ASTRA-5G: Automated Over-the-Air Security Testing and Research Architecture for 5G SA Devices

Syed Khandker; Michele Guerra; Evangelos Bitsikas; Roger Piqueras Jover; Aanjhan Ranganathan; Christina Pöpper

doi:10.1145/3643833.3656141

ASTRA-5G: Automated Over-the-Air Security Testing and Research Architecture for 5G SA Devices

Syed Khandker, Michele Guerra, Evangelos Bitsikas, Roger Piqueras Jover, Aanjhan Ranganathan, Christina Pöpper

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Despite the widespread deployment of 5G technologies, there exists a critical gap in security testing for 5G Standalone (SA) devices. Existing methods, largely manual and labor-intensive, are ill-equipped to fully uncover the state of security in the implementations of 5G SA protocols and standards on devices, severely limiting the ability to conduct comprehensive evaluations. To address this issue, in this work, we introduce a novel, open-source framework that automates the security testing process for 5G SA devices. By leveraging enhanced functionalities of 5G SA core and Radio Access Network (RAN) software, our framework offers a streamlined approach to generating, executing, and evaluating test cases, specifically focusing on the Non-Access Stratum layer. Our application of this framework across multiple 5G SA devices provides in-depth security insights, significantly improving testing efficiency and breadth.

Original language	English (US)
Title of host publication	WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks
Publisher	Association for Computing Machinery, Inc
Pages	89-100
Number of pages	12
ISBN (Electronic)	9798400705823
DOIs	https://doi.org/10.1145/3643833.3656141
State	Published - May 27 2024
Event	17th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2024 - Seoul, Korea, Republic of Duration: May 27 2024 → May 29 2024

Publication series

Name	WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks

Conference

Conference	17th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2024
Country/Territory	Korea, Republic of
City	Seoul
Period	5/27/24 → 5/29/24

Keywords

5g
automated testing
open5gs
security
srsran

ASJC Scopus subject areas

Computer Networks and Communications
Computer Science Applications
Information Systems
Software
Safety Research

Access to Document

10.1145/3643833.3656141

Cite this

Khandker, S., Guerra, M., Bitsikas, E., Jover, R. P., Ranganathan, A., & Pöpper, C. (2024). ASTRA-5G: Automated Over-the-Air Security Testing and Research Architecture for 5G SA Devices. In WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks (pp. 89-100). (WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks). Association for Computing Machinery, Inc. https://doi.org/10.1145/3643833.3656141

ASTRA-5G: Automated Over-the-Air Security Testing and Research Architecture for 5G SA Devices. / Khandker, Syed; Guerra, Michele; Bitsikas, Evangelos et al.
WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks. Association for Computing Machinery, Inc, 2024. p. 89-100 (WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Khandker, S, Guerra, M, Bitsikas, E, Jover, RP, Ranganathan, A & Pöpper, C 2024, ASTRA-5G: Automated Over-the-Air Security Testing and Research Architecture for 5G SA Devices. in WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks. WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Association for Computing Machinery, Inc, pp. 89-100, 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2024, Seoul, Korea, Republic of, 5/27/24. https://doi.org/10.1145/3643833.3656141

Khandker S, Guerra M, Bitsikas E, Jover RP, Ranganathan A, Pöpper C. ASTRA-5G: Automated Over-the-Air Security Testing and Research Architecture for 5G SA Devices. In WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks. Association for Computing Machinery, Inc. 2024. p. 89-100. (WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks). doi: 10.1145/3643833.3656141

Khandker, Syed ; Guerra, Michele ; Bitsikas, Evangelos et al. / ASTRA-5G : Automated Over-the-Air Security Testing and Research Architecture for 5G SA Devices. WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks. Association for Computing Machinery, Inc, 2024. pp. 89-100 (WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks).

