Detecting IP DDoS Attacks Using 3GPP Radio Protocols

Loay Abdelrazek

doi:10.1109/ACCESS.2024.3365425

2024-01-01

DOI：10.1109/ACCESS.2024.3365425

原文链接

原文求助

摘要

En 中文

Contemporary mobile networks, offering advanced services such as highly dependable and fast communication (URLLC) and extensive device-to-device connectivity (mMTC), are paving the way for the upcoming 6G era. These networks are expanding their capabilities beyond traditional voice and short messaging services, enabling diverse devices to connect to the cellular network. However, with this increased connectivity comes a heightened vulnerability at the radio interface, which is the primary access medium for mobile network communication. This research work focuses on safeguarding the availability of the radio interface in the face of emerging threats. Threats to radio interface availability can originate either directly from exploiting the 3GPP radio protocol stack within base stations or indirectly through the IP protocol stack carried over the user plane. In particular, this research paper delves into user plane DDoS attacks leveraging the IP protocol stack to generate excessive traffic. It introduces a novel detection method situated within the Radio Access Network (RAN). This method analyzes the patterns of radio protocols and their functionalities to identify user plane DDoS attacks initiated from User Equipment (UEs). Importantly, the method does not rely on directly inspecting user plane packets like IP packets but rather leverages the characteristics of 3GPP radio protocols (e.g., MAC, RLC, PDCP) to detect IP DDoS attacks closer to their origin. This early detection capability helps prevent DDoS traffic from propagating to the transport network. The implications of this research extend beyond the current generation of networks, as it lays a foundation for enhancing security in the forthcoming 6G networks. As 6G aims to deliver even more advanced services and connectivity across a diverse array of devices, the robust security measures proposed in this work will be instrumental in ensuring the reliability and availability of these cutting-edge networks. The analysis employed in this paper showcase the performance with accuracy of 98.9% for DDoS attack detection.

Keyword:

Denial-of-service attack

Protocols

IP networks

Security

Computer crime

5G mobile communication

6G mobile communication

Botnet

Machine learning

Radio access networks

Explainable AI

Cellular botnets

DDoS

machine learning

radio access network

security

XAI

期刊

IEEE Access

IF:

3.6

论文数:

9.8W

被引数:

29.4W

机构

Ericsson

学者数:

1.1K

论文数: 1.0K

被引数: 0

引用论文

Evaluation of three models for calculating daily global solar radiation at Yushu, Tibet

2011 International Conference on Consumer Electronics, Communications and Networks (CECNet)

IF0

2011-04-01

PREAI

Liu Yuehua; Jiang Yingni; Chen Xinxiao

Dynamic Reconfiguration in 5G Mobile Networks to Proactively Detect and Mitigate Botnets

IEEE INTERNET COMPUTING

IF4.4

2017-01-01

PREAI

Gil Perez, Manuel; Huertas Celdran, Alberto; Ippoliti, Fabrizio; Giardina, Pietro G.; Bernini, Giacomo; Alaez, Ricardo Marco; Chirivella-Perez, Enrique; Garcia Clemente, Felix J.; Martinez Perez, Gregorio; Kraja, Elian; Carrozzo, Gino; Calero, Jose M. Alcaraz; Wang, Qi

Gut microbial dysbiosis after ethanol and burn injury correlates with lung cathelicidin-related antimicrobial peptide mRNA expression 乙醇和烧伤损伤后的肠道微生物失调与肺脏阳离子抗菌肽mRNA表达相关

ALCOHOL

IF2.9

2024-12-01

PREAI

Khair, S.; Mcmahan, R. H.; Najarro, K. M.; Frank, D. N.; Kovacs., E. J.

A FPGA based Forth microprocessor 基于FPGA的Forth微处理器

Proceedings. IEEE Symposium on FPGAs for Custom Computing Machines (Cat. No.98TB100251)

IF0

2024-10-29

PREAI

P.H.W. Leong; P.K. Tsang; T.K. Lee