{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T17:38:38Z","timestamp":1772041118637,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,6,28]],"date-time":"2021-06-28T00:00:00Z","timestamp":1624838400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"DFG","award":["39078197"],"award-info":[{"award-number":["39078197"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,6,28]]},"DOI":"10.1145\/3448300.3469133","type":"proceedings-article","created":{"date-parts":[[2021,6,24]],"date-time":"2021-06-24T14:57:40Z","timestamp":1624546660000},"page":"164-174","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["On the challenges of automata reconstruction in LTE networks"],"prefix":"10.1145","author":[{"given":"Merlin","family":"Chlosta","sequence":"first","affiliation":[{"name":"Ruhr University Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Rupprecht","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thorsten","family":"Holz","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,6,28]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"3rd Generation Partnership Project (3GPP)","author":"Evolved Packet GPP.","unstructured":"3 GPP. 2011. Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS); Stage 3. TS 24.301. 3rd Generation Partnership Project (3GPP) . http:\/\/www.3gpp.org\/ftp\/Specs\/html-info\/24301.htm 3GPP. 2011. Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS); Stage 3. TS 24.301. 3rd Generation Partnership Project (3GPP). http:\/\/www.3gpp.org\/ftp\/Specs\/html-info\/24301.htm"},{"key":"e_1_3_2_1_2_1","volume-title":"Amarisoft Core Network. https:\/\/www.amarisoft.com\/. [Online","year":"2021","unstructured":"Amarisoft. [n.d.]. Amarisoft Core Network. https:\/\/www.amarisoft.com\/. [Online ; accessed June 2, 2021 ]. Amarisoft. [n.d.]. Amarisoft Core Network. https:\/\/www.amarisoft.com\/. [Online; accessed June 2, 2021]."},{"key":"e_1_3_2_1_3_1","volume-title":"Bookworm Game: Automatic Discovery of LTE Vulnerabilities Through Documentation Analysis. In IEEE Symposium on Security and Privacy (SP). IEEE.","author":"Chen Y.","unstructured":"Y. Chen , Y. Yao , X. Wang , D. Xu , C. Yue , X. Liu , K. Chen , H. Tang , and B. Liu . 2021 . Bookworm Game: Automatic Discovery of LTE Vulnerabilities Through Documentation Analysis. In IEEE Symposium on Security and Privacy (SP). IEEE. Y. Chen, Y. Yao, X. Wang, D. Xu, C. Yue, X. Liu, K. Chen, H. Tang, and B. Liu. 2021. Bookworm Game: Automatic Discovery of LTE Vulnerabilities Through Documentation Analysis. In IEEE Symposium on Security and Privacy (SP). IEEE."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3317549.3324927"},{"key":"e_1_3_2_1_5_1","volume-title":"Protocol State Fuzzing of TLS Implementations. In USENIX Security Symposium (SSYM). USENIX Association, 193--206","author":"Ruiter Joeri De","year":"2015","unstructured":"Joeri De Ruiter and Erik Poll . 2015 . Protocol State Fuzzing of TLS Implementations. In USENIX Security Symposium (SSYM). USENIX Association, 193--206 . Joeri De Ruiter and Erik Poll. 2015. Protocol State Fuzzing of TLS Implementations. In USENIX Security Symposium (SSYM). USENIX Association, 193--206."},{"key":"e_1_3_2_1_6_1","volume-title":"Analysis of DTLS Implementations Using Protocol State Fuzzing. In USENIX Security Symposium (SSYM). USENIX Association.","author":"Fiterau-Brostean Paul","year":"2020","unstructured":"Paul Fiterau-Brostean , Bengt Jonsson , Robert Merget , Joeri de Ruiter , Konstantinos Sagonas , and Juraj Somorovsky . 2020 . Analysis of DTLS Implementations Using Protocol State Fuzzing. In USENIX Security Symposium (SSYM). USENIX Association. Paul Fiterau-Brostean, Bengt Jonsson, Robert Merget, Joeri de Ruiter, Konstantinos Sagonas, and Juraj Somorovsky. 