The main objective is not to exhaustively evaluate each vulnerability, but to document a reproducible environment for generating useful traffic to evaluate IDS and machine learning models in private 5G networks.
Abstract
This paper presents the design of a testbed for the controlled generation of cybersecurity traffic in private 5G networks. The proposal combines a Firecell Labkit 40 infrastructure, radio connectivity, and a host machine running Dockerised vulnerable services based on Docker-Vulhub. The environment deploys known vulnerabilities, many of them documented through CVEs, routes the resulting traffic through the 5G SA network, and captures it from the core using tools such as tcpdump A proof of concept that captures a real attack against Apache Tomcat (CVE-2017-12615) from the core shows that the traffic is observable and reconstructable, and that a labelled dataset can be derived from it. The architecture is a modular and extensible basis for future dataset-generation campaigns. Its main objective is not to exhaustively evaluate each vulnerability, but to document a reproducible environment for generating useful traffic to evaluate IDS and machine learning models in private 5G networks.
Publicly exposed large language model (LLM) infrastructure creates a growing attack surface, yet real-world targeting remains poorly understood. We present Ollure, a low- and medium-interaction honeypot that emulates the Ollama API without a backend LLM. Spanning four deployments across cloud and university networks, O...
The rapid integration of Network Function Virtualization (NFV) in 5G-Advanced and 6G infrastructures has introduced significant security vulnerabilities, most notably in Distributed Denial-of-Service (DDoS) attacks. Modern DDoS threats have evolved into sophisticated multi- vector campaigns that leverage AI to bypass t...
Anurag Golwalkar· Natural Resources for Human...· 0 citations
Modern security monitoring requires laboratory environments that are not only effective for threat observation but also practical to deploy and reproduce. This research presents a Docker-based Wazuh Security Operations Center (SOC) testbed for comparative malware behavior analysis in an isolated Windows 10 environment...
Aurelia Sandra Darmawan, D. Maharani, Alwan Muhammad Fajar et al.· International Conference on...· 0 citations
The proposed SHIRO system, an attack detection system on the centralized log server that aims to detect and analyze the attacks on Windows 7 clients by focusing on the three most critical Common Vulnerabilities and Exposures, can detect three types of attacks accurately, making this project useful for the administrator...
Software-Defined Networking (SDN) has emerged as a programmable networking paradigm that separates the control and data planes, enabling flexible and centralized network management while introducing new security challenges due to its software-based control architecture. However, this centralization of control, while ad...
Mariyam Ouaissa, Mariya Ouaissa, Zineb Nadifi et al.· Journal of Applied Science a...· 0 citations
Experimental results show that V5GIDS achieves strong detection performance in the evaluated settings while improving deployment relevance through orchestration alignment, reduced telemetry exchange, and resource-aware distributed operation.
Sofian Ben Khalifa, Rahim Taheri, Ivan Jordanov· Journal of Network and Syste...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
