{"id":"https://openalex.org/W4400877429","doi":"https://doi.org/10.1109/ojcoms.2024.3431681","title":"Attacking O-RAN Interfaces: Threat Modeling, Analysis and Practical Experimentation","display_name":"Attacking O-RAN Interfaces: Threat Modeling, Analysis and Practical Experimentation","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4400877429","doi":"https://doi.org/10.1109/ojcoms.2024.3431681"},"language":"en","primary_location":{"id":"doi:10.1109/ojcoms.2024.3431681","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2024.3431681","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/ojcoms.2024.3431681","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099777238","display_name":"Pau Baguer","orcid":null},"institutions":[{"id":"https://openalex.org/I4210130845","display_name":"i2CAT","ror":"https://ror.org/02rkks755","country_code":"ES","type":"nonprofit","lineage":["https://openalex.org/I4210130845","https://openalex.org/I4387153040"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Pau Baguer","raw_affiliation_strings":["AI-Driven Systems, i2CAT Foundation, Barcelona, Spain"],"affiliations":[{"raw_affiliation_string":"AI-Driven Systems, i2CAT Foundation, Barcelona, Spain","institution_ids":["https://openalex.org/I4210130845"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064327956","display_name":"Girma M. Yilma","orcid":"https://orcid.org/0000-0002-1329-3821"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Girma M. Yilma","raw_affiliation_strings":["NEC Laboratories Europe GmbH, Heidelberg, Germany"],"affiliations":[{"raw_affiliation_string":"NEC Laboratories Europe GmbH, Heidelberg, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026047203","display_name":"Esteban Municio","orcid":"https://orcid.org/0000-0002-9865-2538"},"institutions":[{"id":"https://openalex.org/I4210130845","display_name":"i2CAT","ror":"https://ror.org/02rkks755","country_code":"ES","type":"nonprofit","lineage":["https://openalex.org/I4210130845","https://openalex.org/I4387153040"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Esteban Municio","raw_affiliation_strings":["AI-Driven Systems, i2CAT Foundation, Barcelona, Spain"],"affiliations":[{"raw_affiliation_string":"AI-Driven Systems, i2CAT Foundation, Barcelona, Spain","institution_ids":["https://openalex.org/I4210130845"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056199372","display_name":"Gin\u00e9s Garc\u00eda-Avil\u00e9s","orcid":null},"institutions":[{"id":"https://openalex.org/I4210130845","display_name":"i2CAT","ror":"https://ror.org/02rkks755","country_code":"ES","type":"nonprofit","lineage":["https://openalex.org/I4210130845","https://openalex.org/I4387153040"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Gines Garcia-Aviles","raw_affiliation_strings":["AI-Driven Systems, i2CAT Foundation, Barcelona, Spain"],"affiliations":[{"raw_affiliation_string":"AI-Driven Systems, i2CAT Foundation, Barcelona, Spain","institution_ids":["https://openalex.org/I4210130845"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073770360","display_name":"Andr\u00e9s Garc\u00eda\u2010Saavedra","orcid":"https://orcid.org/0000-0003-2005-2222"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Andres Garcia-Saavedra","raw_affiliation_strings":["NEC Laboratories Europe GmbH, Heidelberg, Germany"],"affiliations":[{"raw_affiliation_string":"NEC Laboratories Europe GmbH, Heidelberg, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059090829","display_name":"Marco Liebsch","orcid":"https://orcid.org/0000-0001-9629-5234"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Marco Liebsch","raw_affiliation_strings":["NEC Laboratories Europe GmbH, Heidelberg, Germany"],"affiliations":[{"raw_affiliation_string":"NEC Laboratories Europe GmbH, Heidelberg, Germany","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086187463","display_name":"Xavier Costa\u2010P\u00e9rez","orcid":"https://orcid.org/0000-0002-9654-6109"},"institutions":[{"id":"https://openalex.org/I11932220","display_name":"Instituci\u00f3 Catalana de Recerca i Estudis Avan\u00e7ats","ror":"https://ror.org/0371hy230","country_code":"ES","type":"nonprofit","lineage":["https://openalex.org/I11932220"]},{"id":"https://openalex.org/I4210130845","display_name":"i2CAT","ror":"https://ror.org/02rkks755","country_code":"ES","type":"nonprofit","lineage":["https://openalex.org/I4210130845","https://openalex.org/I4387153040"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Xavier Costa-P\u00e9rez","raw_affiliation_strings":["AI-Driven Systems, i2CAT Foundation, Barcelona, Spain","NEC Laboratories Europe GmbH, Heidelberg, Germany","Institucio Catalana de Recerca i Estudis Avancats, Barcelona, Spain"],"affiliations":[{"raw_affiliation_string":"AI-Driven Systems, i2CAT Foundation, Barcelona, Spain","institution_ids":["https://openalex.org/I4210130845"]},{"raw_affiliation_string":"NEC Laboratories Europe