{"id":"https://openalex.org/W7161419388","doi":"https://doi.org/10.1145/3765613.3811685","title":"StormShield: Fingerprint-Based Detection and Mitigation of RRC Signaling Storms in O-RAN 5G RANs","display_name":"StormShield: Fingerprint-Based Detection and Mitigation of RRC Signaling Storms in O-RAN 5G RANs","publication_year":2026,"publication_date":"2026-06-02","ids":{"openalex":"https://openalex.org/W7161419388","doi":"https://doi.org/10.1145/3765613.3811685"},"language":null,"primary_location":{"id":"doi:10.1145/3765613.3811685","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3765613.3811685","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2605.14032","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040241964","display_name":"Noemi Giustini","orcid":null},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Noemi Giustini","raw_affiliation_strings":["Northeastern University, Boston, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0009-0001-1748-6997","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, Massachusetts, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050214677","display_name":"Andrea Lacava","orcid":"https://orcid.org/0000-0001-9217-5956"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andrea Lacava","raw_affiliation_strings":["Northeastern University, Boston, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0001-9217-5956","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, Massachusetts, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005032046","display_name":"Leonardo Bonati","orcid":"https://orcid.org/0000-0002-1511-1833"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Leonardo Bonati","raw_affiliation_strings":["Northeastern University, Boston, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0002-1511-1833","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, Massachusetts, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093470951","display_name":"Stefano Maxenti","orcid":"https://orcid.org/0009-0007-3628-1931"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stefano Maxenti","raw_affiliation_strings":["Northeastern University, Boston, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0009-0007-3628-1931","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, Massachusetts, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136314453","display_name":"Michele Polese","orcid":null},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michele Polese","raw_affiliation_strings":["Northeastern University, Boston, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0002-9740-134X","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, Massachusetts, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054337759","display_name":"Tommaso Melodia","orcid":"https://orcid.org/0000-0002-2719-1789"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tommaso Melodia","raw_affiliation_strings":["Northeastern University, Boston, Massachusetts, USA"],"raw_orcid":"https://orcid.org/0000-0002-2719-1789","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, Massachusetts, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022341678","display_name":"Francesca Cuomo","orcid":"https://orcid.org/0000-0002-9122-7993"},"institutions":[{"id":"https://openalex.org/I861853513","display_name":"Sapienza University of Rome","ror":"https://ror.org/02be6w209","country_code":"IT","type":"education","lineage":["https://openalex.org/I861853513"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Francesca Cuomo","raw_affiliation_strings":["Sapienza University of Rome, Rome, Italy"],"raw_orcid":"https://orcid.org/0000-0002-9122-7993","affiliations":[{"raw_affiliation_string":"Sapienza University of Rome, Rome, Italy","institution_ids":["https://openalex.org/I861853513"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.49127106,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"194","last_page":"204"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.5662000179290771,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.5662000179290771,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10148","display_name":"Advanced MIMO Systems Optimization","score":0.0568000003695488,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11133","display_name":"UAV Applications and Optimization","score":0.028599999845027924,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.8284000158309937},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.5737000107765198},{"id":"https://openalex.org/keywords/base-station","display_name":"Base