CellDAM: User-Space, Rootless Detection and Mitigation for 5G Data Plane
summary
CellDAM runs user-space and rootless on the device or a nearby security hub, captures over-the-air 5G signaling using a watermark to identify the protected device, and verifies cross-layer, state-dependent signaling to detect forged or tampered data-plane packets. Prototype uses USRP/SRS‑RAN; evaluation finds three previously unreported attack classes, detects known attacks, triggers handovers with 100% success to evade attackers, adds ~0.9× processing overhead and ~73 ms disruption per mitigation, and requires no infrastructure or standard changes.
AI-written summary · about
chapters (14)
- 0:00Intro
- 0:485G Architecture
- 1:24Control and Data Planes
- 2:11Insecure Data-Plane Packet Delivery
- 4:06Insecure Data-Plane Signaling
- 4:56Challenges for Protection: Overhead
- 6:13Design Guideline for Detection
- 6:50Insight: Verifying Data-Plane Signaling
- 10:01Cross-Layer, State-Dependent Checking
- 11:23Capturing Signaling with CellDAM
- 12:08Inferencing the Protected Device
- 13:09Handover-Based Mitigation
- 14:32Evaluation Results
- 15:39Takeaways
related talks
24mEnhancing Physical Perimeter Defense Using SDR
54mExposing device features on 4G & 5G networks
33mHacking 5G From Radio Security To The Apis
44mLTE And IMSI Catchers: Then And Now
44mNew Vulnerabilities in 5G Networks
22mDefensive 5G
40mMonitoring Strategy for the Coming Space 5G Network
26mBack to the Future. Cross-Protocol Attacks in the Era of 5G