{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T20:18:00Z","timestamp":1792786680600,"version":"4.5.0"},"reference-count":168,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Qatar Research Development and Innovation Council","award":["ARG01-0525-230339"],"award-info":[{"award-number":["ARG01-0525-230339"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Open J. Commun. Soc."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/ojcoms.2025.3600528","type":"journal-article","created":{"date-parts":[[2025,8,19]],"date-time":"2025-08-19T18:18:13Z","timestamp":1755627493000},"page":"7037-7074","source":"Crossref","is-referenced-by-count":7,"title":["O-Cloud Security: A Comprehensive Survey of Threats, Mitigation Strategies, and Future Directions"],"prefix":"10.1109","volume":"6","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0093-8472","authenticated-orcid":false,"given":"Muhammad J.","family":"Shehab","sequence":"first","affiliation":[{"name":"Computer Science and Engineering, Qatar University, Doha, Qatar"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Youssef","family":"Aly","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering, Qatar University, Doha, Qatar"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5515-6542","authenticated-orcid":false,"given":"Ahmed","family":"Badawy","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering, Qatar University, Doha, Qatar"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1583-7503","authenticated-orcid":false,"given":"Amr","family":"Mohamed","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering, Qatar University, Doha, Qatar"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2974-3951","authenticated-orcid":false,"given":"Mahmoud","family":"Barhamgi","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering, Qatar University, Doha, Qatar"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6478-4674","authenticated-orcid":false,"given":"Saeed","family":"Salem","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering, Qatar University, Doha, Qatar"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2020.107516"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/OJCOMS.2022.3146618"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.3390\/app12010408"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2023.3239220"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2024.3434419"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3367289"},{"key":"ref7","volume-title":"Security in open RAN white paper","year":"2021"},{"key":"ref8","volume-title":"The O-RAN whitepaper 2023: Security in O-RAN","year":"2023"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2023.3347145"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/MAES.2022.3186966"},{"key":"ref11","volume-title":"On applications of machine learning in irs noma architectures for 5G and beyond","author":"Shehab","year":"2024"},{"key":"ref12","volume-title":"O-RAN use cases and deployment scenarios","year":"2020"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2023.3336191"},{"key":"ref14","volume-title":"Zero trust architecture (ZTA) for secure O-RAN","year":"2024"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.003.2200879"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TGCN.2024.3435796"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MCOMSTD.0001.2200047"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/MCOMSTD.101.2000014"},{"key":"ref19","volume-title":"Quantum security","year":"2023"},{"key":"ref20","volume-title":"Native AI architecture description","year":"2023"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2024.3393430"},{"key":"ref22","volume-title":"The O-RAN whitepaper 2022: RAN intelligent controller, xApps and rApps","year":"2022"},{"key":"ref23","volume-title":"How to test open RAN","year":"2022"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ISORC58943.2023.00022"},{"key":"ref25","article-title":"Study on security for O-cloud","volume-title":"O-RAN work group 11 (security work group)","year":"2024"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/OJCOMS.2024.3431681"},{"key":"ref27","article-title":"O-ran security threat modeling and risk assessment 3.0","volume-title":"O-RAN Working Group 11","year":"2024"},{"key":"ref28","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2023.103621","article-title":"Open RAN security: Challenges and opportunities","volume":"214","author":"Liyanage","year":"2023","journal-title":"J. Netw. Comput. Appl."},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2487361"},{"key":"ref30","volume-title":"OWASP in SDLC: Application security fragmentation","author":"Gasteratos","year":"2023"},{"key":"ref31","volume-title":"O-RAN study on certificate management framework v2.0","author":"Alliance","year":"2024"},{"key":"ref32","volume-title":"O-RAN security requirements and controls specification 9.0","year":"2024"},{"key":"ref33","volume-title":"O-RAN study on security for service management and orchestration (SMO) v4.0","year":"2024"},{"key":"ref34","volume-title":"Australasian conference on information systems virtualization technology: Cross-vm cache side channel attacks make it vulnerable","author":"Cross-VM","year":"2015"},{"key":"ref35","volume-title":"O-RAN study on security for shared O-RU (SharedORU) v5.0","year":"2024"},{"key":"ref36","volume-title":"O-RAN study on security for application lifecycle management v3.0","year":"2024"},{"key":"ref37","volume-title":"O-RAN study on security log management v4.0","year":"2024"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CONFLUENCE.2019.8776920"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/VIZSEC.2016.7739582"},{"key":"ref40","volume-title":"O-RAN security protocols specifications v9.0","year":"2024"},{"key":"ref41","volume-title":"M5: Poor authorization and authentication","year":"2014"},{"key":"ref42","volume-title":"M3: Insecure authentication\/authorization","year":"2023"},{"key":"ref43","volume-title":"M1: Improper credential usage\u2014OWASP mobile top 10 2023 risks","year":"2023"},{"key":"ref44","article-title":"Guidelines for media sanitization","author":"Grance","year":"2014"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2023.3254918"},{"key":"ref46","volume-title":"M9: Insecure data storage","year":"2023"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3273895"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICEECT61758.2024.10738875"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2016.11.027"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CyberC55534.2022.00051"},{"key":"ref51","doi-asserted-by":"crossref","DOI":"10.1016\/j.cosrev.2023.100600","article-title":"Flow based containerized honeypot approach for network traffic analysis: An empirical study","volume":"50","author":"Sethuraman","year":"2023","journal-title":"Comput. Sci. Rev."},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2016.14"},{"key":"ref53","volume-title":"Container security","year":"2024"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-022-00127-8"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.30564\/ssid.v3i1.3152"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICBDML60909.2024.10577412"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2548426"},{"key":"ref58","volume-title":"OWASP API security top 10 2023","year":"2023"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3037022"},{"issue":"1","key":"ref60","first-page":"10","article-title":"Virtual environment security\u2014Considerations & practices","volume":"2","author":"Kandasamy","year":"2011","journal-title":"Netw. Commun. Eng."