station","score":0.5565000176429749},{"id":"https://openalex.org/keywords/blocking","display_name":"Blocking (statistics)","score":0.538100004196167},{"id":"https://openalex.org/keywords/user-equipment","display_name":"User equipment","score":0.5234000086784363},{"id":"https://openalex.org/keywords/storm","display_name":"Storm","score":0.5099999904632568},{"id":"https://openalex.org/keywords/universal-software-radio-peripheral","display_name":"Universal Software Radio Peripheral","score":0.4781000018119812},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.45649999380111694},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.4214000105857849},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4018000066280365}],"concepts":[{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.8284000158309937},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5950999855995178},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.5737000107765198},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5605999827384949},{"id":"https://openalex.org/C68649174","wikidata":"https://www.wikidata.org/wiki/Q1379116","display_name":"Base station","level":2,"score":0.5565000176429749},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.538100004196167},{"id":"https://openalex.org/C2781327853","wikidata":"https://www.wikidata.org/wiki/Q3552547","display_name":"User equipment","level":3,"score":0.5234000086784363},{"id":"https://openalex.org/C105306849","wikidata":"https://www.wikidata.org/wiki/Q81054","display_name":"Storm","level":2,"score":0.5099999904632568},{"id":"https://openalex.org/C192220659","wikidata":"https://www.wikidata.org/wiki/Q1245659","display_name":"Universal Software Radio Peripheral","level":3,"score":0.4781000018119812},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.45649999380111694},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.4214000105857849},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4018000066280365},{"id":"https://openalex.org/C153646914","wikidata":"https://www.wikidata.org/wiki/Q535695","display_name":"Cellular network","level":2,"score":0.3855000138282776},{"id":"https://openalex.org/C101541887","wikidata":"https://www.wikidata.org/wiki/Q1555675","display_name":"Remote radio head","level":4,"score":0.38499999046325684},{"id":"https://openalex.org/C554876149","wikidata":"https://www.wikidata.org/wiki/Q1436167","display_name":"Radio control","level":2,"score":0.3695000112056732},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3603000044822693},{"id":"https://openalex.org/C32022120","wikidata":"https://www.wikidata.org/wiki/Q797225","display_name":"Interference (communication)","level":3,"score":0.34869998693466187},{"id":"https://openalex.org/C171115542","wikidata":"https://www.wikidata.org/wiki/Q1331892","display_name":"Software-defined radio","level":2,"score":0.33820000290870667},{"id":"https://openalex.org/C106365562","wikidata":"https://www.wikidata.org/wiki/Q3078360","display_name":"Radio access network","level":4,"score":0.33000001311302185},{"id":"https://openalex.org/C182448111","wikidata":"https://www.wikidata.org/wiki/Q7281197","display_name":"Radio resource management","level":4,"score":0.32899999618530273},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.3221000134944916},{"id":"https://openalex.org/C2780609101","wikidata":"https://www.wikidata.org/wiki/Q17156588","display_name":"Resource management (computing)","level":2,"score":0.31540000438690186},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3122999966144562},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C81988521","wikidata":"https://www.wikidata.org/wiki/Q676838","display_name":"Control unit","level":2,"score":0.28929999470710754},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C127964446","wikidata":"https://www.wikidata.org/wiki/Q1092142","display_name":"Computational resource","level":3,"score":0.27619999647140503},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2720000147819519},{"id":"https://openalex.org/C160704184","wikidata":"https://www.wikidata.org/wiki/Q18031028","display_name":"Ran","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.25699999928474426},{"id":"https://openalex.org/C2983886724","wikidata":"https://www.wikidata.org/wiki/Q4262","display_name":"Radio