{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T12:23:49Z","timestamp":1783513429274,"version":"3.55.0"},"reference-count":28,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T00:00:00Z","timestamp":1781568000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1016\/j.comnet.2026.112480","type":"journal-article","created":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T15:54:13Z","timestamp":1781625253000},"page":"112480","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Security risks in O-RAN: Vulnerabilities and mitigation countermeasures"],"prefix":"10.1016","volume":"286","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6049-8280","authenticated-orcid":false,"given":"Johnny","family":"Choque","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5708-9558","authenticated-orcid":false,"given":"Alberto E.","family":"Garc\u00eda","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5817-3308","authenticated-orcid":false,"given":"Luis","family":"Diez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9620-3990","authenticated-orcid":false,"given":"Ram\u00f3n","family":"Ag\u00fcero","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.comnet.2026.112480_b1","doi-asserted-by":"crossref","unstructured":"G. Camarillo, R.R. Stewart, M. T\u00fcxen, Security Attacks Found Against the Stream Control Transmission Protocol (SCTP) and Current Countermeasures, RFC 5062, 2007, http:\/\/dx.doi.org\/10.17487\/RFC5062.","DOI":"10.17487\/rfc5062"},{"key":"10.1016\/j.comnet.2026.112480_b2","series-title":"Proceedings of the 17th International Conference on Emerging Networking EXperiments and Technologies","isbn-type":"print","doi-asserted-by":"crossref","first-page":"411","DOI":"10.1145\/3485983.3494870","article-title":"FlexRIC: an SDK for next-generation SD-RANs","author":"Schmidt","year":"2021","ISBN":"https:\/\/id.crossref.org\/isbn\/9781450390989"},{"key":"10.1016\/j.comnet.2026.112480_b3","doi-asserted-by":"crossref","first-page":"4559","DOI":"10.1109\/OJCOMS.2024.3431681","article-title":"Attacking O-RAN interfaces: Threat modeling, analysis and practical experimentation","volume":"5","author":"Baguer","year":"2024","journal-title":"IEEE Open J. Commun. Soc."},{"key":"10.1016\/j.comnet.2026.112480_b4","series-title":"2024 IEEE International Conference on Cyber Security and Resilience","first-page":"180","article-title":"Leveraging threat modelling for effective penetration testing in 5G systems","author":"Chianese","year":"2024"},{"key":"10.1016\/j.comnet.2026.112480_b5","series-title":"33rd USENIX Security Symposium","isbn-type":"print","first-page":"3099","article-title":"A formal analysis of SCTP: Attack synthesis and patch verification","author":"Ginesin","year":"2024","ISBN":"https:\/\/id.crossref.org\/isbn\/9781939133441"},{"key":"10.1016\/j.comnet.2026.112480_b6","series-title":"Quantum of Malice: SCTP Insert Attacks in 4G & 5G Networks","author":"S\u00f6derlund","year":"2025"},{"key":"10.1016\/j.comnet.2026.112480_b7","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2023.103621","article-title":"Open RAN security: Challenges and opportunities","volume":"214","author":"Liyanage","year":"2023","journal-title":"J. Netw. Comput. Appl.","ISSN":"https:\/\/id.crossref.org\/issn\/1084-8045","issn-type":"print"},{"key":"10.1016\/j.comnet.2026.112480_b8","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2022.109515","article-title":"Security and privacy vulnerabilities of 5G\/6G and WiFi 6: Survey and research directions from a coexistence perspective","volume":"221","author":"Ramezanpour","year":"2023","journal-title":"Comput. Netw.","ISSN":"https:\/\/id.crossref.org\/issn\/1389-1286","issn-type":"print"},{"key":"10.1016\/j.comnet.2026.112480_b9","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2019.106871","article-title":"Towards secure 5G networks: A survey","volume":"162","author":"Zhang","year":"2019","journal-title":"Comput. Netw.","ISSN":"https:\/\/id.crossref.org\/issn\/1389-1286","issn-type":"print"},{"key":"10.1016\/j.comnet.2026.112480_b10","series-title":"2025 IEEE 10th European Symposium on Security and Privacy","first-page":"755","article-title":"Endless subscriptions: Open RAN is open to RIC E2 subscription denial of service attacks","author":"Klement","year":"2025"},{"key":"10.1016\/j.comnet.2026.112480_b11","series-title":"2024 IEEE 35th International Symposium on Personal, Indoor and Mobile Radio Communications","first-page":"1","article-title":"Simulation of an ARP spoofing attack on the E2 interface in open RAN","author":"Kim","year":"2024"},{"key":"10.1016\/j.comnet.2026.112480_b12","series-title":"Stream Control Transmission Protocol","author":"Stewart","year":"2022"},{"key":"10.1016\/j.comnet.2026.112480_b13","series-title":"Experimental scripts for SCTP attacks in O-RAN testbeds","author":"Choque","year":"2026"},{"key":"10.1016\/j.comnet.2026.112480_b14","doi-asserted-by":"crossref","first-page":"1682","DOI":"10.1109\/OJCOMS.2025.3546760","article-title":"Anomaly detection for mitigating xapp and E2 interface threats in O-RAN near-RT RIC","volume":"6","author":"Hung","year":"2025","journal-title":"IEEE Open J. Commun. Soc."