{"id":"https://openalex.org/W4398131461","doi":"https://doi.org/10.1145/3643833.3656134","title":"5GAC-Analyzer: Identifying Over-Privilege Between 5G Core Network Functions","display_name":"5GAC-Analyzer: Identifying Over-Privilege Between 5G Core Network Functions","publication_year":2024,"publication_date":"2024-05-20","ids":{"openalex":"https://openalex.org/W4398131461","doi":"https://doi.org/10.1145/3643833.3656134"},"language":"en","primary_location":{"id":"doi:10.1145/3643833.3656134","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3643833.3656134","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045471293","display_name":"Seaver Thorn","orcid":"https://orcid.org/0000-0002-7907-2327"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Seaver Thorn","raw_affiliation_strings":["North Carolina State University, Raleigh, NC, USA"],"raw_orcid":"https://orcid.org/0000-0002-7907-2327","affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049834187","display_name":"K. Virgil English","orcid":"https://orcid.org/0000-0002-3399-4027"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"K. Virgil English","raw_affiliation_strings":["North Carolina State University, Raleigh, NC, USA"],"raw_orcid":"https://orcid.org/0000-0002-3399-4027","affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039485542","display_name":"Kevin Butler","orcid":"https://orcid.org/0000-0002-7498-4239"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kevin R. B. Butler","raw_affiliation_strings":["University of Florida, Gainesville, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-7498-4239","affiliations":[{"raw_affiliation_string":"University of Florida, Gainesville, FL, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024034310","display_name":"William Enck","orcid":"https://orcid.org/0000-0002-3043-8092"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Enck","raw_affiliation_strings":["North Carolina State University, Raleigh, NC, USA"],"raw_orcid":"https://orcid.org/0000-0002-3043-8092","affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"66","last_page":"77"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/spectrum-analyzer","display_name":"Spectrum analyzer","score":0.6608818769454956},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.657389760017395},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6487398147583008},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.6434640884399414},{"id":"https://openalex.org/keywords/core-network","display_name":"Core network","score":0.5000617504119873},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4101364314556122},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.23804643750190735},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.2090321183204651}],"concepts":[{"id":"https://openalex.org/C158007255","wikidata":"https://www.wikidata.org/wiki/Q1055222","display_name":"Spectrum analyzer","level":2,"score":0.6608818769454956},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.657389760017395},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6487398147583008},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.6434640884399414},{"id":"https://openalex.org/C5038329","wikidata":"https://www.wikidata.org/wiki/Q1142907","display_name":"Core network","level":2,"score":0.5000617504119873},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4101364314556122},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.23804643750190735},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.2090321183204651}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3643833.3656134","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3643833.3656134","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8147468447","display_name":null,"funder_award_id":"CNS-2055014,CNS-2054911","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W88388190","https://openalex.org/W1197495329","https://openalex.org/W2012921353","https://openalex.org/W2058664481","https://openalex.org/W2092619723","https://openalex.org/W2112995928","https://openalex.org/W2115026336","https://openalex.org/W2132450494","https://openalex.org/W2133723082","https://openalex.org/W2141736438","https://openalex.org/W2150656895","https://openalex.org/W2161337603","https://openalex.org/W2218971720","https://openalex.org/W2229250518","https://openalex.org/W2254160488","https://openalex.org/W2400427673","https://openalex.org/W2765463072","https://openalex.org/W2783156170","https://openalex.org/W2792636363","https://openalex.org/W2797972299","https://openalex.org/W2806152525","https://openalex.org/W2809727329","https://openalex.org/W2929535634","https://openalex.org/W2946869648","https://openalex.org/W2987215725","https://openalex.org/W2998879240","https://openalex.org/W3024280588","https://openalex.org/W3049379989","https://openalex.org/W3103619372","https://openalex.org/W3106913944","https://openalex.org/W3136586396","https://openalex.org/W3175832761","https://openalex.org/W3176721475","https://openalex.org/W4200405708","https://openalex.org/W4229066873","https://openalex.org/W4307533935","https://openalex.org/W4382396131","https://openalex.org/W4382396221","https://openalex.org/W4388857026"],"related_works":["https://openalex.org/W2374400535","https://openalex.org/W2391061712","https://openalex.org/W2094171095","https://openalex.org/W1603110617","https://openalex.org/W2108239983","https://openalex.org/W4231462422","https://openalex.org/W2018394392","https://openalex.org/W2602905131","https://openalex.org/W2393335510","https://openalex.org/W3100679886"],"abstract_inverted_index":{"5G":[0,83],"technology":[1],"transitions":[2],"the":[3,21,45,95,120,125],"cellular":[4],"network":[5,13,36],"core":[6,84],"from":[7,31,81],"specialized":[8],"hardware":[9],"into":[10],"software-based":[11],"cloud-native":[12],"functions":[14],"(NFs).":[15],"As":[16],"part":[17],"of":[18,41,104,127],"this":[19,42,70],"change,":[20],"3GPP":[22,46,96],"defines":[23],"an":[24,48],"access":[25],"control":[26],"policy":[27,43,129],"to":[28,55,66,77,90,119],"protect":[29],"NFs":[30],"one":[32],"another":[33],"and":[34,86,110],"third-party":[35],"applications.":[37],"A":[38],"manual":[39,61],"review":[40,62],"by":[44,94],"identified":[47],"over-privilege":[49,105],"flaw":[50],"that":[51,88,106],"exposes":[52],"cryptographic":[53],"keys":[54],"all":[56],"NFs.":[57],"Unfortunately,":[58],"such":[59],"a":[60],"is":[63,92],"difficult":[64],"due":[65],"ambiguous":[67],"documentation.":[68],"In":[69],"paper,":[71],"we":[72],"use":[73],"static":[74],"program":[75],"analysis":[76],"extract":[78,111],"NF":[79],"functionality":[80,89],"four":[82],"implementations":[85],"compare":[87],"what":[91],"permissible":[93],"policy.":[97],"We":[98,114],"discover":[99],"two":[100],"previously":[101],"unknown":[102],"instances":[103],"can":[107],"lead":[108],"denial-of-service":[109],"sensitive":[112],"data.":[113],"have":[115],"reported":[116],"our":[117],"findings":[118],"GSMA,":[121],"who":[122],"has":[123],"confirmed":[124],"significance":[126],"these":[128],"flaws.":[130]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-20T07:56:41.581041","created_date":"2025-10-10T00:00:00"}