GmbH, Heidelberg, Germany","institution_ids":[]},{"raw_affiliation_string":"Institucio Catalana de Recerca i Estudis Avancats, Barcelona, Spain","institution_ids":["https://openalex.org/I11932220"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5099777238"],"corresponding_institution_ids":["https://openalex.org/I4210130845"],"apc_list":{"value":1750,"currency":"USD","value_usd":1750},"apc_paid":{"value":1750,"currency":"USD","value_usd":1750},"fwci":6.4896,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.97047692,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"5","issue":null,"first_page":"4559","last_page":"4577"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ran","display_name":"Ran","score":0.9129011034965515},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.6027933955192566},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.599353015422821},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.5840054154396057},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.575722873210907},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5425409078598022},{"id":"https://openalex.org/keywords/c-ran","display_name":"C-RAN","score":0.4817821681499481},{"id":"https://openalex.org/keywords/radio-access-network","display_name":"Radio access network","score":0.46013444662094116},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4523230493068695},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.4382883310317993},{"id":"https://openalex.org/keywords/cellular-network","display_name":"Cellular network","score":0.4141885042190552},{"id":"https://openalex.org/keywords/base-station","display_name":"Base station","score":0.3650735318660736},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2645775079727173},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.15873616933822632}],"concepts":[{"id":"https://openalex.org/C160704184","wikidata":"https://www.wikidata.org/wiki/Q18031028","display_name":"Ran","level":2,"score":0.9129011034965515},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6027933955192566},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.599353015422821},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.5840054154396057},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.575722873210907},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5425409078598022},{"id":"https://openalex.org/C2779765720","wikidata":"https://www.wikidata.org/wiki/Q5005908","display_name":"C-RAN","level":5,"score":0.4817821681499481},{"id":"https://openalex.org/C106365562","wikidata":"https://www.wikidata.org/wiki/Q3078360","display_name":"Radio access network","level":4,"score":0.46013444662094116},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4523230493068695},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.4382883310317993},{"id":"https://openalex.org/C153646914","wikidata":"https://www.wikidata.org/wiki/Q535695","display_name":"Cellular network","level":2,"score":0.4141885042190552},{"id":"https://openalex.org/C68649174","wikidata":"https://www.wikidata.org/wiki/Q1379116","display_name":"Base station","level":2,"score":0.3650735318660736},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2645775079727173},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.15873616933822632},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C207029474","wikidata":"https://www.wikidata.org/wiki/Q384018","display_name":"Mobile station","level":3,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/ojcoms.2024.3431681","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2024.3431681","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:2e9ebd5b53dc4cb29e6a15d2413f825f","is_oa":true,"landing_page_url":"https://doaj.org/article/2e9ebd5b53dc4cb29e6a15d2413f825f","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Open Journal of the Communications Society, Vol 5, Pp 4559-4577 (2024)","raw_type":"article"},{"id":"doi:10.5281/zenodo.12771582","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.12771582","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/ojcoms.2024.3431681","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2024.3431681","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6299999952316284,"id":"https://metadata.un.org/sdg/13","display_name":"Climate action"}],"awards":[{"id":"https://openalex.org/G1163591990","display_name":null,"funder_award_id":"101097083","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G3238341616","display_name":null,"funder_award_id":"Grant","funder_id":"https://openalex.org/F4320338335","funder_display_name":"H2020 European Research Council"},{"id":"https://openalex.org/G5658388395","display_name":null,"funder_award_id":"CERCA","funder_id":"https://openalex.org/F4320321505","funder_display_name":"Generalitat de Catalunya"},{"id":"https://openalex.org/G6849100187","display_name":null,"funder_award_id":"CER-20231018","funder_id":"https://openalex.org/F4320321043","funder_display_name":"Centro