{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T14:25:04Z","timestamp":1780410304487,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":44,"publisher":"ACM","funder":[{"name":"CSA&#x5c;&#x2f;NRF","award":["NRF-NCR25- NSOE05-0001"],"award-info":[{"award-number":["NRF-NCR25- NSOE05-0001"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6,30]]},"DOI":"10.1145\/3765613.3797451","type":"proceedings-article","created":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T13:43:03Z","timestamp":1780407783000},"page":"163-175","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["<i>ORANClaw:<\/i>\n                    Shredding E2 Nodes in O-RAN via Structure-aware MiTM Fuzzing"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-6567-166X","authenticated-orcid":false,"given":"Geovani","family":"Benita","sequence":"first","affiliation":[{"name":"Singapore University of Technology and Design, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8169-9874","authenticated-orcid":false,"given":"Matheus E.","family":"Garbelini","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4843-5391","authenticated-orcid":false,"given":"Sudipta","family":"Chattopadhyay","sequence":"additional","affiliation":[{"name":"University of Missouri-Kansas City, Kansas City, Missouri, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0594-0432","authenticated-orcid":false,"given":"Jianying","family":"Zhou","sequence":"additional","affiliation":[{"name":"Singapore University of Technology and Design, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,29]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"1921","volume-title":"USENIX Security Symposium","author":"Tianchang","year":"2024","unstructured":"Tianchang Yang and others. : Systematic Testing Framework for Open Implementations. In USENIX Security Symposium, pages 1921-1938, 2024."},{"key":"e_1_3_2_1_2_1","first-page":"2027","volume-title":"CCS","author":"Nathaniel","year":"2024","unstructured":"Nathaniel Bennett and others. Ransacked: A domain-informed approach for fuzzing LTE and 5G RAN-core interfaces. In CCS, pages 2027-2041, 2024."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","first-page":"1197","DOI":"10.1109\/OJCOMS.2024.3364840","article-title":"Hung and others. Security threats to xApps access control and E2 interface","volume":"5","author":"Cheng-Feng","year":"2024","unstructured":"Cheng-Feng Hung and others. Security threats to xApps access control and E2 interface in O-RAN. IEEE Open Journal of the Communications Society, 5:1197-1203, 2024.","journal-title":"O-RAN. IEEE Open Journal of the Communications Society"},{"key":"e_1_3_2_1_4_1","first-page":"277","volume-title":"WiSec","author":"Kashyap","year":"2024","unstructured":"Kashyap Thimmaraju and others. Security testing the o-ran near-real time RIC & A1 interface. In WiSec, pages 277-287, 2024."},{"key":"e_1_3_2_1_5_1","first-page":"460","volume-title":"ICST","author":"Pham Van-Thuan","year":"2020","unstructured":"Van-Thuan Pham, Marcel B\u00f6hme, and Abhik Roychoudhury. AFLNET: A Greybox Fuzzer for Network Protocols. In ICST, pages 460-465, 2020."},{"key":"e_1_3_2_1_6_1","volume-title":"American Fuzzy Lop (AFL): Security?oriented Grey?box Fuzzer. https:\/\/github.com\/google\/AFL","year":"2020","unstructured":"Micha? Zalewski. American Fuzzy Lop (AFL): Security?oriented Grey?box Fuzzer. https:\/\/github.com\/google\/AFL, 2020."},{"key":"e_1_3_2_1_7_1","volume-title":"libFuzzer: In-process, coverage-guided, evolutionary fuzzing engine for LLVM. https:\/\/llvm.org\/docs\/LibFuzzer.html","author":"Project LLVM","year":"2021","unstructured":"LLVM Project. libFuzzer: In-process, coverage-guided, evolutionary fuzzing engine for LLVM. https:\/\/llvm.org\/docs\/LibFuzzer.html, 2021."