The integration of Non-Terrestrial Networks (NTN) into 5G extends global connectivity but introduces significant security vulnerabilities across both the physical and protocol layers. This thesis presents a practical multi-layer security assessment of a 5G NTN environment using a experimental testbed composed of OpenAirInterface, Software Defined Radios, and a PROPSIM channel emulator. The experimental campaign targeted two key domains. At the Physical Layer, smart jamming attacks were deployed against the Synchronization Signal Block (SSB). Results demonstrated that a custom-built Reactive Jammer could deny network access with superior energy efficiency and stealth compared to continuous Toggle Jamming. At the Core Network layer, a fuzzing campaign targeting NAS and NGAP protocols revealed the fragility of open-source implementations. Specifically, malformed packets frequently triggered critical Segmentation Faults in the Core, leading to immediate service denial. These findings confirm the SSB as a single point of failure and highlight serious stability issues in current open-source 5G stacks, emphasizing theurgent need for robust error handling strategies and cross-layer defense mechanisms in future satellite deployments.

The integration of Non-Terrestrial Networks (NTN) into 5G extends global connectivity but introduces significant security vulnerabilities across both the physical and protocol layers. This thesis presents a practical multi-layer security assessment of a 5G NTN environment using a experimental testbed composed of OpenAirInterface, Software Defined Radios, and a PROPSIM channel emulator. The experimental campaign targeted two key domains. At the Physical Layer, smart jamming attacks were deployed against the Synchronization Signal Block (SSB). Results demonstrated that a custom-built Reactive Jammer could deny network access with superior energy efficiency and stealth compared to continuous Toggle Jamming. At the Core Network layer, a fuzzing campaign targeting NAS and NGAP protocols revealed the fragility of open-source implementations. Specifically, malformed packets frequently triggered critical Segmentation Faults in the Core, leading to immediate service denial. These findings confirm the SSB as a single point of failure and highlight serious stability issues in current open-source 5G stacks, emphasizing theurgent need for robust error handling strategies and cross-layer defense mechanisms in future satellite deployments.

EXPERIMENTAL STUDY ON PROTOCOL VULNERABILITIES OF NON TERRESTRIAL NETWORKS

SERVEDIO, FRANCESCA
2024/2025

Abstract

The integration of Non-Terrestrial Networks (NTN) into 5G extends global connectivity but introduces significant security vulnerabilities across both the physical and protocol layers. This thesis presents a practical multi-layer security assessment of a 5G NTN environment using a experimental testbed composed of OpenAirInterface, Software Defined Radios, and a PROPSIM channel emulator. The experimental campaign targeted two key domains. At the Physical Layer, smart jamming attacks were deployed against the Synchronization Signal Block (SSB). Results demonstrated that a custom-built Reactive Jammer could deny network access with superior energy efficiency and stealth compared to continuous Toggle Jamming. At the Core Network layer, a fuzzing campaign targeting NAS and NGAP protocols revealed the fragility of open-source implementations. Specifically, malformed packets frequently triggered critical Segmentation Faults in the Core, leading to immediate service denial. These findings confirm the SSB as a single point of failure and highlight serious stability issues in current open-source 5G stacks, emphasizing theurgent need for robust error handling strategies and cross-layer defense mechanisms in future satellite deployments.
2024
EXPERIMENTAL STUDY ON PROTOCOL VULNERABILITIES OF NON TERRESTRIAL NETWORKS
The integration of Non-Terrestrial Networks (NTN) into 5G extends global connectivity but introduces significant security vulnerabilities across both the physical and protocol layers. This thesis presents a practical multi-layer security assessment of a 5G NTN environment using a experimental testbed composed of OpenAirInterface, Software Defined Radios, and a PROPSIM channel emulator. The experimental campaign targeted two key domains. At the Physical Layer, smart jamming attacks were deployed against the Synchronization Signal Block (SSB). Results demonstrated that a custom-built Reactive Jammer could deny network access with superior energy efficiency and stealth compared to continuous Toggle Jamming. At the Core Network layer, a fuzzing campaign targeting NAS and NGAP protocols revealed the fragility of open-source implementations. Specifically, malformed packets frequently triggered critical Segmentation Faults in the Core, leading to immediate service denial. These findings confirm the SSB as a single point of failure and highlight serious stability issues in current open-source 5G stacks, emphasizing theurgent need for robust error handling strategies and cross-layer defense mechanisms in future satellite deployments.
5G NTN
Satellite Security
Jamming
Fuzzing
SSB
File in questo prodotto:
File Dimensione Formato  
Experimental_study_on_Protocol_Vulnerabilities_of_Non_Terrestrial_Networks.pdf

non disponibili

Descrizione: Documento di Tesi definitivo comprensivo di modulo Liberatoria Consultazione.
Dimensione 9.03 MB
Formato Adobe PDF
9.03 MB Adobe PDF

I documenti in UNITESI sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/20.500.14253/67880