{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T14:43:43Z","timestamp":1783521823535,"version":"3.55.0"},"reference-count":24,"publisher":"MDPI AG","issue":"23","license":[{"start":{"date-parts":[[2023,11,29]],"date-time":"2023-11-29T00:00:00Z","timestamp":1701216000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100014188","name":"Institute of Information &amp; communications Technology Planning &amp; Evaluation (IITP)","doi-asserted-by":"publisher","award":["2020-0-00952"],"award-info":[{"award-number":["2020-0-00952"]}],"id":[{"id":"10.13039\/501100014188","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The advancement of cellular communication technology has profoundly transformed human life. People can now watch high-definition videos anytime, anywhere, and aim for the implementation of advanced autonomous driving capabilities. However, the sustainability of such an environment is threatened by false base stations. False base stations execute attacks in the Radio Access Network (RAN) of cellular systems, adversely affecting the network or its users. To address this challenge, we propose a behavior rule specification-based false base station detection system, SMDFbs. We derive behavior rules from the normal operations of base stations and convert these rules into a state machine. Based on this state machine, we detect network anomalies and mitigate threats. We conducted experiments detecting false base stations in a 5G RAN simulator, comparing our system with seven machine learning-based detection techniques. The experimental results showed that our proposed system achieved a detection accuracy of 98% and demonstrated lower overhead compared to other algorithms.<\/jats:p>","DOI":"10.3390\/s23239504","type":"journal-article","created":{"date-parts":[[2023,11,30]],"date-time":"2023-11-30T00:34:10Z","timestamp":1701304450000},"page":"9504","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["SMDFbs: Specification-Based Misbehavior Detection for False Base Stations"],"prefix":"10.3390","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0441-270X","authenticated-orcid":false,"given":"Hoonyong","family":"Park","sequence":"first","affiliation":[{"name":"AUTOCRYPT Co., Ltd., Seoul 07241, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9611-1036","authenticated-orcid":false,"given":"Philip Virgil Berrer","family":"Astillo","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, University of San Carlos, Cebu 6000, Philippines"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-4905-6912","authenticated-orcid":false,"given":"Yongho","family":"Ko","sequence":"additional","affiliation":[{"name":"Department of Financial Information Security, Kookmin University, Seoul 02707, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-0787-4779","authenticated-orcid":false,"given":"Yeongshin","family":"Park","sequence":"additional","affiliation":[{"name":"Department of Financial Information Security, Kookmin University, Seoul 02707, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6586-2037","authenticated-orcid":false,"given":"Taeguen","family":"Kim","sequence":"additional","affiliation":[{"name":"Department of Information Security Engineering, Soonchunhyang University, Asan 31538, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0604-3445","authenticated-orcid":false,"given":"Ilsun","family":"You","sequence":"additional","affiliation":[{"name":"Department of Financial Information Security, Kookmin University, Seoul 02707, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,11,29]]},"reference":[{"key":"ref_1","unstructured":"SA1 (2023). Service Requirements for the 5G System (Standard No. 3GPP TS 22.261)."},{"key":"ref_2","unstructured":"SA3 (2023). Study on 5G Security Enhancements against False Base Stations (FBS) (Standard No. 3GPP TR 33.809)."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"111368","DOI":"10.1109\/ACCESS.2021.3103673","article-title":"A Network-Based Positioning Method to Locate False Base Stations","volume":"9","author":"Cheng","year":"2021","journal-title":"IEEE Access"},{"key":"ref_4","unstructured":"SA3 (2023). Security Architecture and Procedures for 5G System (Standard No. 3GPP TS 33.501)."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Chlosta, M., Rupprecht, D., P\u00f6pper, C., and Holz, T. 5G SUCI-catchers: Still catching them all? In Proceedings of the 14th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Abu Dhabi, United Arab Emirates, 28 June\u20132 July 2021.","DOI":"10.1145\/3448300.3467826"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"1145","DOI":"10.32604\/csse.2023.032044","article-title":"An Enhanced Group Key-Based Security Protocol to Protect 5G SON Against FBS","volume":"45","author":"Park","year":"2023","journal-title":"Comput. Syst. Sci. Eng."