2020. Analysis of DTLS Implementations Using Protocol State Fuzzing. In USENIX Security Symposium (SSYM). USENIX Association."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2980159.2980163"},{"key":"e_1_3_2_1_8_1","volume-title":"Network Equipment Security Assurance Scheme (NESAS). https:\/\/www.gsma.com\/security\/network-equipment-security-assurance-scheme\/. [Online","author":"GSM Association Security Group. [n.d.].","year":"2021","unstructured":"GSM Association Security Group. [n.d.]. Network Equipment Security Assurance Scheme (NESAS). https:\/\/www.gsma.com\/security\/network-equipment-security-assurance-scheme\/. [Online ; accessed June 2, 2021 ]. GSM Association Security Group. [n.d.]. Network Equipment Security Assurance Scheme (NESAS). https:\/\/www.gsma.com\/security\/network-equipment-security-assurance-scheme\/. [Online; accessed June 2, 2021]."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","unstructured":"B. Hong S. Park H. Kim D. Kim H. Hong H. Choi J. P. Seifert S. J. Lee and Y. Kim. 2018. Peeking over the Cellular Walled Gardens - A Method for Closed Network Diagnosis. IEEE Transactions on Mobile Computing (2018).  B. Hong S. Park H. Kim D. Kim H. Hong H. Choi J. P. Seifert S. J. Lee and Y. Kim. 2018. Peeking over the Cellular Walled Gardens - A Method for Closed Network Diagnosis. IEEE Transactions on Mobile Computing (2018).","DOI":"10.1109\/TMC.2018.2804913"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354263"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11164-3_26"},{"key":"e_1_3_2_1_12_1","volume-title":"The Open-Source Learn-Lib","author":"Isberner Malte","unstructured":"Malte Isberner , Falk Howar , and Bernhard Steffen . 2015. The Open-Source Learn-Lib . In Computer Aided Verification, Daniel Kroening and Corina S. P\u0103s\u0103reanu (Eds.). Springer International Publishing , Cham , 487--495. Malte Isberner, Falk Howar, and Bernhard Steffen. 2015. The Open-Source Learn-Lib. In Computer Aided Verification, Daniel Kroening and Corina S. P\u0103s\u0103reanu (Eds.). Springer International Publishing, Cham, 487--495."},{"key":"e_1_3_2_1_13_1","volume-title":"Touching the Untouchables: Dynamic Security Analysis of the LTE Control Plane. In IEEE Symposium on Security and Privacy (SP). IEEE.","author":"Kim Hongil","year":"2019","unstructured":"Hongil Kim , Jiho Lee , Eunkyu Lee , and Yongdae Kim . 2019 . Touching the Untouchables: Dynamic Security Analysis of the LTE Control Plane. In IEEE Symposium on Security and Privacy (SP). IEEE. Hongil Kim, Jiho Lee, Eunkyu Lee, and Yongdae Kim. 2019. Touching the Untouchables: Dynamic Security Analysis of the LTE Control Plane. In IEEE Symposium on Security and Privacy (SP). IEEE."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24365"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3395351.3399360"},{"key":"e_1_3_2_1_16_1","volume-title":"https:\/\/neo4j.com\/. [Online","author":"J.","year":"2021","unstructured":"Neo4 J. [n.d.]. Neo4J. https:\/\/neo4j.com\/. [Online ; accessed June 2, 2021 ]. Neo4J. [n.d.]. Neo4J. https:\/\/neo4j.com\/. [Online; accessed June 2, 2021]."},{"key":"e_1_3_2_1_17_1","volume-title":"https:\/\/github.com\/open5gs\/open5gs. [Online","author":"GS.","year":"2021","unstructured":"Open5 GS. [n.d.]. Open5GS. https:\/\/github.com\/open5gs\/open5gs. [Online ; accessed June 2, 2021 ]. Open5GS. [n.d.]. Open5GS. https:\/\/github.com\/open5gs\/open5gs. [Online; accessed June 2, 2021]."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2820728"},{"key":"e_1_3_2_1_19_1","volume-title":"Workshop on Offensive Technologies (WOOT)","author":"Rupprecht David","year":"2016","unstructured":"David Rupprecht , Kai Jansen , and Christina P\u00f6pper . 