{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T10:04:30Z","timestamp":1784541870728,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":60,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,5,27]],"date-time":"2024-05-27T00:00:00Z","timestamp":1716768000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100006374","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2055014,CNS-2054911"],"award-info":[{"award-number":["CNS-2055014,CNS-2054911"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,5,27]]},"DOI":"10.1145\/3643833.3656134","type":"proceedings-article","created":{"date-parts":[[2024,5,20]],"date-time":"2024-05-20T19:25:07Z","timestamp":1716233107000},"page":"66-77","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["5GAC-Analyzer: Identifying Over-Privilege Between 5G Core Network Functions"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7907-2327","authenticated-orcid":false,"given":"Seaver","family":"Thorn","sequence":"first","affiliation":[{"name":"North Carolina State University, Raleigh, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3399-4027","authenticated-orcid":false,"given":"K. Virgil","family":"English","sequence":"additional","affiliation":[{"name":"North Carolina State University, Raleigh, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7498-4239","authenticated-orcid":false,"given":"Kevin R. B.","family":"Butler","sequence":"additional","affiliation":[{"name":"University of Florida, Gainesville, FL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3043-8092","authenticated-orcid":false,"given":"William","family":"Enck","sequence":"additional","affiliation":[{"name":"North Carolina State University, Raleigh, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,5,27]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"3GPP. 2020. Study on security aspects of the 5G Service Based Architecture (SBA). Technical Report (TR). 3rd Generation Partnership Project (3GPP). https:\/\/port al.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.aspx'specificat ionId=3481"},{"key":"e_1_3_2_1_2_1","first-page":"503","article-title":"3rd Generation Partnership Project; Technical Specification Group Core Network and Terminals; 5G System; Unified Data Management Services; Stage 3","volume":"29","author":"GPP.","year":"2022","unstructured":"3GPP. 2022. 3rd Generation Partnership Project; Technical Specification Group Core Network and Terminals; 5G System; Unified Data Management Services; Stage 3. Technical Standard (TS) 29.503. 3rd Generation Partnership Project (3GPP). https:\/\/portal.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.asp x'specificationId=3342","journal-title":"Technical Standard (TS)"},{"key":"e_1_3_2_1_3_1","first-page":"501","article-title":"3rd Generation Partnership Project; Technical Specification group Services and System Aspects; Security architecture and procedures for 5G system","volume":"33","author":"GPP.","year":"2022","unstructured":"3GPP. 2022. 3rd Generation Partnership Project; Technical Specification group Services and System Aspects; Security architecture and procedures for 5G system. Technical Standard (TS) 33.501. 3rd Generation Partnership Project (3GPP). https: \/\/portal.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.aspx'spe cificationId=3169","journal-title":"Technical Standard (TS)"},{"key":"e_1_3_2_1_4_1","unstructured":"3GPP. 2022. Release 17. https:\/\/www.3gpp.org\/specifications-technologies\/rel eases\/release-17"},{"key":"e_1_3_2_1_5_1","unstructured":"3GPP. 2023. 3GPP Portal > Home. https:\/\/portal.3gpp.org\/#\/"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSCN.2017.8088621"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOMSTD.2018.1700063"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623113"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3205977.3205984"},{"key":"e_1_3_2_1_10_1","volume-title":"Technical Report. 5G Americas","author":"Americas G","unstructured":"5G Americas. 2021. Private & Enterprise Networks. Technical Report. 5G Americas, Bellevue, WA. 39 pages. https:\/\/www.5gamericas.org\/private-and-enterprisenetworks\/"},{"key":"e_1_3_2_1_11_1","unstructured":"5G Americas. 2021. Security for 5G. Technical Report. 5G Americas Bellevue WA. 39 pages. https:\/\/www.5gamericas.org\/security-for-5g\/"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/2699784.2699789"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243846"},{"key":"e_1_3_2_1_14_1","volume-title":"5G PPP phase1 security landscape. 