{"id":"https://openalex.org/W7164888198","doi":"https://doi.org/10.1016/j.comnet.2026.112480","title":"Security risks in O-RAN: Vulnerabilities and mitigation countermeasures","display_name":"Security risks in O-RAN: Vulnerabilities and mitigation countermeasures","publication_year":2026,"publication_date":"2026-06-16","ids":{"openalex":"https://openalex.org/W7164888198","doi":"https://doi.org/10.1016/j.comnet.2026.112480"},"language":"en","primary_location":{"id":"doi:10.1016/j.comnet.2026.112480","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comnet.2026.112480","pdf_url":null,"source":{"id":"https://openalex.org/S63392143","display_name":"Computer Networks","issn_l":"1389-1286","issn":["1389-1286","1872-7069"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.comnet.2026.112480","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079653129","display_name":"Johnny Choque","orcid":"https://orcid.org/0000-0002-6049-8280"},"institutions":[{"id":"https://openalex.org/I13134134","display_name":"Universidad de Cantabria","ror":"https://ror.org/046ffzj20","country_code":"ES","type":"education","lineage":["https://openalex.org/I13134134"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Johnny Choque","raw_affiliation_strings":["Communication Engineering Department, Universidad de Cantabria, Edificio de Ingenier\u00eda de Telecomunicaci\u00f3n. Plaza de la Ciencia s/n, Santander, 39005, Cantabria, Spain"],"raw_orcid":"https://orcid.org/0000-0002-6049-8280","affiliations":[{"raw_affiliation_string":"Communication Engineering Department, Universidad de Cantabria, Edificio de Ingenier\u00eda de Telecomunicaci\u00f3n. Plaza de la Ciencia s/n, Santander, 39005, Cantabria, Spain","institution_ids":["https://openalex.org/I13134134"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052174159","display_name":"Alberto Eloy Martos Garc\u00eda","orcid":"https://orcid.org/0000-0002-5708-9558"},"institutions":[{"id":"https://openalex.org/I13134134","display_name":"Universidad de Cantabria","ror":"https://ror.org/046ffzj20","country_code":"ES","type":"education","lineage":["https://openalex.org/I13134134"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Alberto E. Garc\u00eda","raw_affiliation_strings":["Communication Engineering Department, Universidad de Cantabria, Edificio de Ingenier\u00eda de Telecomunicaci\u00f3n. Plaza de la Ciencia s/n, Santander, 39005, Cantabria, Spain"],"raw_orcid":"https://orcid.org/0000-0002-5708-9558","affiliations":[{"raw_affiliation_string":"Communication Engineering Department, Universidad de Cantabria, Edificio de Ingenier\u00eda de Telecomunicaci\u00f3n. Plaza de la Ciencia s/n, Santander, 39005, Cantabria, Spain","institution_ids":["https://openalex.org/I13134134"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101542542","display_name":"Luis D\u00edez","orcid":"https://orcid.org/0000-0001-5817-3308"},"institutions":[{"id":"https://openalex.org/I13134134","display_name":"Universidad de Cantabria","ror":"https://ror.org/046ffzj20","country_code":"ES","type":"education","lineage":["https://openalex.org/I13134134"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Luis Diez","raw_affiliation_strings":["Communication Engineering Department, Universidad de Cantabria, Edificio de Ingenier\u00eda de Telecomunicaci\u00f3n. Plaza de la Ciencia s/n, Santander, 39005, Cantabria, Spain"],"raw_orcid":"https://orcid.org/0000-0001-5817-3308","affiliations":[{"raw_affiliation_string":"Communication Engineering Department, Universidad de Cantabria, Edificio de Ingenier\u00eda de Telecomunicaci\u00f3n. Plaza de la Ciencia s/n, Santander, 39005, Cantabria, Spain","institution_ids":["https://openalex.org/I13134134"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044220538","display_name":"Ram\u00f3n Ag\u00fcero","orcid":"https://orcid.org/0000-0002-9620-3990"},"institutions":[{"id":"https://openalex.org/I13134134","display_name":"Universidad de Cantabria","ror":"https://ror.org/046ffzj20","country_code":"ES","type":"education","lineage":["https://openalex.org/I13134134"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Ram\u00f3n Ag\u00fcero","raw_affiliation_strings":["Communication Engineering Department, Universidad de Cantabria, Edificio de Ingenier\u00eda de Telecomunicaci\u00f3n. Plaza de la Ciencia s/n, Santander, 39005, Cantabria, Spain"],"raw_orcid":"https://orcid.org/0000-0002-9620-3990","affiliations":[{"raw_affiliation_string":"Communication Engineering Department, Universidad de Cantabria, Edificio de Ingenier\u00eda de Telecomunicaci\u00f3n. Plaza de la Ciencia s/n, Santander, 39005, Cantabria, Spain","institution_ids":["https://openalex.org/I13134134"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5079653129"],"corresponding_institution_ids":["https://openalex.org/I13134134"],"apc_list":{"value":2370,"currency":"USD","value_usd":2370},"apc_paid":{"value":2370,"currency":"USD","value_usd":2370},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.77756524,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"286","issue":null,"first_page":"112480","last_page":"112480"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.3102000057697296,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.3102000057697296,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10847","display_name":"Advanced