":5,"score":0.6392999887466431},{"id":"https://openalex.org/C2778119891","wikidata":"https://www.wikidata.org/wiki/Q477690","display_name":"CUDA","level":2,"score":0.5040000081062317},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.49140000343322754},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.46000000834465027},{"id":"https://openalex.org/C190470478","wikidata":"https://www.wikidata.org/wiki/Q2370229","display_name":"Invariant (physics)","level":2,"score":0.45750001072883606},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.42899999022483826},{"id":"https://openalex.org/C21442007","wikidata":"https://www.wikidata.org/wiki/Q1027879","display_name":"Graphics","level":2,"score":0.3553999960422516},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.3522000014781952},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.34929999709129333},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3400999903678894},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.32120001316070557},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3041999936103821},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.30149999260902405},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.29350000619888306},{"id":"https://openalex.org/C2778217198","wikidata":"https://www.wikidata.org/wiki/Q556977","display_name":"Cutoff","level":2,"score":0.27959999442100525},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.27480000257492065},{"id":"https://openalex.org/C86111242","wikidata":"https://www.wikidata.org/wiki/Q859595","display_name":"Coprocessor","level":2,"score":0.27320000529289246},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26649999618530273},{"id":"https://openalex.org/C46681722","wikidata":"https://www.wikidata.org/wiki/Q4725589","display_name":"Alias","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.26510000228881836},{"id":"https://openalex.org/C54732982","wikidata":"https://www.wikidata.org/wiki/Q1415345","display_name":"Modulo","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.25850000977516174},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.2567000091075897},{"id":"https://openalex.org/C162319229","wikidata":"https://www.wikidata.org/wiki/Q175263","display_name":"Data structure","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.21203/rs.3.rs-11389859/v1","doi":"https://doi.org/10.21203/rs.3.rs-11389859/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11389859/v1","pdf_url":"https://www.researchsquare.com/article/rs-11389859/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.21203/rs.3.rs-11389859/v1","doi":"https://doi.org/10.21203/rs.3.rs-11389859/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11389859/v1","pdf_url":"https://www.researchsquare.com/article/rs-11389859/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G4157029570","display_name":"Post-Quantum Networks for Energy-eXfficient Transitions","funder_award_id":"101225759","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8185603497","display_name":null,"funder_award_id":"101225759","funder_id":"https://openalex.org/F4320334322","funder_display_name":"HORIZON EUROPE Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null},{"id":"https://openalex.org/F4320335042","display_name":"National Council for Scientific Research","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225318607.pdf","grobid_xml":"https://content.openalex.org/works/W7225318607.grobid-xml"},"referenced_works_count":9,"referenced_works":["https://openalex.org/W4413238534","https://openalex.org/W4414449150","https://openalex.org/W4416549229","https://openalex.org/W4417515047","https://openalex.org/W7157178951","https://openalex.org/W7169800090","https://openalex.org/W7204638882","https://openalex.org/W7212311174","https://openalex.org/W7212530064"],"related_works":["https://openalex.org/W4404515181","https://openalex.org/W7225224231","https://openalex.org/W7225078771","https://openalex.org/W7137991465","https://openalex.org/W2969603328","https://openalex.org/W4281854295","https://openalex.org/W7205006793","https://openalex.org/W7130721221","https://openalex.org/W3008127408","https://openalex.org/W4385993940"],"abstract_inverted_index":{"Abstract":[0],"The":[1,61,151],"evolution":[2],"of":[3,18,129,195],"5G":[4],"towards":[5],"cloud-native":[6],"deployments":[7],"exposes":[8],"the":[9,20,85,93,116,126,145,166,205,213],"User":[10],"Plane":[11],"Function":[12,55],"(UPF)":[13],"to":[14,103,110],"persistent":[15],"host-resident":[16],"implants,":[17],"which":[19,97,134],"BPFDoor":[21],"backdoor":[22,102],"is":[23,65,108,138,147,154],"a":[24,31,47,75,88,99,112,135,161,184],"documented":[25],"telecommunications-sector":[26],"example.":[27],"This":[28],"work":[29],"presents":[30],"tiered,":[32],"memory-safe":[33,48,167],"detection":[34],"data":[35,63],"plane":[36,64],"that":[37,115],"couples":[38],"in-kernel":[39],"extended":[40],"Berkeley":[41],"Packet":[42],"Filter":[43],"(eBPF/XDP)":[44],"filtering":[45],"with":[46,171],"Graphics":[49],"Processing":[50],"Unit":[51],"(GPU)":[52],"Cloud-Native":[53],"Network":[54],"(CNF)":[56],"written":[57],"in":[58,140],"NVIDIA":[59],"cuTile-Rust.":[60],"proposed":[62,152],"evaluated":[66],"against":[67],"adversarial":[68,201],"Large":[69],"Language":[70],"Model":[71],"(LLM)":[72],"agents":[73],"on":[74],"live":[76],"six-node":[77],"Open5GS/UERANSIM":[78],"testbed.":[79],"A":[80,121],"Red":[81],"Agent":[82,90],"autonomously":[83],"mutates":[84],"implant":[86],"while":[87,144],"Blue":[89],"hunts":[91],"it;":[92],"presented":[94],"behavioral":[95],"invariant,":[96],"requires":[98],"functional":[100],"passive":[101],"hold":[104],"an":[105,191],"AF_PACKET/ETH_P_ALL/iface=0":[106],"socket,":[107],"shown":[109],"be":[111],"kernel":[113],"fact":[114],"attacker":[117,221],"cannot":[118],"mutate":[119],"away.":[120],"GPU":[122],"mutation-space":[123],"sweep":[124],"evaluates":[125],"full":[127],"space":[128],"2,555,904":[130],"signature":[131,137],"variants,":[132],"over":[133],"static":[136],"evaded":[139,148],"approximately":[141],"all":[142],"cases":[143],"invariant":[146,214],"by":[149],"none.":[150],"placement":[153],"measured":[155],"rather":[156],"than":[157],"assumed:":[158],"eBPF/XDP":[159],"reaches":[160,169],"hard":[162],"verifier":[163],"ceiling,":[164],"whereas":[165],"CNF":[168],"parity":[170],"hand-written":[172,186],"CUDA":[173,187],"C":[174,188],"at":[175,180,190,216],"moderate":[176],"arithmetic":[177],"intensity":[178],"and,":[179],"higher":[181],"intensity,":[182],"outperforms":[183],"straightforward":[185],"implementation,":[189],"edge":[192],"power":[193],"envelope":[194],"about":[196],"66":[197],"W.":[198],"Across":[199],"six":[200],"memory-safety":[202],"bug":[203],"classes":[204],"cuTile":[206],"detector":[207],"reports":[208],"zero":[209],"sanitizer":[210],"errors,":[211],"and":[212],"holds":[215],"25/25":[217],"under":[218],"three":[219],"distinct":[220],"LLMs.":[222]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-11-06T00:00:00"}