},{"key":"10.1016\/j.comnet.2026.112480_b15","series-title":"Authenticated Chunks for the Stream Control Transmission Protocol (SCTP)","author":"Lei","year":"2007"},{"key":"10.1016\/j.comnet.2026.112480_b16","series-title":"The Transport Layer Security (TLS) Protocol Version 1.3","author":"Rescorla","year":"2018"},{"key":"10.1016\/j.comnet.2026.112480_b17","series-title":"The Datagram Transport Layer Security (DTLS) Protocol Version 1.3","author":"Rescorla","year":"2022"},{"key":"10.1016\/j.comnet.2026.112480_b18","series-title":"Transport Layer Security over Stream Control Transmission Protocol","author":"Jungmaier","year":"2002"},{"key":"10.1016\/j.comnet.2026.112480_b19","series-title":"Datagram Transport Layer Security (DTLS) for Stream Control Transmission Protocol (SCTP)","author":"T\u00fcxen","year":"2011"},{"key":"10.1016\/j.comnet.2026.112480_b20","series-title":"Security Architecture for the Internet Protocol","author":"Seo","year":"2005"},{"issue":"12","key":"10.1016\/j.comnet.2026.112480_b21","doi-asserted-by":"crossref","first-page":"11265","DOI":"10.1109\/TMC.2024.3393430","article-title":"Securing O-RAN open interfaces","volume":"23","author":"Groen","year":"2024","journal-title":"IEEE Trans. Mob. Comput."},{"key":"10.1016\/j.comnet.2026.112480_b22","series-title":"IEEE Standard for Local and metropolitan area networks - Media Access Control (MAC) Security","author":"IEEE Standards Association","year":"2018"},{"key":"10.1016\/j.comnet.2026.112480_b23","series-title":"QUIC: A UDP-Based Multiplexed and Secure Transport","author":"Iyengar","year":"2021"},{"issue":"6","key":"10.1016\/j.comnet.2026.112480_b24","doi-asserted-by":"crossref","first-page":"6953","DOI":"10.1109\/TNSM.2024.3457858","article-title":"Exploring QUIC security and privacy: A comprehensive survey on QUIC security and privacy vulnerabilities, threats, attacks, and future research directions","volume":"21","author":"Joarder","year":"2024","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"issue":"2","key":"10.1016\/j.comnet.2026.112480_b25","doi-asserted-by":"crossref","first-page":"72","DOI":"10.1109\/MIC.2017.44","article-title":"Innovating transport with QUIC: Design approaches and research challenges","volume":"21","author":"Cui","year":"2017","journal-title":"IEEE Internet Comput."},{"key":"10.1016\/j.comnet.2026.112480_b26","series-title":"Savoury implementation of the QUIC transport protocol and HTTP\/3","author":"Cloudflare","year":"2026"},{"issue":"5","key":"10.1016\/j.comnet.2026.112480_b27","doi-asserted-by":"crossref","first-page":"1253","DOI":"10.1002\/j.1538-7305.1960.tb03959.x","article-title":"Capacity of a burst-noise channel","volume":"39","author":"Gilbert","year":"1960","journal-title":"Bell Syst. Tech. J."},{"issue":"5","key":"10.1016\/j.comnet.2026.112480_b28","doi-asserted-by":"crossref","first-page":"1977","DOI":"10.1002\/j.1538-7305.1963.tb00955.x","article-title":"Estimates of error rates for codes on burst-noise channels","volume":"42","author":"Elliott","year":"1963","journal-title":"Bell Syst. Tech. J."}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626004925?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626004925?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T11:59:19Z","timestamp":1783511959000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128626004925"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8]]},"references-count":28,"alternative-id":["S1389128626004925"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112480","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,8]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Security risks in O-RAN: Vulnerabilities and mitigation countermeasures","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112480","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"112480"}}