{"id":"https://openalex.org/W7168280806","doi":"https://doi.org/10.48550/arxiv.2607.10315","title":"Understanding Implicit Trust Errors in Core Carrier Networks through Multi-Agent Flaw Discovery and Analysis","display_name":"Understanding Implicit Trust Errors in Core Carrier Networks through Multi-Agent Flaw Discovery and Analysis","publication_year":2026,"publication_date":"2026-07-11","ids":{"openalex":"https://openalex.org/W7168280806","doi":"https://doi.org/10.48550/arxiv.2607.10315"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.10315","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.10315","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.10315","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5140677300","display_name":"Ziyu Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lin, Ziyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140714593","display_name":"Ziting Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Ziting","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140701068","display_name":"Xinfeng Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Xinfeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140603600","display_name":"Wei Dong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dong, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5140585334","display_name":"XiaoFeng Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, XiaoFeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.1509000062942505,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.1509000062942505,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.1446000039577484,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.1363999992609024,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6183000206947327},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.6101999878883362},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.512499988079071},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.5112000107765198},{"id":"https://openalex.org/keywords/session","display_name":"Session (web analytics)","score":0.508899986743927},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.490200012922287},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.45750001072883606},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4562999904155731},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4244999885559082}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.781499981880188},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6183000206947327},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.6101999878883362},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6090999841690063},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.512499988079071},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.5112000107765198},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.508899986743927},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.490200012922287},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.45750001072883606},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4562999904155731},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4244999885559082},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.36320000886917114},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.3587000072002411},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.34779998660087585},{"id":"https://openalex.org/C5038329","wikidata":"https://www.wikidata.org/wiki/Q1142907","display_name":"Core network","level":2,"score":0.34119999408721924},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3400999903678894},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.3231000006198883},{"id":"https://openalex.org/C1304207","wikidata":"https://www.wikidata.org/wiki/Q7189582","display_name":"Physical access","level":3,"score":0.3122999966144562},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.2973000109195709},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2921999990940094},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.28279998898506165},{"id":"https://openalex.org/C2776157020","wikidata":"https://www.wikidata.org/wiki/Q851598","display_name":"Physical security","level":2,"score":0.27549999952316284},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2653000056743622},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.262800008058548},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.2565999925136566},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.10315","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.10315","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.10315","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.10315","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.6342675089836121,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Cellular":[0],"core":[1,20,254],"networks":[2],"(CNs)":[3],"are":[4],"critical":[5],"infrastructure,":[6],"yet":[7],"their":[8,126],"internal":[9,49,94],"security":[10,56,127],"model":[11],"has":[12,247],"historically":[13],"relied":[14],"on":[15,218,250],"physical":[16],"isolation:":[17],"interfaces":[18,95],"between":[19],"components":[21],"often":[22],"operate":[23],"within":[24],"an":[25,132,166],"assumed":[26],"trust":[27,73,118],"zone.":[28],"As":[29],"CNs":[30],"transition":[31],"to":[32,46,83,102,148,177,193],"cloud-native":[33],"deployments,":[34],"this":[35],"assumption":[36],"weakens,":[37],"expanding":[38],"the":[39,183,204],"attack":[40],"surface":[41],"and":[42,110,124,145,174,201,213,237],"enabling":[43],"external":[44],"adversaries":[45],"reach":[47],"previously":[48,227],"interfaces.":[50],"From":[51],"a":[52,68,188,244],"root-cause":[53],"analysis":[54],"of":[55,71,108],"flaws":[57],"reported":[58],"in":[59,152],"GitHub":[60],"issues":[61],"for":[62,198],"opensource":[63],"CN":[64,75,153,175,211,222],"implementations,":[65,223],"we":[66,129,164,186,224],"found":[67],"recurring":[69],"pattern":[70],"blind":[72],"among":[74],"components.":[76],"Components":[77],"may":[78],"omit":[79],"syntactic":[80],"validation,":[81],"fail":[82],"enforce":[84],"semantic":[85],"invariants,":[86],"or":[87],"allocate":[88],"resources":[89],"without":[90],"checking":[91],"availability.":[92],"Once":[93],"become":[96],"reachable,":[97],"these":[98,115],"weaknesses":[99],"can":[100],"lead":[101],"severe":[103],"impacts":[104],"such":[105],"as":[106],"denial":[107],"service":[109],"session":[111],"hijacking.":[112],"We":[113],"call":[114],"vulnerabilities":[116],"implicit":[117],"errors":[119],"(iTrue).":[120],"To":[121,155],"detect":[122],"iTrues":[123,151,200],"understand":[125],"impacts,":[128],"designed":[130],"iFinder,":[131],"LLM-driven":[133],"multi-agent":[134],"system":[135],"that":[136,169,190],"summarizes":[137],"known":[138],"flaws,":[139],"distills":[140],"them":[141,147,209],"into":[142],"detection":[143],"patterns,":[144],"applies":[146],"discover":[149],"new":[150],"implementations.":[154],"suppress":[156],"hallucinations":[157],"produced":[158],"by":[159,182,206],"large":[160],"language":[161],"models":[162],"(LLMs),":[163],"built":[165],"innovative":[167],"strategy":[168],"crosschecks":[170],"both":[171],"3GPP":[172],"specifications":[173],"code":[176],"capture":[178],"existing":[179],"protection":[180],"missed":[181],"agents.":[184],"Further,":[185],"developed":[187],"technique":[189],"uses":[191],"LLMs":[192],"generate":[194],"proof-of-concept":[195],"(PoC)":[196],"exploits":[197],"potential":[199],"iteratively":[202],"refine":[203],"PoCs":[205],"automatically":[207],"executing":[208],"against":[210],"implementations":[212],"analyzing":[214],"results.":[215],"Running":[216],"iFinder":[217],"seven":[219],"prominent":[220],"open-source":[221],"discovered":[225],"84":[226],"unknown":[228],"vulnerabilities.":[229],"Among":[230],"them,":[231],"83":[232],"have":[233,239],"already":[234],"been":[235,240,248],"confirmed":[236,249],"81":[238],"assigned":[241],"CVEs.":[242],"Importantly,":[243],"session-hijacking":[245],"flaw":[246],"real-world":[251],"commercial":[252],"5G":[253],"networks.":[255]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-15T00:00:00"}