{"id":"https://openalex.org/W7161284736","doi":"https://doi.org/10.48550/arxiv.2605.14032","title":"StormShield: Fingerprint-Based Detection and Mitigation of RRC Signaling Storms in O-RAN 5G RANs","display_name":"StormShield: Fingerprint-Based Detection and Mitigation of RRC Signaling Storms in O-RAN 5G RANs","publication_year":2026,"publication_date":"2026-05-13","ids":{"openalex":"https://openalex.org/W7161284736","doi":"https://doi.org/10.48550/arxiv.2605.14032"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.14032","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14032","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.14032","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040241964","display_name":"Noemi Giustini","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Giustini, Noemi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050214677","display_name":"Andrea Lacava","orcid":"https://orcid.org/0000-0001-9217-5956"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lacava, Andrea","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005032046","display_name":"Leonardo Bonati","orcid":"https://orcid.org/0000-0002-1511-1833"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bonati, Leonardo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093470951","display_name":"Stefano Maxenti","orcid":"https://orcid.org/0009-0007-3628-1931"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Maxenti, Stefano","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136266649","display_name":"Michele Polese","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Polese, Michele","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054337759","display_name":"Tommaso Melodia","orcid":"https://orcid.org/0000-0002-2719-1789"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Melodia, Tommaso","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5022341678","display_name":"Francesca Cuomo","orcid":"https://orcid.org/0000-0002-9122-7993"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cuomo, Francesca","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.5662000179290771,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.5662000179290771,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10148","display_name":"Advanced MIMO Systems Optimization","score":0.0568000003695488,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11133","display_name":"UAV Applications and Optimization","score":0.028599999845027924,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.8284000158309937},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.5737000107765198},{"id":"https://openalex.org/keywords/base-station","display_name":"Base station","score":0.5565000176429749},{"id":"https://openalex.org/keywords/blocking","display_name":"Blocking (statistics)","score":0.538100004196167},{"id":"https://openalex.org/keywords/user-equipment","display_name":"User equipment","score":0.5234000086784363},{"id":"https://openalex.org/keywords/storm","display_name":"Storm","score":0.5099999904632568},{"id":"https://openalex.org/keywords/universal-software-radio-peripheral","display_name":"Universal Software Radio Peripheral","score":0.4781000018119812},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.45649999380111694},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.4214000105857849},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4018000066280365}],"concepts":[{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.8284000158309937},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5950999855995178},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.5737000107765198},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5605999827384949},{"id":"https://openalex.org/C68649174","wikidata":"https://www.wikidata.org/wiki/Q1379116","display_name":"Base station","level":2,"score":0.5565000176429749},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.538100004196167},{"id":"https://openalex.org/C2781327853","wikidata":"https://www.wikidata.org/wiki/Q3552547","display_name":"User equipment","level":3,"score":0.5234000086784363},{"id":"https://openalex.org/C105306849","wikidata":"https://www.wikidata.org/wiki/Q81054","display_name":"Storm","level":2,"score":0.5099999904632568},{"id":"https://openalex.org/C192220659","wikidata":"https://www.wikidata.org/wiki/Q1245659","display_name":"Universal Software Radio Peripheral","level":3,"score":0.4781000018119812},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.45649999380111694},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.4214000105857849},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4018000066280365},{"id":"https://openalex.org/C153646914","wikidata":"https://www.wikidata.org/wiki/Q535695","display_name":"Cellular network","level":2,"score":0.3855000138282776},{"id":"https://openalex.org/C101541887","wikidata":"https://www.wikidata.org/wiki/Q1555675","display_name":"Remote radio head","level":4,"score":0.38499999046325684},{"id":"https://openalex.org/C554876149","wikidata":"https://www.wikidata.org/wiki/Q1436167","display_name":"Radio