Optical Network Technologies","score":0.03519999980926514,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.030799999833106995,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/countermeasure","display_name":"Countermeasure","score":0.3928999900817871},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.37940001487731934},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.3668999969959259},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.29350000619888306},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.29319998621940613},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.29159998893737793}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8241999745368958},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6948000192642212},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4648999869823456},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.3928999900817871},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.37940001487731934},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3668999969959259},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.29350000619888306},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.29319998621940613},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.29159998893737793},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.262800008058548},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2522999942302704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.comnet.2026.112480","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comnet.2026.112480","pdf_url":null,"source":{"id":"https://openalex.org/S63392143","display_name":"Computer Networks","issn_l":"1389-1286","issn":["1389-1286","1872-7069"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Networks","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.comnet.2026.112480","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comnet.2026.112480","pdf_url":null,"source":{"id":"https://openalex.org/S63392143","display_name":"Computer Networks","issn_l":"1389-1286","issn":["1389-1286","1872-7069"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Networks","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.8019113540649414}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W2063142364","https://openalex.org/W2153623795","https://openalex.org/W2266232250","https://openalex.org/W2592593797","https://openalex.org/W2966581125","https://openalex.org/W3215827683","https://openalex.org/W4311906436","https://openalex.org/W4328053442","https://openalex.org/W4395069637","https://openalex.org/W4400877429","https://openalex.org/W4402436629","https://openalex.org/W4408016758"],"related_works":[],"abstract_inverted_index":{"Disaggregated":[0],"and":[1,18,32,68,75,124],"open":[2,30],"radio":[3],"access":[4],"network":[5],"(O-RAN)":[6],"architectures":[7],"offer":[8,115],"benefits":[9],"such":[10],"as":[11],"enhanced":[12],"interoperability,":[13],"improved":[14],"coordination":[15],"between":[16],"nodes,":[17],"cost":[19],"reduction.":[20],"However,":[21],"they":[22,119],"also":[23,120],"introduce":[24],"new":[25],"security":[26,105,148],"challenges":[27],"related":[28],"to":[29,137],"interfaces":[31],"distributed":[33],"control":[34],"mechanisms.":[35],"This":[36],"work":[37],"focuses":[38],"on":[39,78,98],"analysing":[40],"vulnerabilities":[41],"of":[42,66,112,144],"SCTP,":[43],"one":[44],"most":[45],"widespread":[46],"solutions":[47,106,114],"in":[48,94],"these":[49,99,113],"interfaces,":[50],"which":[51],"facilitates":[52],"communication":[53],"with":[54],"RAN":[55],"Intelligent":[56],"Controllers":[57],"(RIC).":[58],"The":[59],"analysis":[60],"addresses":[61],"two":[62],"specific":[63],"attacks:":[64],"denial":[65],"service":[67],"identity":[69],"spoofing.":[70],"Both":[71],"have":[72],"been":[73],"implemented":[74],"experimentally":[76],"validated":[77],"the":[79,83,89,95,135],"FlexRIC":[80],"platform":[81],"within":[82],"O-RAN":[84,151],"architecture":[85],"framework,":[86],"going":[87],"beyond":[88],"predominantly":[90],"theoretical":[91],"approaches":[92],"found":[93],"literature.":[96],"Based":[97],"experiments,":[100],"we":[101],"critically":[102],"evaluate":[103],"various":[104],"proposed":[107],"for":[108,150],"SCTP.":[109],"While":[110],"some":[111],"partial":[116],"mitigation":[117],"capabilities,":[118],"present":[121],"structural,":[122],"operational,":[123],"compatibility":[125],"limitations":[126],"that":[127],"affect":[128],"their":[129],"overall":[130],"effectiveness.":[131],"These":[132],"findings":[133],"underscore":[134],"need":[136],"adopt":[138],"more":[139],"efficient":[140],"transport":[141],"protocols,":[142],"capable":[143],"natively":[145],"integrating":[146],"adequate":[147],"features":[149],"environments.":[152]},"counts_by_year":[],"updated_date":"2026-06-24T06:17:17.354583","created_date":"2026-06-17T00:00:00"}