{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,13]],"date-time":"2025-12-13T06:54:24Z","timestamp":1765608864732,"version":"3.48.0"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032137135","type":"print"},{"value":"9783032137142","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,12,14]],"date-time":"2025-12-14T00:00:00Z","timestamp":1765670400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,12,14]],"date-time":"2025-12-14T00:00:00Z","timestamp":1765670400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-13714-2_21","type":"book-chapter","created":{"date-parts":[[2025,12,13]],"date-time":"2025-12-13T06:43:31Z","timestamp":1765608211000},"page":"337-356","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Uncovering Security Weaknesses in srsRAN with CodeQL: A Static Analysis Approach for Next-Gen RAN Systems"],"prefix":"10.1007","author":[{"given":"Garrepelly","family":"Manideep","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sriram","family":"Sankaran","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Altaf","family":"Shaik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,12,14]]},"reference":[{"key":"21_CR1","unstructured":"Abdalla, A.S., Marojevic, V.: End-to-end o-ran security architecture, threat surface, coverage, and the case of the open fronthaul. arXiv preprint (2023). https:\/\/arxiv.org\/abs\/2304.05513"},{"key":"21_CR2","unstructured":"Azariah, W., Bimo, F.A., Lin, C.W., Cheng, R.G., Nikaein, N., Jana, R.: A survey on open radio access networks: challenges, research directions, and open source approaches. arXiv preprint (2022). https:\/\/arxiv.org\/abs\/2208.09125"},{"key":"21_CR3","unstructured":"Bennett, J., Enck, W.: Ransacked: domain-informed fuzzing of 4G\/5G interfaces. In: Proceedings of ACM CCS (2024)"},{"key":"21_CR4","unstructured":"Bennett, N., Enck, W.: 5GErrQL: programmatic error handling verification of 5G aka protocol. In: Proceedings of ACM CODASPY (2024)"},{"key":"21_CR5","unstructured":"Bennett, N., et al.: Analyzing open-source 5G core security using CodeQL. In: Proceedings of ACM CODASPY (2024)"},{"key":"21_CR6","unstructured":"Bennett, N., et al.: Security auditing of 5G core networks with static analysis. In: Proceedings of ACM WiSec (2024)"},{"key":"21_CR7","unstructured":"Chepkoech, J., Smith, J.: Building a secure open ran testbed: challenges and solutions. In: Proceedings of the Open RAN Security Conference (2025)"},{"key":"21_CR8","unstructured":"Chepkoech, M., et al.: Comparative performance analysis of srsRAN and openairinterface in campus networks. Int. J. Commun. Syst. 35(7) (2022)"},{"key":"21_CR9","unstructured":"Chepkoech, R., et al.: Campus-scale 5G network deployments with open source ran, 2023. ResearchGate Preprint"},{"key":"21_CR10","unstructured":"Dolente, A., et al.: Security assessment of open source 5G core network functions. Sensors 23(15) (2023)"},{"issue":"4","key":"21_CR11","first-page":"2211","volume":"24","author":"A Dolente","year":"2022","unstructured":"Dolente, A., Pujol, E., Sommer, R.: Evaluation of 5G core networks: attacks and defenses in open source cellular stacks. IEEE Commun. Surv. Tutor. 24(4), 2211\u20132234 (2022)","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"21_CR12","unstructured":"English, L., Enck, W.: CodeQL vulnerability queries repository. Static analysis of open 5G cores with CodeQL. Technical report, University of Florida, CISE (2023). https:\/\/repository.lib.ncsu.edu"},{"key":"21_CR13","unstructured":"English, L., Enck, W.: Cellcrypt: examining cryptographic vulnerabilities in open-source 5G cores. In: Proceedings of the ACM Conference on Data and Application Security and Privacy (CODASPY) (2024)"},{"key":"21_CR14","doi-asserted-by":"crossref","unstructured":"English, L., Enck, W.: Examining cryptography and randomness failures in open-source cellular cores. In: Proceedings of the ACM CODASPY (2024)","DOI":"10.1145\/3626232.3653259"},{"key":"21_CR15","unstructured":"English, L., Enck, W.: Static analysis of open 5G cores with CodeQL (2024). Accessed 28 May 2025"},{"key":"21_CR16","unstructured":"Facebook Research: Facebook infer: Static analysis at scale (2017). https:\/\/arxiv.org\/abs\/1702.04490"},{"key":"21_CR17","unstructured":"GitHub CodeQL Documentation (2025). https:\/\/docs.github.com\/en\/code-security\/codeql. Accessed 27 May 2025"},{"issue":"4","key":"21_CR18","first-page":"1234","volume":"28","author":"L Mamushiane","year":"2022","unstructured":"Mamushiane, L., et al.: A 5G testbed using srsRAN on commodity hardware. J. Wirel. Netw. 28(4), 1234\u20131245 (2022)","journal-title":"J. Wirel. Netw."},{"key":"21_CR19","unstructured":"NTIA. Open ran: Cybersecurity considerations (2023)"},{"key":"21_CR20","unstructured":"Pan, X., Qian, Z., Mao, Z.: 5G reasoning and rule learning for protocol analysis. In: Proceedings of USENIX Security (2021)"},{"key":"21_CR21","unstructured":"Queiroz, J., et al.: Mobile GNB on wheels: a robot-enabled O-RAN node. In: Proceedings of WONS (2024)"},{"key":"21_CR22","unstructured":"Thorn, E., et al.: 5GAC-analyzer: detecting over-privileged access in 5G cores using CodeQL. In: Proceedings of ACM WiSec (2024)"},{"key":"21_CR23","unstructured":"Yadav, R., Kim, Y., Enck, W.: Oranalyst: uncovering microservice-specific vulnerabilities in O-RAN. In: Proceedings of ACM WiSec (2024)"}],"container-title":["Lecture Notes in Computer Science","Information Systems Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-13714-2_21","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,13]],"date-time":"2025-12-13T06:43:35Z","timestamp":1765608215000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-13714-2_21"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,14]]},"ISBN":["9783032137135","9783032137142"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-13714-2_21","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,12,14]]},"assertion":[{"value":"14 December 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICISS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information Systems Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Indore","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"India","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 December 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 December 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iciss2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/iciss.isrdc.in\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}