control","level":2,"score":0.3695000112056732},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3603000044822693},{"id":"https://openalex.org/C32022120","wikidata":"https://www.wikidata.org/wiki/Q797225","display_name":"Interference (communication)","level":3,"score":0.34869998693466187},{"id":"https://openalex.org/C171115542","wikidata":"https://www.wikidata.org/wiki/Q1331892","display_name":"Software-defined radio","level":2,"score":0.33820000290870667},{"id":"https://openalex.org/C106365562","wikidata":"https://www.wikidata.org/wiki/Q3078360","display_name":"Radio access network","level":4,"score":0.33000001311302185},{"id":"https://openalex.org/C182448111","wikidata":"https://www.wikidata.org/wiki/Q7281197","display_name":"Radio resource management","level":4,"score":0.32899999618530273},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.3221000134944916},{"id":"https://openalex.org/C2780609101","wikidata":"https://www.wikidata.org/wiki/Q17156588","display_name":"Resource management (computing)","level":2,"score":0.31540000438690186},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3122999966144562},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C81988521","wikidata":"https://www.wikidata.org/wiki/Q676838","display_name":"Control unit","level":2,"score":0.28929999470710754},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C127964446","wikidata":"https://www.wikidata.org/wiki/Q1092142","display_name":"Computational resource","level":3,"score":0.27619999647140503},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2720000147819519},{"id":"https://openalex.org/C160704184","wikidata":"https://www.wikidata.org/wiki/Q18031028","display_name":"Ran","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.25699999928474426},{"id":"https://openalex.org/C2983886724","wikidata":"https://www.wikidata.org/wiki/Q4262","display_name":"Radio signal","level":3,"score":0.2531999945640564}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.14032","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14032","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.14032","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14032","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"5G":[0,120],"networks":[1],"provide":[2],"low-latency,":[3],"high":[4],"throughput,":[5],"and":[6,23,40,80,87,96,132,150,173,216],"massive":[7],"connectivity,":[8],"yet":[9],"the":[10,20,109,112,118,192,230,233],"control":[11],"plane":[12],"remains":[13],"exposed":[14],"to":[15,42,53,73],"several":[16],"security":[17],"threats.":[18],"Among":[19],"most":[21],"common":[22],"impactful":[24],"threats":[25],"are":[26,70,158],"Denial-of-Service":[27],"(DoS)":[28],"attacks,":[29],"with":[30,169,188,200,219],"Radio":[31,186,197],"Resource":[32],"Control":[33],"(RRC)":[34],"signaling":[35,113,128],"storms":[36],"being":[37],"particularly":[38],"effective":[39],"difficult":[41],"mitigate.":[43],"In":[44,103],"this":[45,104],"attack,":[46],"a":[47,66,127,194],"malicious":[48],"User":[49],"Equipment":[50],"(UE)":[51],"aims":[52],"exhaust":[54],"Next":[55],"Generation":[56],"Node":[57],"Base":[58],"(gNB)":[59],"resources,":[60],"preventing":[61],"legitimate":[62],"UEs":[63,153],"from":[64,229],"establishing":[65],"connection.":[67],"Existing":[68],"defenses":[69],"typically":[71],"limited":[72],"detection,":[74],"only":[75],"evaluated":[76],"through":[77],"numerical":[78],"simulations,":[79],"cannot":[81],"discern":[82],"between":[83],"high-load":[84],"network":[85],"conditions":[86],"attacks.":[88],"Most":[89],"of":[90,111,224,232],"them":[91],"also":[92],"assume":[93],"static":[94],"setups":[95],"do":[97],"not":[98],"take":[99],"mobility":[100],"into":[101],"account.":[102],"paper,":[105],"we":[106,124],"first":[107,179],"evaluate":[108],"feasibility":[110],"storm":[114,129],"attack":[115,130],"by":[116],"using":[117],"OpenAirInterface(OAI)":[119],"protocol":[121],"stack.":[122],"Then,":[123],"propose":[125],"StormShield,":[126],"detection":[131,222],"mitigation":[133],"technique":[134],"implemented":[135],"as":[136],"an":[137,140,165,182,220],"xApp":[138],"on":[139,164],"O-RAN":[141],"Near-Real-Time":[142],"(near-RT)":[143],"RAN":[144],"Intelligent":[145],"Controller":[146],"(RIC).":[147],"It":[148],"fingerprints":[149],"blocks":[151],"Malicious":[152],"(MUEs)":[154],"before":[155],"gNB":[156,176,212],"resources":[157],"exhausted.":[159],"We":[160],"prototyped":[161],"our":[162],"solution":[163],"Over-The-Air":[166],"(OTA)":[167],"testbed":[168],"OAI,":[170],"NVIDIA":[171],"Aerial,":[172],"two":[174],"different":[175],"setups.":[177],"The":[178],"one":[180],"leverages":[181],"USRP":[183],"X410":[184],"Software-defined":[185],"(SDR)":[187],"8.1":[189],"functional":[190,202],"split;":[191],"second":[193],"commercial":[195],"Foxconn":[196],"Unit":[198],"(RU)":[199],"7.2":[201],"split.":[203],"Our":[204],"experimental":[205],"evaluation":[206],"demonstrates":[207],"that":[208],"StormShield":[209],"effectively":[210],"prevents":[211],"resource":[213],"exhaustion,":[214],"identifying":[215],"blocking":[217],"MUEs":[218],"average":[221],"accuracy":[223],"97.6%":[225],"within":[226],"106.5":[227],"ms":[228],"beginning":[231],"attack.":[234]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-16T00:00:00"}