},{"key":"e_1_3_2_1_8_1","volume-title":"Peach Fuzzer Community Edition. https:\/\/peachtech.gitlab.io\/peach-fuzzer-community\/","author":"Community Peach Tech","year":"2021","unstructured":"Peach Tech Community. Peach Fuzzer Community Edition. https:\/\/peachtech.gitlab.io\/peach-fuzzer-community\/, 2021."},{"key":"e_1_3_2_1_9_1","volume-title":"BooFuzz: Network Protocol Fuzzing for Humans. https:\/\/github.com\/jtpereyda\/boofuzz","author":"Pereyda Josh","year":"2023","unstructured":"Josh Pereyda and the BooFuzz community. BooFuzz: Network Protocol Fuzzing for Humans. https:\/\/github.com\/jtpereyda\/boofuzz, 2023."},{"key":"e_1_3_2_1_10_1","volume-title":"A Coverage?Guided Black?Box Fuzzer Based on Frida. https:\/\/github.com\/demantz\/frizzer","author":"Mantz Dennis","year":"2025","unstructured":"Dennis Mantz and the Frizzer community. Frizzer: A Coverage?Guided Black?Box Fuzzer Based on Frida. https:\/\/github.com\/demantz\/frizzer, 2025."},{"key":"e_1_3_2_1_11_1","volume-title":"IEEE TDSC","author":"Matheus","year":"2025","unstructured":"Matheus E. Garbelini and others. 5GHOUL: Unleashing Chaos on 5G Edge Devices via Stateful Multi-layer Fuzzing. IEEE TDSC, 2025."},{"key":"e_1_3_2_1_12_1","volume-title":"Telecom Security Conference","author":"Berserker Researchers","year":"2021","unstructured":"Researchers at KTH. Berserker: ASN.1-Aware Telecom Protocol Fuzzing. In Telecom Security Conference, 2021."},{"key":"e_1_3_2_1_13_1","volume-title":"libprotobuf-mutator. https:\/\/github.com\/google\/libprotobuf-mutator","year":"2023","unstructured":"Google. libprotobuf-mutator. https:\/\/github.com\/google\/libprotobuf-mutator, 2023."},{"issue":"3","key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1109\/MCOMSTD.0001.2200041","article-title":"Municio and others. O-RAN: Analysis of latency-critical interfaces and overview of time sensitive networking solutions","volume":"7","author":"Esteban","year":"2023","unstructured":"Esteban Municio and others. O-RAN: Analysis of latency-critical interfaces and overview of time sensitive networking solutions. IEEE Communications Standards Magazine, 7(3):82-89, 2023.","journal-title":"IEEE Communications Standards Magazine"},{"key":"e_1_3_2_1_15_1","unstructured":"Felix Klement and others. Endless Subscriptions: Open RAN is Open to RIC E2 Subscription Denial of Service Attacks."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","first-page":"1682","DOI":"10.1109\/OJCOMS.2025.3546760","article-title":"Anomaly Detection for Mitigating xApp and E2 Interface Threats","volume":"6","author":"Hung Cheng-Feng","year":"2025","unstructured":"Cheng-Feng Hung, Chi-Heng Tseng, and Shin-Ming Cheng. Anomaly Detection for Mitigating xApp and E2 Interface Threats in O-RAN Near-RT RIC. IEEE Open Journal of the Communications Society, 6:1682-1694, 2025.","journal-title":"O-RAN Near-RT RIC. IEEE Open Journal of the Communications Society"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/IOTM.001.2100144"},{"issue":"7","key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","first-page":"9334","DOI":"10.1109\/TVT.2024.3359998","article-title":"Federated deep reinforcement learning for efficient jamming attack mitigation","volume":"73","author":"El Houda Zakaria Abou","year":"2024","unstructured":"Zakaria Abou El Houda, Hajar Moudoud, and Bouziane Brik. Federated deep reinforcement learning for efficient jamming attack mitigation in O-RAN. IEEE Transactions on Vehicular Technology, 73(7):9334-9343, 2024.","journal-title":"O-RAN. IEEE Transactions on Vehicular Technology"},{"key":"e_1_3_2_1_19_1","first-page":"1","volume-title":"IEEE INFOCOM","author":"Tolga","year":"2023","unstructured":"Tolga O. Atalay and others. Securing 5G OpenRAN with a scalable authorization framework for xApps. In IEEE INFOCOM, pages 1-10, 2023."},{"key":"e_1_3_2_1_20_1","first-page":"129","volume-title":"MILCOM","author":"Dimitri","year":"2024","unstructured":"Dimitri Dessources and others. In MILCOM, pages 129-134, 2024."