},{"key":"ref61","volume-title":"A survey on the security of virtual machines","author":"Hyde","year":"2019"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-013-0210-0"},{"key":"ref63","first-page":"45","article-title":"Meltdown: Reading kernel memory from user space","volume-title":"Proc. 27th USENIX Security Symp. (USENIX Security)","author":"Lipp"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00002"},{"key":"ref65","volume-title":"Open radio access network security considerations","year":"2021"},{"key":"ref66","article-title":"Open RAN security report","volume-title":"National Telecommunications and Information Administration","year":"2021"},{"key":"ref67","volume-title":"O-RAN working group 6 (cloudification and orchestration work group) O-RAN acceleration abstraction layer general aspects and principles","year":"2024"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2019.2942591"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2023.3264005"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1155\/2019\/5640134"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/RAICS.2015.7488450"},{"key":"ref72","article-title":"Security and privacy controls for information systems and organizations","volume-title":"Joint Task Force","year":"2020"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-40r4"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3304373"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2556979"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2850312"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/3600160.3600171"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-92"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-61r2"},{"key":"ref80","article-title":"Securing Web applications\u2014Securing Web transactions: TLS server certificate management","year":"2018"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/ICIEECT.2017.7916567"},{"key":"ref82","volume-title":"I am identity access management\u2014Importance in maintaining security systems within organizations","year":"2024"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3279492"},{"key":"ref84","first-page":"117","volume-title":"Cloud Application Security","author":"Fife","year":"2021"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSACW.2012.104"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/JCC59055.2023.00010"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/ICNGCIS.2017.10"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/TISC.2010.5714624"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/iCATccT44854.2018.9001284"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2015.2389960"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/DIPDMWC.2016.7529384"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/ICSCTI.2015.7489631"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3315595"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/WIECON-ECE60392.2023.10456393"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106771"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3623347"},{"key":"ref97","first-page":"29","volume-title":"Patch Management","author":"Hughes","year":"2024"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/ICCONS.2018.8662973"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2014.2363474"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCBDA.2016.7529535"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/NOTERE.2016.7745824"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/ESCI59607.2024.10497224"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS.2014.6865542"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/TCOMM.2019.2921368"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2016.2610978"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2011.5990674"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1016\/S0267-3649(03)00305-4"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/CSCI51800.2020.00015"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/ICIPTM52218.2021.9388333"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-207"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.3390\/su141811213"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.3390\/app11167499"},{"key":"ref113","volume-title":"Study on Zero Trust Architecture for O-RAN","year":"2024"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89255-7_7"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2018.03.017"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653686"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2014.2366148"},{"key":"ref118","volume-title":"Dynamic proofs of retrievability with low server storage","author":"Anthoine","year":"2021"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1515\/jmc-2018-0012"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2018.2865554"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-018-3155-4"},{"key":"ref122","article-title":"O-RAN study on security for artificial intelligence and machine learning (AI\/ML) in O-RAN 2.0","year":"2024"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3390844"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2016.7840831"},{"key":"ref125","first-page":"75","article-title":"Machine learning for threat detection in hybrid cloud systems","volume":"3","author":"Emmanni","year":"2024","journal-title":"Computing"},{"key":"ref126","volume-title":"O-RAN and Vertical Industries White Paper","year":"2023"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3266385"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2023.3341696"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/DSC55868.2022.00014"},{"key":"ref130","volume-title":"Ml02:2023 data poisoning attack","year":"2023"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3140687"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/CICT56698.2022.9997953"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.004.2100867"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/ICSCAN.2019.8878726"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/ICESC57686.2023.10193255"},{"key":"ref136","volume-title":"ML07:2023 transfer learning attack","year":"2023"},{"key":"ref137","volume-title":"ML08:2023 model skewing","year":"2023"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/icABCD54961.2022.9856053"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW56347.2022.00383"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2011.297"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/GCCE50665.2020.9291920"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1016\/j.dcan.2022.08.004"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2015.06.005"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP52600.2021.00024"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2019.2914189"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/CloudNet.2015.7335280"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/CLUSTER51413.2022.00079"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/eSmarTA59349.2023.10293507"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3072849"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD.2018.00121"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1109\/ICRITO56286.2022.9964982"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/Blockchain.2019.00073"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.55524\/ijircst.2024.12.4.10"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1145\/3663529.3663861"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00149"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2024.3422241"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2024.3353265"},{"key":"ref158","article-title":"Research report on digital twin ran use cases","volume-title":"O-RAN Next Generation Research Group (nGRG)","year":"2024"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.001.2200837"},{"key":"ref160","volume-title":"Colosseum: The Open RAN digital twin","author":"Polese","year":"2024"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1145\/3485983.3494870"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1109\/EuCNC\/6GSummit60053.2024.10597007"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/Cloud-Summit61220.2024.00038"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1109\/PEEIC59336.2023.10450301"},{"key":"ref165","article-title":"Research report on quantum security","year":"2023"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2024.3423315"},{"key":"ref167","volume-title":"Performance analysis and industry deployment of post-quantum cryptography algorithms","author":"Demir","year":"2025"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.54026\/CTES\/1058"}],"container-title":["IEEE Open Journal of the Communications Society"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8782661\/10829557\/11130491.pdf?arnumber=11130491","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T05:59:43Z","timestamp":1757483983000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11130491\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":168,"URL":"https:\/\/doi.org\/10.1109\/ojcoms.2025.3600528","relation":{},"ISSN":["2644-125X"],"issn-type":[{"value":"2644-125X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}