2016 . Putting LTE Security Functions to the Test: A Framework to Evaluate Implementation Correctness . In Workshop on Offensive Technologies (WOOT) ( Austin, TX, USA). USENIX Association. David Rupprecht, Kai Jansen, and Christina P\u00f6pper. 2016. Putting LTE Security Functions to the Test: A Framework to Evaluate Implementation Correctness. In Workshop on Offensive Technologies (WOOT) (Austin, TX, USA). USENIX Association."},{"key":"e_1_3_2_1_20_1","volume-title":"Call Me Maybe: Eavesdropping Encrypted LTE Calls With ReVoLTE. In USENIX Security Symposium (SSYM). USENIX Association.","author":"Rupprecht David","year":"2020","unstructured":"David Rupprecht , Katharina Kohls , Thorsten Holz , and Christina P\u00f6pper . 2020 . Call Me Maybe: Eavesdropping Encrypted LTE Calls With ReVoLTE. In USENIX Security Symposium (SSYM). USENIX Association. David Rupprecht, Katharina Kohls, Thorsten Holz, and Christina P\u00f6pper. 2020. Call Me Maybe: Eavesdropping Encrypted LTE Calls With ReVoLTE. In USENIX Security Symposium (SSYM). USENIX Association."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978411"},{"key":"e_1_3_2_1_22_1","volume-title":"Introduction to Active Automata Learning from a Practical Perspective","author":"Steffen Bernhard","unstructured":"Bernhard Steffen , Falk Howar , and Maik Merten . 2011. Introduction to Active Automata Learning from a Practical Perspective . Springer Berlin Heidelberg , Berlin, Heidelberg . Bernhard Steffen, Falk Howar, and Maik Merten. 2011. Introduction to Active Automata Learning from a Practical Perspective. Springer Berlin Heidelberg, Berlin, Heidelberg."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99073-6_16"},{"key":"e_1_3_2_1_24_1","volume-title":"srsRAN. https:\/\/github.com\/srsran\/srsRAN. [Online","author":"Systems Software Radio","year":"2021","unstructured":"Software Radio Systems . [n.d.]. srsRAN. https:\/\/github.com\/srsran\/srsRAN. [Online ; accessed June 2, 2021 ]. Software Radio Systems. [n.d.]. srsRAN. https:\/\/github.com\/srsran\/srsRAN. [Online; accessed June 2, 2021]."},{"key":"e_1_3_2_1_25_1","volume-title":"Baseband Attacks: Remote Exploitation of Memory Corruptions in Cellular Protocol Stacks. In Workshop on Offensive Technologies (WOOT)","author":"Weinmann Ralf-Philipp","year":"2012","unstructured":"Ralf-Philipp Weinmann . 2012 . Baseband Attacks: Remote Exploitation of Memory Corruptions in Cellular Protocol Stacks. In Workshop on Offensive Technologies (WOOT) ( Bellevue, WA, USA). USENIX Association. Ralf-Philipp Weinmann. 2012. Baseband Attacks: Remote Exploitation of Memory Corruptions in Cellular Protocol Stacks. In Workshop on Offensive Technologies (WOOT) (Bellevue, WA, USA). USENIX Association."}],"event":{"name":"WiSec '21: 14th ACM Conference on Security and Privacy in Wireless and Mobile Networks","location":"Abu Dhabi United Arab Emirates","acronym":"WiSec '21","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 14th ACM Conference on Security and Privacy in Wireless and Mobile Networks"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3448300.3469133","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3448300.3469133","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:47:42Z","timestamp":1750193262000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3448300.3469133"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,6,28]]},"references-count":25,"alternative-id":["10.1145\/3448300.3469133","10.1145\/3448300"],"URL":"https:\/\/doi.org\/10.1145\/3448300.3469133","relation":{},"subject":[],"published":{"date-parts":[[2021,6,28]]},"assertion":[{"value":"2021-06-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}