para el Desarrollo Tecnol\u00f3gico Industrial"},{"id":"https://openalex.org/G7864076799","display_name":null,"funder_award_id":"101139270","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8051717526","display_name":null,"funder_award_id":"Grant","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320315803","display_name":"Centres de Recerca de Catalunya","ror":null},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320321043","display_name":"Centro para el Desarrollo Tecnol\u00f3gico Industrial","ror":"https://ror.org/0124x7055"},{"id":"https://openalex.org/F4320321505","display_name":"Generalitat de Catalunya","ror":"https://ror.org/01bg62x04"},{"id":"https://openalex.org/F4320321837","display_name":"Ministerio de Econom\u00eda y Competitividad","ror":"https://ror.org/034900433"},{"id":"https://openalex.org/F4320338335","display_name":"H2020 European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W2001539727","https://openalex.org/W2150010995","https://openalex.org/W2737019897","https://openalex.org/W2758360306","https://openalex.org/W2797972299","https://openalex.org/W2895059999","https://openalex.org/W2962715987","https://openalex.org/W3016493309","https://openalex.org/W3096790059","https://openalex.org/W3206160551","https://openalex.org/W3207047766","https://openalex.org/W3209248953","https://openalex.org/W3215827683","https://openalex.org/W4226135608","https://openalex.org/W4292686432","https://openalex.org/W4306250092","https://openalex.org/W4315783203","https://openalex.org/W4317796310","https://openalex.org/W4382396131","https://openalex.org/W4385080324","https://openalex.org/W4387753666","https://openalex.org/W4389317906","https://openalex.org/W4391696889","https://openalex.org/W4392932802"],"related_works":["https://openalex.org/W3037103914","https://openalex.org/W3018338683","https://openalex.org/W2922954044","https://openalex.org/W2885627391","https://openalex.org/W4315630224","https://openalex.org/W4396879191","https://openalex.org/W2618068568","https://openalex.org/W3197340217","https://openalex.org/W4294306393","https://openalex.org/W4381187802"],"abstract_inverted_index":{"A":[0],"new":[1,30,39,60,68],"generation":[2],"of":[3,32,91,94,101,121,203,222],"open":[4,142],"and":[5,14,84,86,104,117,131,151,162,164,176,184,188,192,214],"disaggregated":[6],"Radio":[7,23],"Access":[8,24],"Networks":[9],"(RANs)":[10],"enabling":[11],"multi-vendor,":[12],"flexible,":[13],"cost-effective":[15],"deployments":[16],"is":[17],"being":[18],"promoted":[19],"by":[20,64],"the":[21,35,59,67,73,119,201,220],"Open":[22],"Network":[25],"(O-RAN)":[26],"Alliance.":[27],"However,":[28],"this":[29,109],"level":[31],"disaggregation":[33],"in":[34,108,127],"RAN":[36],"also":[37],"entails":[38],"security":[40,69,202],"risks":[41,96,147,213],"that":[42,58,198],"must":[43],"be":[44],"carefully":[45],"addressed.":[46],"The":[47],"O-RAN":[48,77,115,123,141,172,196,204,224],"Alliance":[49],"has":[50],"established":[51],"Working":[52],"Group":[53],"11":[54],"(WG11)":[55],"to":[56,81,99,145,180,211],"ensure":[57],"specifications":[61],"are":[62,97],"secure":[63],"design.":[65],"Acknowledging":[66],"challenges":[70],"arising":[71],"from":[72],"expanded":[74],"threat":[75,174],"surface,":[76],"WG11":[78],"provides":[79],"procedures":[80],"identify":[82,209],"threats":[83,191],"assess":[85],"mitigate":[87,212],"risks.":[88],"Reportedly,":[89],"as":[90],"2024,":[92],"60%":[93],"found":[95],"related":[98],"Denial":[100],"Service":[102],"(DoS)":[103],"performance":[105,132,185],"degradation.":[106,133],"Therefore,":[107],"work,":[110],"we":[111,137,170,208],"analyse":[112],"a":[113,139],"vanilla":[114],"deployment":[116,144],"evaluate":[118],"endurance":[120],"different":[122],"interfaces":[124,197],"under":[125],"attacks":[126,194],"scenarios":[128],"involving":[129],"DoS":[130,183],"To":[134],"do":[135],"so,":[136],"use":[138],"reference":[140],"source":[143],"report,":[146],"found,":[148],"weak":[149],"points,":[150],"counter-intuitive":[152],"recommended":[153],"design":[154],"choices":[155],"for":[156],"both":[157],"control":[158],"plane":[159,166],"(A1,":[160],"E2,":[161],"F1-c)":[163],"user":[165],"(F1-u)":[167],"interfaces.":[168],"Consequently,":[169],"map":[171],"WG11\u2019s":[173],"model":[175],"risk":[177],"assessment":[178],"methodology":[179],"our":[181],"considered":[182],"degradation":[186],"scenarios,":[187],"dissect":[189],"existing":[190],"potential":[193],"over":[195],"may":[199],"compromise":[200],"architectural":[205],"deployments.":[206],"Finally,":[207],"mechanisms":[210],"discuss":[215],"approaches":[216],"aimed":[217],"at":[218],"improving":[219],"robustness":[221],"future":[223],"networks.":[225]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":4}],"updated_date":"2026-04-14T08:04:32.555800","created_date":"2025-10-10T00:00:00"}