signal","level":3,"score":0.2531999945640564}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3765613.3811685","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3765613.3811685","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2605.14032","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2605.14032","pdf_url":"https://arxiv.org/pdf/2605.14032","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2605.14032","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2605.14032","pdf_url":"https://arxiv.org/pdf/2605.14032","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2780291193","display_name":null,"funder_award_id":"W911NF-24-2-0065","funder_id":"https://openalex.org/F4320338295","funder_display_name":"Army Research Laboratory"},{"id":"https://openalex.org/G507880695","display_name":null,"funder_award_id":"PE00000014","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G5259331294","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338295","funder_display_name":"Army Research Laboratory"},{"id":"https://openalex.org/G6191685811","display_name":"From Open RAN to Open Spectrum - Sharing Spectrum, Services, and Infrastructure in Spectrum Era 4","funder_award_id":"2434081","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320322510","display_name":"Sapienza Universit\u00e0 di Roma","ror":"https://ror.org/02be6w209"},{"id":"https://openalex.org/F4320338295","display_name":"Army Research Laboratory","ror":"https://ror.org/011hc8f90"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7161419388.pdf","grobid_xml":"https://content.openalex.org/works/W7161419388.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"5G":[0,120],"networks":[1],"provide":[2],"low-latency,":[3],"high":[4],"throughput,":[5],"and":[6,23,40,80,87,96,132,150,173,216],"massive":[7],"connectivity,":[8],"yet":[9],"the":[10,20,109,112,118,192,230,233],"control":[11],"plane":[12],"remains":[13],"exposed":[14],"to":[15,42,53,73],"several":[16],"security":[17],"threats.":[18],"Among":[19],"most":[21],"common":[22],"impactful":[24],"threats":[25],"are":[26,70,158],"Denial-of-Service":[27],"(DoS)":[28],"attacks,":[29],"with":[30,169,188,200,219],"Radio":[31,186,197],"Resource":[32],"Control":[33],"(RRC)":[34],"signaling":[35,113,128],"storms":[36],"being":[37],"particularly":[38],"effective":[39],"difficult":[41],"mitigate.":[43],"In":[44,103],"this":[45,104],"attack,":[46],"a":[47,66,127,194],"malicious":[48],"User":[49],"Equipment":[50],"(UE)":[51],"aims":[52],"exhaust":[54],"Next":[55],"Generation":[56],"Node":[57],"Base":[58],"(gNB)":[59],"resources,":[60],"preventing":[61],"legitimate":[62],"UEs":[63,153],"from":[64,229],"establishing":[65],"connection.":[67],"Existing":[68],"defenses":[69],"typically":[71],"limited":[72],"detection,":[74],"only":[75],"evaluated":[76],"through":[77],"numerical":[78],"simulations,":[79],"cannot":[81],"discern":[82],"between":[83],"high-load":[84],"network":[85],"conditions":[86],"attacks.":[88],"Most":[89],"of":[90,111,224,232],"them":[91],"also":[92],"assume":[93],"static":[94],"setups":[95],"do":[97],"not":[98],"take":[99],"mobility":[100],"into":[101],"account.":[102],"paper,":[105],"we":[106,124],"first":[107,179],"evaluate":[108],"feasibility":[110],"storm":[114,129],"attack":[115,130],"by":[116],"using":[117],"OpenAirInterface(OAI)":[119],"protocol":[121],"stack.":[122],"Then,":[123],"propose":[125],"StormShield,":[126],"detection":[131,222],"mitigation":[133],"technique":[134],"implemented":[135],"as":[136],"an":[137,140,165,182,220],"xApp":[138],"on":[139,164],"O-RAN":[141],"Near-Real-Time":[142],"(near-RT)":[143],"RAN":[144],"Intelligent":[145],"Controller":[146],"(RIC).":[147],"It":[148],"fingerprints":[149],"blocks":[151],"Malicious":[152],"(MUEs)":[154],"before":[155],"gNB":[156,176,212],"resources":[157],"exhausted.":[159],"We":[160],"prototyped":[161],"our":[162],"solution":[163],"Over-The-Air":[166],"(OTA)":[167],"testbed":[168],"OAI,":[170],"NVIDIA":[171],"Aerial,":[172],"two":[174],"different":[175],"setups.":[177],"The":[178],"one":[180],"leverages":[181],"USRP":[183],"X410":[184],"Software-defined":[185],"(SDR)":[187],"8.1":[189],"functional":[190,202],"split;":[191],"second":[193],"commercial":[195],"Foxconn":[196],"Unit":[198],"(RU)":[199],"7.2":[201],"split.":[203],"Our":[204],"experimental":[205],"evaluation":[206],"demonstrates":[207],"that":[208],"StormShield":[209],"effectively":[210],"prevents":[211],"resource":[213],"exhaustion,":[214],"identifying":[215],"blocking":[217],"MUEs":[218],"average":[221],"accuracy":[223],"97.6%":[225],"within":[226],"106.5":[227],"ms":[228],"beginning":[231],"attack.":[234]},"counts_by_year":[],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2026-05-17T00:00:00"}