{"id":"https://openalex.org/W4391759723","doi":"https://doi.org/10.1109/ojcoms.2024.3364840","title":"Security Threats to xApps Access Control and E2 Interface in O-RAN","display_name":"Security Threats to xApps Access Control and E2 Interface in O-RAN","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4391759723","doi":"https://doi.org/10.1109/ojcoms.2024.3364840"},"language":"en","primary_location":{"id":"doi:10.1109/ojcoms.2024.3364840","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2024.3364840","pdf_url":"https://ieeexplore.ieee.org/ielx7/8782661/8901158/10433004.pdf","source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/8782661/8901158/10433004.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082015679","display_name":"Cheng-Feng Hung","orcid":"https://orcid.org/0000-0002-1771-2261"},"institutions":[{"id":"https://openalex.org/I154864474","display_name":"National Taiwan University of Science and Technology","ror":"https://ror.org/00q09pe49","country_code":"TW","type":"education","lineage":["https://openalex.org/I154864474"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Cheng-Feng Hung","raw_affiliation_strings":["Department of Computer Science and Information Engineering, National Taiwan University of Science and Technology, Taipei, Taiwan"],"raw_orcid":"https://orcid.org/0000-0002-1771-2261","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Engineering, National Taiwan University of Science and Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I154864474"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114861067","display_name":"You-Run Chen","orcid":"https://orcid.org/0009-0009-2144-8019"},"institutions":[{"id":"https://openalex.org/I154864474","display_name":"National Taiwan University of Science and Technology","ror":"https://ror.org/00q09pe49","country_code":"TW","type":"education","lineage":["https://openalex.org/I154864474"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"You-Run Chen","raw_affiliation_strings":["Department of Computer Science and Information Engineering, National Taiwan University of Science and Technology, Taipei, Taiwan"],"raw_orcid":"https://orcid.org/0009-0009-2144-8019","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Engineering, National Taiwan University of Science and Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I154864474"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113068598","display_name":"Chi-heng Tseng","orcid":null},"institutions":[{"id":"https://openalex.org/I154864474","display_name":"National Taiwan University of Science and Technology","ror":"https://ror.org/00q09pe49","country_code":"TW","type":"education","lineage":["https://openalex.org/I154864474"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chi-Heng Tseng","raw_affiliation_strings":["Department of Computer Science and Information Engineering, National Taiwan University of Science and Technology, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Engineering, National Taiwan University of Science and Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I154864474"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040420733","display_name":"Shin\u2010Ming Cheng","orcid":"https://orcid.org/0000-0002-9796-0643"},"institutions":[{"id":"https://openalex.org/I154864474","display_name":"National Taiwan University of Science and Technology","ror":"https://ror.org/00q09pe49","country_code":"TW","type":"education","lineage":["https://openalex.org/I154864474"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Shin-Ming Cheng","raw_affiliation_strings":["Department of Computer Science and Information Engineering, National Taiwan University of Science and Technology, Taipei, Taiwan"],"raw_orcid":"https://orcid.org/0000-0002-9796-0643","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Engineering, National Taiwan University of Science and Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I154864474"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I154864474"],"apc_list":{"value":1750,"currency":"USD","value_usd":1750},"apc_paid":{"value":1750,"currency":"USD","value_usd":1750},"fwci":8.3006,"has_fulltext":true,"cited_by_count":38,"citation_normalized_percentile":{"value":0.98170406,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"5","issue":null,"first_page":"1197","last_page":"1203"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ran","display_name":"Ran","score":0.8601759672164917},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.6829829216003418},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6380389928817749},{"id":"https://openalex.org/keywords/interface","display_name":"Interface (matter)","score":0.5789631605148315},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5762953758239746},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5352051854133606},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.49148809909820557},{"id":"https://openalex.org/keywords/radio-access-network","display_name":"Radio access network","score":0.4910407066345215},{"id":"https://openalex.org/keywords/download","display_name":"Download","score":0.43037670850753784},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4278002977371216},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.38479793071746826},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.28031229972839355},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1201246976852417},{"id":"https://openalex.org/keywords/base-station","display_name":"Base station","score":0.08025527000427246}],"concepts":[{"id":"https://openalex.org/C160704184","wikidata":"https://www.wikidata.org/wiki/Q18031028","display_name":"Ran","level":2,"score":0.8601759672164917},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.6829829216003418},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6380389928817749},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.5789631605148315},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5762953758239746},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5352051854133606},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.49148809909820557},{"id":"https://openalex.org/C106365562","wikidata":"https://www.wikidata.org/wiki/Q3078360","display_name":"Radio access