5G PPP Security Group White Paper","author":"Bisson P","year":"2017","unstructured":"P Bisson and J Waryet. 2017. 5G PPP phase1 security landscape. 5G PPP Security Group White Paper (2017), 66 pages."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3558482.3590194"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485832.3485914"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.39"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660323"},{"key":"e_1_3_2_1_19_1","volume-title":"sunn, and Justin Black","author":"Cheng William","year":"2024","unstructured":"William Cheng, Jim Schubert, Christopher Bornet, Jeremie Bresson, sunn, and Justin Black. 2024. Hello from OpenAPI Generator. https:\/\/openapi-generator. tech\/"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3448300.3469133"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3448300.3467826"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","unstructured":"Cas Cremers and Martin Dehnel-Wild. 2019. Component-based formal analysis of 5G-AKA: Channel assumptions and session confusion. (2019).","DOI":"10.14722\/ndss.2019.23394"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586141"},{"key":"e_1_3_2_1_24_1","unstructured":"Ericsson. 2021. The essential building blocks of E2E network slicing. Technical Report. Ericsson Stockholm Sweden. 11 pages."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978385"},{"key":"e_1_3_2_1_26_1","unstructured":"Firecell. 2023. Orion 5G - firecell.io. https:\/\/firecell.io\/orion-5g\/"},{"key":"e_1_3_2_1_27_1","unstructured":"free5gc 2024. free5GC. https:\/\/www.free5gc.org\/"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102164"},{"key":"e_1_3_2_1_29_1","volume-title":"Confine: Automated System Call Policy Generation for Container Attack Surface Reduction. In 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020","author":"Ghavamnia Seyedhamed","year":"2020","unstructured":"Seyedhamed Ghavamnia, Tapti Palit, Azzedine Benameur, and Michalis Polychronakis. 2020. Confine: Automated System Call Policy Generation for Container Attack Surface Reduction. In 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020). USENIX Association, San Sebastian, 443--458. https:\/\/www.usenix.org\/conference\/raid2020\/presentation\/ghavanmnia"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","unstructured":"Dick Hardt. 2012. The OAuth 2.0 Authorization Framework. Request for Comments RFC 6749. Internet Engineering Task Force. https:\/\/doi.org\/10.17487\/RFC6749 Num Pages: 76.","DOI":"10.17487\/RFC6749"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23313"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354263"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"crossref","DOI":"10.1002\/9781119293071","volume-title":"Design principles for 5G security. A Comprehensive Guide to 5G Security","author":"IjazAhmad Madhusanka Liyanage","year":"2018","unstructured":"Madhusanka Liyanage IjazAhmad, Shahriar Shahabuddin, Mika Ylianttila, and Andrei Gurtov. 2018. Design principles for 5G security. A Comprehensive Guide to 5G Security (2018), 75."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","unstructured":"Michael Jones John Bradley and Nat Sakimura. 2015. JSON Web Token (JWT). https:\/\/doi.org\/10.17487\/RFC7519 Issue: 7519 Num Pages: 30 Series: Request for Comments Published: RFC 7519.","DOI":"10.17487\/RFC7519"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24365"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00038"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/1809100.1809102"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3558482.3581776"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-13257-0_34"},{"key":"e_1_3_2_1_40_1","volume-title":"Automatic Policy Generation for Inter-Service Access Control of Microservices. In 30th USENIX Security Symposium (USENIX Security 21)","author":"Li Xing","year":"2021","unstructured":"Xing Li, Yan Chen, Zhiqiang Lin, XiaoWang, and Jim Hao Chen. 2021. Automatic Policy Generation for Inter-Service Access Control of Microservices. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, 3971-- 3988. