5G蜂窝网络中RRC风暴攻击的实验验证与缓解
Experimental Validation and Mitigation of RRC Storm Attacks in 5G Cellular Networks
浏览论文内容
中文总结 AI 辅助
本文在真实5G测试床上验证了RRC风暴攻击，设计了gNB侧轻量级缓解技术，开发了实时可视化网络状态的开源管理界面，为5G网络安全研究提供了可复现的基础。
中文摘要 AI 辅助
5G系统的初始接入阶段仍存在安全隐患，因为基站（gNB）必须在用户完成身份认证前分配无线资源。具体而言，随机接入信道（RACH）过程可能被滥用，产生大量不完整的连接尝试，形成信令风暴，消耗gNB资源并阻止合法用户成功接入。本文利用OpenAirInterface项目实现了该信令风暴攻击，并在由软件定义无线电和商用手机组成的真实测试床上进行了验证。随后，我们设计并实现了一种轻量级缓解技术，该技术直接在gNB上运行，通过监测可疑的半开连接并采取相应措施来防御攻击。为了使系统在实际应用中具备可观测性，我们还开发了一个网络管理界面，可实时可视化网络状态并在攻击阶段突出显示可疑活动。最后，该工作以开源形式发布，以便其他研究人员能够复现我们的结果、在该实现基础上进行拓展，并评估新的缓解策略。
英文摘要
The initial access phase of the 5G system remains sensitive because the base station (gNB) must allocate radio resources before the user is fully authenticated. In particular, the random access channel (RACH) procedure can be abused to generate large numbers of incomplete connection attempts, creating a signaling storm that consumes gNB resources and prevents legitimate users from connecting successfully. In this paper, we implement this signaling storm attack using the OpenAirInterface project and validate it on a real testbed composed of software-defined radios and commercial phones. We then design and implement a lightweight mitigation technique that operates directly at the gNB by monitoring and acting on suspicious half-open connections. To make the system observable in practice, we also develop a network management interface that visualizes the network state in real time and highlights suspicious activity during the attack phase. Finally, the work is released as open source so that other researchers can reproduce our results, build on the implementation, and evaluate new mitigation strategies.
