{"id":"https://openalex.org/W7134828540","doi":"https://doi.org/10.1109/access.2026.3672003","title":"Reinforcement Learning-Based Fuzzer for 5G RRC Security Evaluation","display_name":"Reinforcement Learning-Based Fuzzer for 5G RRC Security Evaluation","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7134828540","doi":"https://doi.org/10.1109/access.2026.3672003"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3672003","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3672003","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3672003","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Dhairya P. Parikh","orcid":"https://orcid.org/0009-0008-4229-3135"},"institutions":[{"id":"https://openalex.org/I184840846","display_name":"Virginia Commonwealth University","ror":"https://ror.org/02nkdxk79","country_code":"US","type":"education","lineage":["https://openalex.org/I184840846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dhairya P. Parikh","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Commonwealth Cyber Initiative Laboratory, Virginia Tech, Arlington, VA, USA"],"raw_orcid":"https://orcid.org/0009-0008-4229-3135","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Commonwealth Cyber Initiative Laboratory, Virginia Tech, Arlington, VA, USA","institution_ids":["https://openalex.org/I184840846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052444683","display_name":"Dimitri Dessources","orcid":"https://orcid.org/0009-0003-6232-5070"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dimitri A. Dessources","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA"],"raw_orcid":"https://orcid.org/0009-0003-6232-5070","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109911999","display_name":"Nishith D. Tripathi","orcid":null},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nishith D. Tripathi","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA"],"raw_orcid":"https://orcid.org/0000-0002-6516-1425","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090544333","display_name":"J. F. Reed","orcid":null},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jeffrey H. Reed","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA"],"raw_orcid":"https://orcid.org/0000-0003-3494-1901","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076711350","display_name":"Eric Burger","orcid":"https://orcid.org/0000-0002-2143-9368"},"institutions":[{"id":"https://openalex.org/I184840846","display_name":"Virginia Commonwealth University","ror":"https://ror.org/02nkdxk79","country_code":"US","type":"education","lineage":["https://openalex.org/I184840846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eric W. Burger","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Commonwealth Cyber Initiative Laboratory, Virginia Tech, Arlington, VA, USA"],"raw_orcid":"https://orcid.org/0000-0002-2143-9368","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Commonwealth Cyber Initiative Laboratory, Virginia Tech, Arlington, VA, USA","institution_ids":["https://openalex.org/I184840846"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":8.9923,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.96553054,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"14","issue":null,"first_page":"38264","last_page":"38274"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.7135000228881836,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.7135000228881836,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.033900000154972076,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.021900000050663948,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9674000144004822},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.8192999958992004},{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.7454000115394592},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.4593999981880188},{"id":"https://openalex.org/keywords/telecommunications-link","display_name":"Telecommunications link","score":0.4302000105381012},{"id":"https://openalex.org/keywords/application-layer","display_name":"Application layer","score":0.3716999888420105},{"id":"https://openalex.org/keywords/cellular-network","display_name":"Cellular network","score":0.36550000309944153},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.36160001158714294},{"id":"https://openalex.org/keywords/thread","display_name":"Thread (computing)","score":0.3458999991416931}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9674000144004822},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8578000068664551},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.8192999958992004},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.7454000115394592},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5131000280380249},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.4593999981880188},{"id":"https://openalex.org/C138660444","wikidata":"https://www.wikidata.org/wiki/Q5607897","display_name":"Telecommunications link","level":2,"score":0.4302000105381012},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.39410001039505005},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.3716999888420105},{"id":"https://openalex.org/C153646914","wikidata":"https://www.wikidata.org/wiki/Q535695","display_name":"Cellular network","level":2,"score":0.36550000309944153},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.36160001158714294},{"id":"https://openalex.org/C138101251","wikidata":"https://www.wikidata.org/wiki/Q213092","display_name":"Thread (computing)","level":2,"score":0.3458999991416931},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3368000090122223},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3310000002384186},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.32679998874664307},{"id":"https://openalex.org/C38601921","wikidata":"https://www.wikidata.org/wiki/Q1757693","display_name":"Protocol stack","level":3,"score":0.3253999948501587},{"id":"https://openalex.org/C68649174","wikidata":"https://www.wikidata.org/wiki/Q1379116","display_name":"Base