Dynamic Security Analysis in 5G RAN
5G, SDR, Security, RAN
Beschreibung
The mobile security sector has uncovered numerous vulnerabilities within link and session-establishment protocols. These vulnerabilities can be exploited using software-defined radios (SDRs) to interfere with, impersonate, or flood layer-3 (L3) messages, compromising security and privacy. These risks persist even within the latest 5G mobile network standard. With affordable SDRs and open-source cellular software stacks readily accessible, the economic and technical obstacles to practical cellular attacks are relatively minimal. In this work, we would like to investigate the resource depletion and Denial-of-Service (DoS) attacks, that are well known in LTE [1], within 5G RAN. The main focus will be regarding the RRC and NAS protocol vulnerabilities that are mentioned in [1]. The expected results would be to recreate these attacks experimentally in our 5G RAN with srsRAN [2]. If time allows, further tests can be performed over campus network with commercial 5G RAN.
[1] H. Kim, J. Lee, E. Lee and Y. Kim, "Touching the Untouchables: Dynamic Security Analysis of the LTE Control Plane," 2019 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA, 2019, pp. 1153-1168, doi: 10.1109/SP.2019.00038.
[2] I. Gomez-Miguelez et al., “Srslte: An open-source platform for lte evolution and experimentation,” in Proc. of ACM WiNTECH, 2016.
Voraussetzungen
- C/C++ experience
- SDR experience is a plus
- 5G knowledge is a plus
Kontakt
- Serkut Ayvasik (serkut.ayvasik@tum.de)
- Nicolai Kroeger (nicolai.kroeger@tum.de)
- Dominik Brunke (Dominik.Brunke@ZITiS.bund.de)
Betreuer:
Working Student for the Implementation of Camera Streams and Development of a Web Server
Beschreibung
Tasks:
Implementation of live camera streams for the research project 6G-life. In addition, a web server for a GUI is to be set up in which, among other things, the camera streams are integrated
Please note that while this work is closely related to my work, this position is from our project partners at MITI (https://web.med.tum.de/en/miti/home/).
Voraussetzungen
- Motivation and independent way of working
- Interest in medicine and application-oriented research
- Experience in web server development
- Ideally knowledge of camera transmission technology and GUI programming
Kontakt
franziska.jurosch@tum.de