{"id":"https://openalex.org/W7118013763","doi":"https://doi.org/10.1109/ojcoms.2025.3650736","title":"Toward a Multi-Layer Defence Framework for Securing Near-Real-Time Operations in Open RAN","display_name":"Toward a Multi-Layer Defence Framework for Securing Near-Real-Time Operations in Open RAN","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7118013763","doi":"https://doi.org/10.1109/ojcoms.2025.3650736"},"language":"en","primary_location":{"id":"doi:10.1109/ojcoms.2025.3650736","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2025.3650736","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/ojcoms.2025.3650736","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114659712","display_name":"Hamed Alimohammadi","orcid":null},"institutions":[{"id":"https://openalex.org/I28290843","display_name":"University of Surrey","ror":"https://ror.org/00ks66431","country_code":"GB","type":"education","lineage":["https://openalex.org/I28290843"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Hamed Alimohammadi","raw_affiliation_strings":["6GIC, Institute for Communication Systems, University of Surrey, Guildford, U.K"],"raw_orcid":"https://orcid.org/0000-0001-6005-691X","affiliations":[{"raw_affiliation_string":"6GIC, Institute for Communication Systems, University of Surrey, Guildford, U.K","institution_ids":["https://openalex.org/I28290843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059736068","display_name":"S. Mayhoub","orcid":"https://orcid.org/0000-0001-7629-0532"},"institutions":[{"id":"https://openalex.org/I126231945","display_name":"Queen's University Belfast","ror":"https://ror.org/00hswnk62","country_code":"GB","type":"education","lineage":["https://openalex.org/I126231945"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Samara Mayhoub","raw_affiliation_strings":["Centre for Secure Information Technologies, Queen’s University Belfast, Belfast, U.K"],"raw_orcid":"https://orcid.org/0000-0001-7629-0532","affiliations":[{"raw_affiliation_string":"Centre for Secure Information Technologies, Queen’s University Belfast, Belfast, U.K","institution_ids":["https://openalex.org/I126231945"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093111414","display_name":"Sotiris Chatzimiltis","orcid":"https://orcid.org/0000-0002-4980-2608"},"institutions":[{"id":"https://openalex.org/I28290843","display_name":"University of Surrey","ror":"https://ror.org/00ks66431","country_code":"GB","type":"education","lineage":["https://openalex.org/I28290843"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Sotiris Chatzimiltis","raw_affiliation_strings":["6GIC, Institute for Communication Systems, University of Surrey, Guildford, U.K"],"raw_orcid":"https://orcid.org/0000-0002-4980-2608","affiliations":[{"raw_affiliation_string":"6GIC, Institute for Communication Systems, University of Surrey, Guildford, U.K","institution_ids":["https://openalex.org/I28290843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045710344","display_name":"Mohammad Shojafar","orcid":null},"institutions":[{"id":"https://openalex.org/I28290843","display_name":"University of Surrey","ror":"https://ror.org/00ks66431","country_code":"GB","type":"education","lineage":["https://openalex.org/I28290843"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohammad Shojafar","raw_affiliation_strings":["6GIC, Institute for Communication Systems, University of Surrey, Guildford, U.K"],"raw_orcid":"https://orcid.org/0000-0003-3284-5086","affiliations":[{"raw_affiliation_string":"6GIC, Institute for Communication Systems, University of Surrey, Guildford, U.K","institution_ids":["https://openalex.org/I28290843"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019291378","display_name":"Muhammad Nasir Mumtaz Bhutta","orcid":"https://orcid.org/0000-0001-5580-4282"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Muhammad Nasir Mumtaz Bhutta","raw_affiliation_strings":["Computer Science and Information Technology Department, College of Engineering, Abu Dhabi University, Khalifa, UAE"],"raw_orcid":"https://orcid.org/0000-0001-5580-4282","affiliations":[{"raw_affiliation_string":"Computer Science and Information Technology Department, College of Engineering, Abu Dhabi University, Khalifa, UAE","institution_ids":["https://openalex.org/I176601375"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5114659712"],"corresponding_institution_ids":["https://openalex.org/I28290843"],"apc_list":{"value":1750,"currency":"USD","value_usd":1750},"apc_paid":{"value":1750,"currency":"USD","value_usd":1750},"fwci":31.9757,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.98145416,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"7","issue":null,"first_page":"480","last_page":"497"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.39469999074935913,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.39469999074935913,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11932","display_name":"Wireless Body Area Networks","score":0.050999999046325684,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.03680000081658363,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.7577999830245972},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.4268999993801117},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.38179999589920044},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.36649999022483826},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.3610999882221222},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.3580999970436096},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.3564999997615814},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.34130001068115234}],"concepts":[{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.7577999830245972},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6025999784469604},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.534600019454956},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.4268999993801117},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4002000093460083},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.38179999589920044},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.36649999022483826},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.3610999882221222},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3580999970436096},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.3564999997615814},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