station","level":2,"score":0.3246000111103058},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.32089999318122864},{"id":"https://openalex.org/C148027188","wikidata":"https://www.wikidata.org/wiki/Q907375","display_name":"Unit testing","level":3,"score":0.31940001249313354},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3131999969482422},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.30640000104904175},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.3057999908924103},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2847000062465668},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.2833999991416931},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C20574231","wikidata":"https://www.wikidata.org/wiki/Q844605","display_name":"Backward compatibility","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C203274722","wikidata":"https://www.wikidata.org/wiki/Q7001161","display_name":"Network performance","level":2,"score":0.25929999351501465},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.2533999979496002},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.2529999911785126},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.25200000405311584}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2026.3672003","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3672003","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8481a2ff184745a7a1882a10fae008ef","is_oa":true,"landing_page_url":"https://doaj.org/article/8481a2ff184745a7a1882a10fae008ef","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 38264-38274 (2026)","raw_type":"article"},{"id":"pmh:oai:vtechworks.lib.vt.edu:10919/142230","is_oa":true,"landing_page_url":"https://hdl.handle.net/10919/142230","pdf_url":null,"source":{"id":"https://openalex.org/S4306400248","display_name":"VTechWorks (Virginia Tech)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I859038795","host_organization_name":"Virginia Tech","host_organization_lineage":["https://openalex.org/I859038795"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article - Refereed"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3672003","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3672003","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.622998833656311,"id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G4436609510","display_name":"Collaborative Research: NeTS: Medium: An Integrated Multi-Time Scale Approach to High-Performance, Intelligent, and Secure O-RAN based NextG","funder_award_id":"2312447","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G54629609","display_name":null,"funder_award_id":"51-60-IF007","funder_id":"https://openalex.org/F4320332176","funder_display_name":"National Telecommunications and Information Administration"},{"id":"https://openalex.org/G8836068127","display_name":"Collaborative Research: Research Infrastructure: CCRI: New: Distributed Space and Terrestrial Networking Infrastructure for Multi-Constellation Coexistence","funder_award_id":"2235139","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306111","display_name":"U.S. Department of Commerce","ror":"https://ror.org/04chq2495"},{"id":"https://openalex.org/F4320307868","display_name":"Commonwealth Foundation","ror":"https://ror.org/05rhej692"},{"id":"https://openalex.org/F4320332176","display_name":"National Telecommunications and Information Administration","ror":"https://ror.org/04chq2495"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Open":[0],"Radio":[1,37],"Access":[2],"Network":[3],"(O-RAN)":[4],"and":[5,18,63,68,92,124,148,171],"modern":[6],"Fifth":[7],"Generation":[8],"Mobile":[9],"Networks":[10],"(5G)":[11],"Standalone":[12],"(SA)":[13],"deployments":[14],"increase":[15],"protocol":[16],"complexity":[17],"broaden":[19],"the":[20,36,59,96,138,165],"attack":[21],"surface":[22],"of":[23],"cellular":[24],"infrastructure.":[25],"This":[26],"paper":[27,163],"introduces":[28],"a":[29,50,157],"reinforcement-learning-based":[30],"fuzz":[31],"tester":[32],"designed":[33],"to":[34,58,98,128],"evaluate":[35],"Resource":[38],"Control":[39],"(RRC)":[40],"layer":[41],"in":[42],"5G":[43,185],"SA":[44],"networks.":[45],"The":[46,76,162],"fuzzer":[47,140],"operates":[48],"as":[49,116],"software-defined":[51],"\u201cfalse\u201d":[52],"User":[53],"Equipment":[54],"(UE)":[55],"that":[56,137],"attaches":[57],"target":[60],"network,":[61],"intercepts":[62],"mutates":[64],"uplink":[65],"RRC":[66,74,186],"messages,":[67],"injects":[69],"malformed":[70],"test":[71],"cases":[72],"targeting":[73],"handlers.":[75],"system":[77,113],"integrates":[78],"Reinforcement":[79,108],"Learning":[80],"(RL)-driven":[81],"test-case":[82],"generation":[83],"with":[84],"an":[85],"automated":[86],"execution":[87],"pipeline":[88],"for":[89,183],"message":[90],"injection":[91],"packet-capture":[93],"analysis,":[94],"allowing":[95],"agent":[97],"iteratively":[99],"learn":[100],"which":[101],"mutations":[102,182],"most":[103],"effectively":[104],"trigger":[105],"anomalous":[106],"behavior.":[107],"feedback":[109],"is":[110],"computed":[111],"from":[112],"metrics":[114],"such":[115],"Central":[117],"Processing":[118],"Unit":[119],"(CPU)":[120],"utilization,":[121],"thread":[122],"count,":[123],"network":[125],"Input/Output":[126],"(I/O)":[127],"guide":[129],"learning":[130,169],"toward":[131],"high-impact":[132,181],"inputs.":[133],"Experimental":[134],"results":[135],"demonstrate":[136],"proposed":[139],"uncovers":[141],"previously":[142],"unseen":[143],"protocol-handling":[144],"anomalies,":[145],"malformed-message":[146],"behaviors,":[147],"resource-exhaustion":[149],"conditions,":[150],"including":[151],"reproducible":[152],"RRC/NGAP":[153],"inconsistencies":[154],"identified":[155],"through":[156],"deterministic":[158],"Proof-of-Concept":[159],"(PoC)":[160],"evaluation.":[161],"presents":[164],"overall":[166],"architecture,":[167],"reinforcement":[168],"formulation,":[170],"evaluation":[172],"results,":[173],"highlighting":[174],"how":[175],"feedback-driven":[176],"adaptive":[177],"fuzzing":[178],"can":[179],"prioritize":[180],"stateful":[184],"security":[187],"assessment.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-06T08:24:18.245995","created_date":"2026-03-11T00:00:00"}