},{"key":"e_1_3_2_1_21_1","article-title":"Ergu and others. Efficient adversarial attacks against DRL-based resource allocation in intelligent O-RAN for V2X","author":"Abera Yared","year":"2024","unstructured":"Yared Abera Ergu and others. Efficient adversarial attacks against DRL-based resource allocation in intelligent O-RAN for V2X. IEEE Transactions on Vehicular Technology, 2024.","journal-title":"IEEE Transactions on Vehicular Technology"},{"key":"e_1_3_2_1_22_1","first-page":"3255","volume-title":"USENIX Security Symposium","author":"Ba Jinsheng","year":"2022","unstructured":"Jinsheng Ba, Marcel B\u00f6hme, Zahra Mirzamomen, and Abhik Roychoudhury. Stateful greybox fuzzing. In USENIX Security Symposium, pages 3255-3272, 2022."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485983.3494870"},{"issue":"5","key":"e_1_3_2_1_24_1","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1145\/2677046.2677053","article-title":"Nikaein and others. OpenAirInterface: A flexible platform for 5G research","volume":"44","author":"Navid","year":"2014","unstructured":"Navid Nikaein and others. OpenAirInterface: A flexible platform for 5G research. ACM SIGCOMM Computer Communication Review, 44(5):33-38, 2014.","journal-title":"ACM SIGCOMM Computer Communication Review"},{"key":"e_1_3_2_1_25_1","first-page":"283","volume-title":"Proceedings of the 18th ACM International Conference on Modeling, Analysis and Simulation of Wireless and Mobile Systems","author":"Marco","year":"2015","unstructured":"Marco Mezzavilla and others. 5G mmWave module for the ns-3 network simulator. In Proceedings of the 18th ACM International Conference on Modeling, Analysis and Simulation of Wireless and Mobile Systems, pages 283-290, 2015."},{"key":"e_1_3_2_1_26_1","volume-title":"SDRAN-in-a-Box for SD-RAN project. https:\/\/github.com\/onosproject\/sdran-in-a-box","author":"Project Onos","year":"2025","unstructured":"Onos Project. SDRAN-in-a-Box for SD-RAN project. https:\/\/github.com\/onosproject\/sdran-in-a-box, 2025."},{"issue":"10","key":"e_1_3_2_1_27_1","first-page":"5787","article-title":"Polese and others. ColO-RAN: Developing machine learning-based xApps for open RAN closed-loop control on programmable experimental platforms","volume":"22","author":"Michele","year":"2022","unstructured":"Michele Polese and others. ColO-RAN: Developing machine learning-based xApps for open RAN closed-loop control on programmable experimental platforms. IEEE Transactions on Mobile Computing, 22(10):5787-5800, 2022.","journal-title":"IEEE Transactions on Mobile Computing"},{"key":"e_1_3_2_1_28_1","volume-title":"O-RAN Software Community. https:\/\/o-ran-sc.org\/","author":"RAN.","year":"2025","unstructured":"O-RAN. O-RAN Software Community. https:\/\/o-ran-sc.org\/, 2025."},{"key":"e_1_3_2_1_29_1","first-page":"1","volume-title":"IEEE Globecom Workshops","author":"Hoejoo","year":"2020","unstructured":"Hoejoo Lee and others. Hosting AI\/ML workflows on O-RAN RIC platform. In IEEE Globecom Workshops, pages 1-6, 2020."},{"key":"e_1_3_2_1_30_1","volume-title":"https:\/\/orandownloadsweb.azurewebsites.net\/specifications","author":"Specifications O-RAN. O-RAN","year":"2025","unstructured":"O-RAN. O-RAN Specifications. https:\/\/orandownloadsweb.azurewebsites.net\/specifications, 2025."},{"key":"e_1_3_2_1_31_1","volume-title":"https:\/\/www.wireshark.org","author":"Foundation Wireshark","year":"2024","unstructured":"Wireshark Foundation. Wireshark. https:\/\/www.wireshark.org, 2024."},{"key":"e_1_3_2_1_32_1","unstructured":"Objective Systems Inc. ASN1C ASN.1 Compiler. https:\/\/www.obj-sys.com\/products\/asn1c\/ 2024."},{"key":"e_1_3_2_1_33_1","volume-title":"ICST","author":"Shang Zewen","year":"2024","unstructured":"Zewen Shang, Matheus E. Garbelini, and Sudipta Chattopadhyay. U-Fuzz: Stateful Fuzzing of IoT Protocols on COTS Devices. In ICST, 2024."