Skip navigation

Inter-slice defender: an anomaly detection solution for distributed slice mobility attacks

Network slicing is a key enabler in 5G, which lets mobile devices simultaneously connect or switch between network slices to get access to multiple services with guaranteed quality of service. But the switching between network slices, also known as Inter-Slice-Switching, can be maliciously exploited by attackers to cause a Distributed Slice Mobility (DSM) attack – a distributed denial of service attack that can disrupt both network slices and the 5G control plane.
Research paper
#AnomalyDetection #EricssonResearch

The paper won Best Paper Award at the 2024 IFIP Networking Conference (IFIP Networking)

In this work, we develop Inter-slice defender, a novel Long Short-Term Memory (LSTM)-Autoencoder-based anomaly detection solution, tailored to detect DSM attacks. Inter-slice Defender leverages 3GPP Key Performance Indicators and Performance Measurement counters to detect two variations of the DSM attack. 

Our experimental results are based on DSM attacks simulations performed on a 5G testbed employing the opensource Free5GC testbed and UERANSIM simulator.

Full abstract in IEEEXplore DOI:10.23919/IFIPNetworking62109.2024.10619850

Authors

  • Ricardo Misael Ayala Molina, Concordia University, Canada
  • Nathalie Wehbe, Concordia University, Canada 
  • Hyame Assem Alameddine, Ericsson Research, Canada
  • Makan Pourzandi, Ericsson Research, Canada
  • Chadi Assi, Concordia University, Canada

© IFIP, (2024). This is the author's version of the work. It is posted here by permission of IFIP for your personal use. Not for redistribution. The definitive version was published in 2024 IFIP Networking Conference (IFIP Networking), https://networking.ifip.org/2024/