},{"key":"ref_7","unstructured":"Nakarmi, P.K., Ersoy, M.A., and Soykan, K.E.U. (2021). Norrman, Murat: Multi-rat false base station detector. arXiv."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Nakarmi, P.K., Sternby, J., and Ullah, I. (2022, January 23\u201326). Applying Machine Learning on RSRP-based Features for False Base Station Detection. Proceedings of the 17th International Conference on Availability, Reliability and Security, Vienna, Austria.","DOI":"10.1145\/3538969.3543787"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Jin, J., Lian, C., and Xu, M. (2019, January 9\u201310). Rogue Base Station Detection Using A Machine Learning Approach. Proceedings of the 2019 28th Wireless and Optical Communications Conference(WOCC), Beijing, China.","DOI":"10.1109\/WOCC.2019.8770554"},{"key":"ref_10","unstructured":"Park, H., Son, D., Kim, G., and You, I. (2022, January 15\u201317). A study on machine learning-based false base station detection method in 5G. Proceedings of the 6th International Symposium on Mobile Internet Security (MobiSec\u201922), Jeju Island, Republic of Korea."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Ali, A., and Fischer, G. (2019, January 1\u20133). Enabling Fake Base Station Detection through Sample-based Higher Order Noise Statistics. Proceedings of the 2019 42nd International Conference on Telecommunications and Signal Processing (TSP), Budapest, Hungary.","DOI":"10.1109\/TSP.2019.8769046"},{"key":"ref_12","unstructured":"RAN 1 (2022). Study on Channel Model for Frequencies from 0.5 to 100 GHz (Standard No. 3GPP TR 38.901)."},{"key":"ref_13","unstructured":"RAN 3 (2023). NG-RAN; Architecture Description (Standard No. 3GPP TS 38.401)."},{"key":"ref_14","unstructured":"Masini, G. (2021). 5G and Beyond: Fundamentals and Standards, Springer."},{"key":"ref_15","first-page":"59","article-title":"Ng radio access network (ng-ran)","volume":"6","author":"Bertenyi","year":"2018","journal-title":"J. ICT Stand."},{"key":"ref_16","unstructured":"SLS Team (2023). Cell-Site Simulators\/IMSI Catchers, Electronic Frontier Foundation."},{"key":"ref_17","unstructured":"Yomna, N. (2019). Gotta Catch\u2019Em All: Understanding How IMSI-Catchers Exploit Cell Networks, Electronic Frontier Foundation."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Li, Z., Wang, W., Wilson, C., Chen, J., Qian, C., Jung, T., Zhang, L., Liu, K., Li, X., and Liu, Y. (March, January 26). FBS-Radar: Uncovering Fake Base Stations at Scale in the Wild. Proceedings of the 2017 Network and Distributed System Security Symposium, San Diego, CA, USA.","DOI":"10.14722\/ndss.2017.23098"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"158798","DOI":"10.1109\/ACCESS.2019.2934222","article-title":"Rogue Base Stations Detection for Advanced Metering Infrastructure Based on Signal Strength Clustering","volume":"8","author":"Bin","year":"2020","journal-title":"IEEE Access"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Shin, J., Shin, Y., and Park, J.G. (2022, January 19\u201321). Network Detection of Fake Base Station using Automatic Neighbour Relation in Self-Organizing Networks. Proceedings of the 2022 13th International Conference on Information and Communication Technology Convergence (ICTC), Jeju Island, Republic of Korea.","DOI":"10.1109\/ICTC55196.2022.9952901"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"118556","DOI":"10.1109\/ACCESS.2019.2917135","article-title":"BRIoT: Behavior Rule Specification-Based Misbehavior Detection for IoT-Embedded Cyber-Physical Systems","volume":"7","author":"Sharma","year":"2019","journal-title":"IEEE Access"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"3763","DOI":"10.1109\/JBHI.2021.3063173","article-title":"TrMAps: Trust Management in Specification-Based Misbehavior Detection System for IMD-Enabled Artificial Pancreas System","volume":"25","author":"Astillo","year":"2021","journal-title":"IEEE J. Biomed. Health Inform."},{"key":"ref_23","unstructured":"(2021, January 09). UPPAAL: Integrated Tool Environment for Modeling, Validation and Verification. Available online: http:\/\/uppaal.org."},{"key":"ref_24","unstructured":"(2023, October 22). UERANSIM. Available online: https:\/\/github.com\/aligungr\/UERANSIM."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/23\/9504\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T21:33:52Z","timestamp":1760132032000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/23\/9504"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,29]]},"references-count":24,"journal-issue":{"issue":"23","published-online":{"date-parts":[[2023,12]]}},"alternative-id":["s23239504"],"URL":"https:\/\/doi.org\/10.3390\/s23239504","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,11,29]]}}}