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/li-xing"},{"key":"e_1_3_2_1_41_1","volume-title":"Proceedings of the 2001 IEEE Workshop on Information Assurance and Security","volume":"2","author":"Lorenz G","year":"2001","unstructured":"G Lorenz, T Moore, G Manes, J Hale, and S Shenoi. 2001. Securing ss7 telecommunications networks. In Proceedings of the 2001 IEEE Workshop on Information Assurance and Security, Vol. 2.Workshop on Information Assurance and Security, West Point, NY, 273--278."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3395351.3399360"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3507657.3528559"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3428203"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00036"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559381"},{"key":"e_1_3_2_1_47_1","unstructured":"RAKwireless. 2023. RAK All-in-One. 5G -- Build Your Own Private 5G Network. https:\/\/www.rakwireless.com\/en-us\/5g"},{"key":"e_1_3_2_1_48_1","first-page":"117","article-title":"Secrets of the little blue box","volume":"76","author":"Rosenbaum Ron","year":"1971","unstructured":"Ron Rosenbaum. 1971. Secrets of the little blue box. Esquire Magazine 76 (1971), 117--125.","journal-title":"Esquire Magazine"},{"key":"e_1_3_2_1_49_1","volume-title":"White Paper: A Slice in Time: Slicing Security in 5g Core Networks. Technical Report. https:\/\/info.adaptivemobile.com\/5g-networkslicing- security","author":"Security AdaptiveMobile","year":"2021","unstructured":"AdaptiveMobile Security. 2021. White Paper: A Slice in Time: Slicing Security in 5g Core Networks. Technical Report. https:\/\/info.adaptivemobile.com\/5g-networkslicing- security"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/MobServ.2014.15"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-20550-2_13"},{"key":"e_1_3_2_1_52_1","unstructured":"SmartBear Software. 2020. OpenAPI Specification - Version 3.0.3 | Swagger. https:\/\/swagger.io\/specification\/#security-requirement-object"},{"key":"e_1_3_2_1_53_1","volume-title":"Static Detection of Access Control Vulnerabilities inWeb Applications. In 20th USENIX Security Symposium (USENIX Security 11)","author":"Sun Fangqi","year":"2011","unstructured":"Fangqi Sun, Liang Xu, and Zhendong Su. 2011. Static Detection of Access Control Vulnerabilities inWeb Applications. In 20th USENIX Security Symposium (USENIX Security 11). USENIX Association, San Francisco, CA. https:\/\/www.usenix.org\/c onference\/usenix-security-11\/static-detection-access-control-vulnerabilitiesweb-applications"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382238"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653690"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818024"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/2393596.2393608"},{"key":"e_1_3_2_1_58_1","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Yang Ronghai","year":"2018","unstructured":"Ronghai Yang, Wing Cheong Lau, Jiongyi Chen, and Kehuan Zhang. 2018. Vetting Single Sign-On SDK Implementations via Symbolic Reasoning. In 27th USENIX Security Symposium (USENIX Security 18). USENIX Association, Baltimore, MD, 1459--1474. https:\/\/www.usenix.org\/conference\/usenixsecurity18\/presentation\/ yang"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897874"},{"key":"e_1_3_2_1_60_1","volume-title":"Proceedings of the 11th USENIX Security Symposium. USENIX Association, USA, 33--48","author":"Zhang Xiaolan","year":"2002","unstructured":"Xiaolan Zhang, Antony Edwards, and Trent Jaeger. 2002. Using CQUAL for Static Analysis of Authorization Hook Placement. In Proceedings of the 11th USENIX Security Symposium. USENIX Association, USA, 33--48."}],"event":{"name":"WiSec '24: 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks","location":"Seoul Republic of Korea","acronym":"WiSec '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643833.3656134","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3643833.3656134","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T23:59:27Z","timestamp":1755907167000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643833.3656134"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,27]]},"references-count":60,"alternative-id":["10.1145\/3643833.3656134","10.1145\/3643833"],"URL":"https:\/\/doi.org\/10.1145\/3643833.3656134","relation":{},"subject":[],"published":{"date-parts":[[2024,5,27]]},"assertion":[{"value":"2024-05-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}