{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T16:40:11Z","timestamp":1778085611305,"version":"3.51.4"},"reference-count":23,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,11]]},"DOI":"10.1109\/tdsc.2025.3582093","type":"journal-article","created":{"date-parts":[[2025,6,23]],"date-time":"2025-06-23T13:29:48Z","timestamp":1750685388000},"page":"6230-6247","source":"Crossref","is-referenced-by-count":1,"title":["5Ghoul: Unleashing Chaos on 5G Edge Devices via Stateful Multi-Layer Fuzzing"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8169-9874","authenticated-orcid":false,"given":"Matheus E.","family":"Garbelini","sequence":"first","affiliation":[{"name":"Singapore University of Technology and Design, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5227-691X","authenticated-orcid":false,"given":"Zewen","family":"Shang","sequence":"additional","affiliation":[{"name":"Singapore University of Technology and Design, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-3067-3419","authenticated-orcid":false,"given":"Shijie","family":"Luo","sequence":"additional","affiliation":[{"name":"Singapore University of Technology and Design, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4843-5391","authenticated-orcid":false,"given":"Sudipta","family":"Chattopadhyay","sequence":"additional","affiliation":[{"name":"Singapore University of Technology and Design, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1701-8122","authenticated-orcid":false,"given":"Sumei","family":"Sun","sequence":"additional","affiliation":[{"name":"I2R, A*Star, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5347-4769","authenticated-orcid":false,"given":"Ernest","family":"Kurniawan","sequence":"additional","affiliation":[{"name":"I2R, A*Star, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354263"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3470079"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM48099.2022.10001673"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/WiMob52687.2021.9606317"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00038"},{"key":"ref6","first-page":"1325","article-title":"DoLTEst: In-depth downlink negative testing framework for LTE devices","volume-title":"Proc. USENIX Secur. Symp.","author":"Park"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23136"},{"key":"ref8","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2021.24365","article-title":"BaseSpec: Comparative analysis of baseband software and cellular specifications for L3 protocols","volume-title":"28th Annu. Netw. Distrib. Syst. Secur. Symp.","author":"Kim"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3395351.3399360"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3558482.3590194"},{"key":"ref11","first-page":"3255","article-title":"Stateful greybox fuzzing","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Ba"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3014624"},{"key":"ref13","first-page":"3475","article-title":"Instructions unclear: Undefined behaviour in cellular network specifications","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Klischies"},{"key":"ref14","first-page":"1291","article-title":"LTrack: Stealthy tracking of mobile phones in LTE","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Kotuliak"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2017.1601107"},{"key":"ref16","article-title":"Fuzzing radio resource control messages in 5G and LTE systems: To test telecommunication systems with ASN.1 grammar rules based adaptive fuzzer","author":"Potnuru","year":"2021"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359833"},{"key":"ref19","first-page":"1291","article-title":"LTrack: Stealthy tracking of mobile phones in LTE","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Kotuliak"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3448300.3467817"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/DSC54232.2022.9888899"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3485832.3485914"},{"key":"ref23","first-page":"1307","article-title":"Watching the watchers: Practical video identification attack in LTE networks","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Bae"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3558482.3581774"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11242243\/11045988.pdf?arnumber=11045988","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T21:01:11Z","timestamp":1763154071000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11045988\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11]]},"references-count":23,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3582093","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11]]}}}