},{"key":"e_1_3_2_1_34_1","volume-title":"O-RAN Fronthaul Working Group 4: Control, User and Synchronization Plane Specification. https:\/\/www.o-ran.org\/specifications","author":"Alliance O-RAN","year":"2023","unstructured":"O-RAN Alliance. O-RAN Fronthaul Working Group 4: Control, User and Synchronization Plane Specification. https:\/\/www.o-ran.org\/specifications, 2023."},{"key":"e_1_3_2_1_35_1","volume-title":"ns-O-RAN-flexric: O-RAN and FlexRIC Integration for ns-3. https:\/\/github.com\/Orange-OpenSource\/ns-O-RAN-flexric","author":"Source Orange Open","year":"2023","unstructured":"Orange Open Source. ns-O-RAN-flexric: O-RAN and FlexRIC Integration for ns-3. https:\/\/github.com\/Orange-OpenSource\/ns-O-RAN-flexric, 2023."},{"key":"e_1_3_2_1_36_1","volume-title":"pysctp: Python bindings for the SCTP transport protocol. https:\/\/pypi.org\/project\/pysctp\/","author":"Pfutzenreuter Elvis","year":"2022","unstructured":"Elvis Pfutzenreuter. pysctp: Python bindings for the SCTP transport protocol. https:\/\/pypi.org\/project\/pysctp\/, 2022."},{"key":"e_1_3_2_1_37_1","first-page":"1025","volume-title":"USENIX Security Symposium","author":"Matheus","year":"2022","unstructured":"Matheus E. Garbelini and others. BrakTooth: Causing Havoc on Bluetooth Link Manager via Directed Fuzzing. In USENIX Security Symposium, pages 1025-1042, 2022."},{"key":"e_1_3_2_1_38_1","volume-title":"OpenAirInterface 5G Software Alliance. https:\/\/openairinterface.org\/","author":"Software Alliance AirInterface","year":"2024","unstructured":"OpenAirInterface Software Alliance. OpenAirInterface 5G Software Alliance. https:\/\/openairinterface.org\/, 2024."},{"key":"e_1_3_2_1_39_1","volume-title":"Open5GS: Open Source Implementation of 5G Core and EPC. https:\/\/open5gs.org\/","author":"Project GS","year":"2024","unstructured":"Open5GS Project. Open5GS: Open Source Implementation of 5G Core and EPC. https:\/\/open5gs.org\/, 2024."},{"key":"e_1_3_2_1_40_1","volume-title":"O-RAN Alliance WG11","author":"Alliance O-RAN","year":"2023","unstructured":"O-RAN Alliance. O-RAN Security Threat Modeling and Remediation Analysis. O-RAN Alliance WG11, 2023."},{"key":"e_1_3_2_1_41_1","volume-title":"O-RAN Alliance WG11","author":"Alliance O-RAN","year":"2023","unstructured":"O-RAN Alliance. Security for Near-RT RIC and xApps. O-RAN Alliance WG11, 2023."},{"key":"e_1_3_2_1_42_1","volume-title":"srsRAN Project: Open-Source 5G CU\/DU. GitHub repository","author":"Systems Software Radio","year":"2025","unstructured":"Software Radio Systems. srsRAN Project: Open-Source 5G CU\/DU. GitHub repository, 2025."},{"key":"e_1_3_2_1_43_1","volume-title":"O-RAN NearRT-RIC and xApp tutorial. srsRAN Project documentation","author":"Systems Software Radio","year":"2025","unstructured":"Software Radio Systems. O-RAN NearRT-RIC and xApp tutorial. srsRAN Project documentation, 2025."},{"key":"e_1_3_2_1_44_1","volume-title":"TeraVM RIC Test: RAN Simulator Generator. https:\/\/www.viavisolutions.com\/en-us\/products\/teravm-ai-rsg","author":"VIAVI Solutions Inc.","year":"2024","unstructured":"VIAVI Solutions Inc. TeraVM RIC Test: RAN Simulator Generator. https:\/\/www.viavisolutions.com\/en-us\/products\/teravm-ai-rsg, 2024."}],"event":{"name":"WiSec '26: 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks","location":"Saarbr\u00fccken Germany","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks"],"original-title":[],"deposited":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T13:46:58Z","timestamp":1780408018000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3765613.3797451"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,29]]},"references-count":44,"alternative-id":["10.1145\/3765613.3797451","10.1145\/3765613"],"URL":"https:\/\/doi.org\/10.1145\/3765613.3797451","relation":{},"subject":[],"published":{"date-parts":[[2026,6,29]]},"assertion":[{"value":"2026-06-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}