@inproceedings{e3f7a2af279d4a49ae75ef70b5931007,

title = "ASTRA-5G: Automated Over-the-Air Security Testing and Research Architecture for 5G SA Devices",

abstract = "Despite the widespread deployment of 5G technologies, there exists a critical gap in security testing for 5G Standalone (SA) devices. Existing methods, largely manual and labor-intensive, are ill-equipped to fully uncover the state of security in the implementations of 5G SA protocols and standards on devices, severely limiting the ability to conduct comprehensive evaluations. To address this issue, in this work, we introduce a novel, open-source framework that automates the security testing process for 5G SA devices. By leveraging enhanced functionalities of 5G SA core and Radio Access Network (RAN) software, our framework offers a streamlined approach to generating, executing, and evaluating test cases, specifically focusing on the Non-Access Stratum layer. Our application of this framework across multiple 5G SA devices provides in-depth security insights, significantly improving testing efficiency and breadth.",

keywords = "5g, automated testing, open5gs, security, srsran",

author = "Syed Khandker and Michele Guerra and Evangelos Bitsikas and Jover, {Roger Piqueras} and Aanjhan Ranganathan and Christina P{\"o}pper",

note = "Publisher Copyright: {\textcopyright} 2024 Owner/Author.; 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2024 ; Conference date: 27-05-2024 Through 29-05-2024",

year = "2024",

month = may,

day = "27",

doi = "10.1145/3643833.3656141",

language = "English (US)",

series = "WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks",

publisher = "Association for Computing Machinery, Inc",

pages = "89--100",

booktitle = "WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks",

}

TY - GEN

T1 - ASTRA-5G

T2 - 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2024

AU - Khandker, Syed

AU - Guerra, Michele

AU - Bitsikas, Evangelos

AU - Jover, Roger Piqueras

AU - Ranganathan, Aanjhan

AU - Pöpper, Christina

PY - 2024/5/27

Y1 - 2024/5/27

N2 - Despite the widespread deployment of 5G technologies, there exists a critical gap in security testing for 5G Standalone (SA) devices. Existing methods, largely manual and labor-intensive, are ill-equipped to fully uncover the state of security in the implementations of 5G SA protocols and standards on devices, severely limiting the ability to conduct comprehensive evaluations. To address this issue, in this work, we introduce a novel, open-source framework that automates the security testing process for 5G SA devices. By leveraging enhanced functionalities of 5G SA core and Radio Access Network (RAN) software, our framework offers a streamlined approach to generating, executing, and evaluating test cases, specifically focusing on the Non-Access Stratum layer. Our application of this framework across multiple 5G SA devices provides in-depth security insights, significantly improving testing efficiency and breadth.

AB - Despite the widespread deployment of 5G technologies, there exists a critical gap in security testing for 5G Standalone (SA) devices. Existing methods, largely manual and labor-intensive, are ill-equipped to fully uncover the state of security in the implementations of 5G SA protocols and standards on devices, severely limiting the ability to conduct comprehensive evaluations. To address this issue, in this work, we introduce a novel, open-source framework that automates the security testing process for 5G SA devices. By leveraging enhanced functionalities of 5G SA core and Radio Access Network (RAN) software, our framework offers a streamlined approach to generating, executing, and evaluating test cases, specifically focusing on the Non-Access Stratum layer. Our application of this framework across multiple 5G SA devices provides in-depth security insights, significantly improving testing efficiency and breadth.

KW - 5g

KW - automated testing

KW - open5gs

KW - security

KW - srsran

UR - http://www.scopus.com/inward/record.url?scp=85198139089&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85198139089&partnerID=8YFLogxK

U2 - 10.1145/3643833.3656141

DO - 10.1145/3643833.3656141

M3 - Conference contribution

AN - SCOPUS:85198139089

T3 - WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks

SP - 89

EP - 100

BT - WiSec 2024 - Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks

PB - Association for Computing Machinery, Inc

Y2 - 27 May 2024 through 29 May 2024

ER -

ASTRA-5G: Automated Over-the-Air Security Testing and Research Architecture for 5G SA Devices

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this