network","level":4,"score":0.4910407066345215},{"id":"https://openalex.org/C2780154274","wikidata":"https://www.wikidata.org/wiki/Q7126717","display_name":"Download","level":2,"score":0.43037670850753784},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4278002977371216},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.38479793071746826},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.28031229972839355},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1201246976852417},{"id":"https://openalex.org/C68649174","wikidata":"https://www.wikidata.org/wiki/Q1379116","display_name":"Base station","level":2,"score":0.08025527000427246},{"id":"https://openalex.org/C207029474","wikidata":"https://www.wikidata.org/wiki/Q384018","display_name":"Mobile station","level":3,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C129307140","wikidata":"https://www.wikidata.org/wiki/Q6795880","display_name":"Maximum bubble pressure method","level":3,"score":0.0},{"id":"https://openalex.org/C157915830","wikidata":"https://www.wikidata.org/wiki/Q2928001","display_name":"Bubble","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ojcoms.2024.3364840","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2024.3364840","pdf_url":"https://ieeexplore.ieee.org/ielx7/8782661/8901158/10433004.pdf","source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a418d13bbf404af5b5f4d965a236ca1e","is_oa":true,"landing_page_url":"https://doaj.org/article/a418d13bbf404af5b5f4d965a236ca1e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Open Journal of the Communications Society, Vol 5, Pp 1197-1203 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/ojcoms.2024.3364840","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2024.3364840","pdf_url":"https://ieeexplore.ieee.org/ielx7/8782661/8901158/10433004.pdf","source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.5699999928474426,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G7686629333","display_name":null,"funder_award_id":"111-2221-E-011-067-MY3","funder_id":"https://openalex.org/F4320331164","funder_display_name":"National Science and Technology Council"},{"id":"https://openalex.org/G8725316736","display_name":null,"funder_award_id":"113-2923-E-011-005-MY2","funder_id":"https://openalex.org/F4320331164","funder_display_name":"National Science and Technology Council"}],"funders":[{"id":"https://openalex.org/F4320331164","display_name":"National Science and Technology Council","ror":"https://ror.org/00wnb9798"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4391759723.pdf","grobid_xml":"https://content.openalex.org/works/W4391759723.grobid-xml"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W4220945180","https://openalex.org/W4283214234","https://openalex.org/W4287887122","https://openalex.org/W4292686432","https://openalex.org/W4306250092","https://openalex.org/W4312446752","https://openalex.org/W4317796310","https://openalex.org/W4328053442","https://openalex.org/W4386243281","https://openalex.org/W4386260390","https://openalex.org/W4391540976","https://openalex.org/W4394882978","https://openalex.org/W4401070294","https://openalex.org/W6852099911","https://openalex.org/W6861709784"],"related_works":["https://openalex.org/W3018338683","https://openalex.org/W3037103914","https://openalex.org/W4315630224","https://openalex.org/W4381187802","https://openalex.org/W4294306393","https://openalex.org/W2618068568","https://openalex.org/W4386533748","https://openalex.org/W4311923021","https://openalex.org/W2922954044","https://openalex.org/W4221148057"],"abstract_inverted_index":{"Open":[0],"Radio":[1],"Access":[2],"Networks":[3],"(O-RANs)":[4],"represent":[5],"a":[6,95,170,187,209],"novel":[7],"wireless":[8],"access":[9,140,149],"network":[10],"architecture":[11],"that":[12],"decomposes":[13],"traditional":[14],"RAN":[15,26,32,172],"functions":[16],"and":[17,29,36,70,119,131,161,186,206],"makes":[18],"them":[19],"openly":[20],"accessible.":[21],"O-RANs":[22],"enable":[23],"real-time":[24],"coordination,":[25],"performance":[27],"optimization,":[28],"management":[30],"through":[31,164],"Intelligent":[33],"Controllers":[34],"(RICs)":[35],"their":[37,64,191],"related":[38],"xApps.":[39,144],"Due":[40],"to":[41,50,66,107,151,179,203,214],"the":[42,48,56,68,73,99,108,136,165,176,194,200,218],"openness":[43],"of":[44,72,138,190],"O-RAN,":[45],"developers":[46],"have":[47],"flexibility":[49,69],"download":[51],"various":[52],"pre-developed":[53],"xApps":[54,65,94,160],"from":[55,135],"internet":[57],"for":[58,84,143,211],"deployment.":[59],"They":[60],"can":[61,147],"even":[62],"develop":[63],"enhance":[67],"innovation":[71],"RAN.":[74],"The":[75],"current":[76],"O-RAN":[77,128,212],"official":[78],"WG11":[79],"has":[80],"defined":[81],"numerous":[82],"specifications":[83,109],"secure":[85],"implementations.":[86],"However,":[87],"not":[88,104],"only":[89],"is":[90],"accurately":[91],"detecting":[92],"malicious":[93],"significant":[96,133],"challenge,":[97],"but":[98],"existing":[100],"H-Release":[101,129],"also":[102,198],"does":[103],"fully":[105],"adhere":[106],"in":[110,217],"its":[111],"implementation.":[112],"This":[113],"could":[114],"potentially":[115,168],"introduce":[116],"security":[117,216],"risks":[118],"threats.":[120],"In":[121],"this":[122],"paper,":[123],"we":[124,197],"implement":[125],"an":[126],"experimental":[127],"environment":[130],"discover":[132],"threats":[134,202],"absence":[137],"specified":[139],"control":[141],"permissions":[142],"Malicious":[145],"attackers":[146],"illegally":[148],"APIs":[150],"utilize":[152],"other":[153],"services":[154],"or":[155],"launch":[156],"attacks":[157],"on":[158,193],"legitimate":[159],"E2":[162,166],"nodes":[163],"interface,":[167],"causing":[169],"complete":[171],"disruption.":[173],"We":[174],"used":[175],"identified":[177],"vulnerabilities":[178],"design":[180],"three":[181],"attacks,":[182],"providing":[183,208],"detailed":[184],"explanations":[185],"comprehensive":[188],"analysis":[189],"impact":[192],"system.":[195],"Finally,":[196],"submit":[199],"discovered":[201],"CVEs":[204],"(CVE-2023-42358":[205],"CVE-2023-41628),":[207],"reference":[210],"officials":[213],"improve":[215],"future.":[219]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":21},{"year":2024,"cited_by_count":8}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}