.34130001068115234},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3303999900817871},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.31119999289512634},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.31040000915527344},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.3075999915599823},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.30160000920295715},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.287200003862381},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.27619999647140503},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.2761000096797943},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.26989999413490295},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.2551000118255615},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2533000111579895},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.25040000677108765}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/ojcoms.2025.3650736","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2025.3650736","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},{"id":"pmh:oai:publications.aston.ac.uk:48667","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306400483","display_name":"Aston Publications Explorer (Aston University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169199633","host_organization_name":"Aston University","host_organization_lineage":["https://openalex.org/I169199633"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"},{"id":"pmh:oai:doaj.org/article:5240c721769345f49629ef205f163acd","is_oa":true,"landing_page_url":"https://doaj.org/article/5240c721769345f49629ef205f163acd","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Open Journal of the Communications Society, Vol 7, Pp 480-497 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/ojcoms.2025.3650736","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2025.3650736","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4515751898288727,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G5207916849","display_name":null,"funder_award_id":"19300917","funder_id":"https://openalex.org/F36462951","funder_display_name":"Abu Dhabi University"},{"id":"https://openalex.org/G6288601437","display_name":"CHEDDAR: Communications Hub for Empowering Distributed clouD computing Applications and Research - TMF uplift","funder_award_id":"EP/Y037421/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8444387157","display_name":"CHEDDAR: Communications Hub For Empowering Distributed ClouD Computing Applications And Research","funder_award_id":"EP/X040518/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F36462951","display_name":"Abu Dhabi University","ror":"https://ror.org/01r3kjq03"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W4317796310","https://openalex.org/W4328053442","https://openalex.org/W4386243281","https://openalex.org/W4391759723","https://openalex.org/W4392158247","https://openalex.org/W4392490654","https://openalex.org/W4392932802","https://openalex.org/W4393306719","https://openalex.org/W4394674329","https://openalex.org/W4398131512","https://openalex.org/W4398131543","https://openalex.org/W4400877429","https://openalex.org/W4401070294","https://openalex.org/W4401539961","https://openalex.org/W4405800364","https://openalex.org/W4406861357","https://openalex.org/W4408016758","https://openalex.org/W4409641019","https://openalex.org/W4410087594","https://openalex.org/W4410228822","https://openalex.org/W4410740393","https://openalex.org/W4411232558","https://openalex.org/W4411232631","https://openalex.org/W4415971006"],"related_works":[],"abstract_inverted_index":{"Securing":[0],"the":[1,25,29,45,145,179,190],"near-real-time":[2],"(near-RT)":[3],"control":[4,26,63,193],"operations":[5],"in":[6,195],"Open":[7,121,196],"Radio":[8],"Access":[9],"Networks":[10],"(Open":[11],"RAN)":[12],"is":[13,31,117],"increasingly":[14],"critical,":[15],"yet":[16],"remains":[17],"insufficiently":[18],"addressed,":[19],"as":[20],"new":[21],"runtime":[22,105,159,186],"threats":[23,57],"target":[24],"loop":[27,194],"while":[28,154],"system":[30],"operational.":[32],"In":[33],"this":[34,176],"paper,":[35],"we":[36],"propose":[37],"a":[38,68,76,90,104,127,168],"multi-layer":[39],"defence":[40],"framework":[41,116,202],"designed":[42],"to":[43],"enhance":[44],"security":[46,187],"of":[47,87],"near-RT":[48,151,191],"RAN":[49,122,129],"Intelligent":[50],"Controller":[51],"(RIC)":[52],"operations.":[53],"We":[54],"classify":[55],"operational-time":[56],"into":[58,203],"three":[59],"categories\u2014message-level,":[60],"data-level,":[61],"and":[62,66,71,84,103,126,138,184,198,208],"logic-level\u2014and":[64],"design":[65],"implement":[67],"dedicated":[69],"detection":[70,133],"mitigation":[72,206],"component":[73],"for":[74,167,181,189],"each:":[75],"signature-based":[77],"E2":[78],"message":[79],"inspection":[80],"module":[81],"performing":[82],"structural":[83],"semantic":[85],"validation":[86],"signalling":[88],"exchanges,":[89],"telemetry":[91],"poisoning":[92],"detector":[93],"based":[94,109],"on":[95,110,119],"temporal":[96],"anomaly":[97],"scoring":[98],"using":[99],"an":[100,111,120,200],"LSTM":[101],"network,":[102],"xApp":[106],"attestation":[107],"mechanism":[108],"execution-time":[112],"hash":[113],"challenge\u2013response.":[114],"The":[115],"evaluated":[118],"testbed":[123],"comprising":[124],"FlexRIC":[125],"commercial":[128],"emulator,":[130],"demonstrating":[131],"effective":[132],"rates,":[134],"low":[135],"latency":[136],"overheads,":[137],"practical":[139],"integration":[140],"feasibility.":[141],"Results":[142],"indicate":[143],"that":[144],"proposed":[146],"safeguards":[147],"can":[148,211],"operate":[149],"within":[150],"time":[152],"constraints":[153],"significantly":[155],"improving":[156],"protection":[157],"against":[158],"attacks,":[160],"introducing":[161],"less":[162],"than":[163],"80":[164],"ms":[165],"overhead":[166],"network":[169],"with":[170],"500":[171],"User":[172],"Equipment":[173],"(UEs).":[174],"Overall,":[175],"work":[177],"lays":[178],"foundation":[180],"deployable,":[182],"layered,":[183],"policy-driven":[185],"architectures":[188],"RIC":[192],"RAN,":[197],"provides":[199],"extensible":[201],"which":[204],"future":[205],"policies":[207],"threat-specific":[209],"modules":[210],"be":[212],"integrated.":[213]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2026-01-02T00:00:00"}