Assessing the Latency of Network Layer Security in 5G Networks

• URL: http://arxiv.org/abs/2505.07328v1
• Date: Mon, 12 May 2025 08:14:32 GMT
• Title: Assessing the Latency of Network Layer Security in 5G Networks
• Abstract summary: 5G's enhanced security, mostly realized through optional security controls, imposes additional overhead on the network performance.<n>We measure the latency overhead of IPsec when applied over the N3 and the service-based interfaces to protect user and control plane data.<n>Our findings show that IPsec, if configured correctly, has minimal latency impact and thus is a prime candidate to secure real-time critical scenarios.
• Score: 2.7082111912355877
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: In contrast to its predecessors, 5G supports a wide range of commercial, industrial, and critical infrastructure scenarios. One key feature of 5G, ultra-reliable low latency communication, is particularly appealing to such scenarios for its real-time capabilities. However, 5G's enhanced security, mostly realized through optional security controls, imposes additional overhead on the network performance, potentially hindering its real-time capabilities. To better assess this impact and guide operators in choosing between different options, we measure the latency overhead of IPsec when applied over the N3 and the service-based interfaces to protect user and control plane data, respectively. Furthermore, we evaluate whether WireGuard constitutes an alternative to reduce this overhead. Our findings show that IPsec, if configured correctly, has minimal latency impact and thus is a prime candidate to secure real-time critical scenarios.

Related papers

• 5GDescrambler: Locating, Descrambling, and Decoding 5G Scheduling Information (long version) [4.294205370255953]
  We present a novel technique to reverse DCI scrambling, fully integrated into an open-source end-to-end binary DCI sniffing pipeline.<n>We demonstrate the robustness and performance of our approach with measurement campaigns against deployments of srsRAN, OpenAirInterface5G, and two commercial vendors.
  arXiv  Detail & Related papers  (2026-09-07T11:39:52Z)
• Evaluation of Security-Induced Latency on 5G RAN Interfaces and User Plane Communication [2.321580694317368]
  5G promises enhanced performance-not only in bandwidth and capacity, but also latency and security.<n>Its ultra-reliable low-latency configuration targets round-trip times below 1 ms.<n>Security controls extend protection across all interfaces, making 5G attractive for mission-critical applications.
  arXiv  Detail & Related papers  (2026-02-12T15:20:10Z)
• Multi-Agent-Driven Cognitive Secure Communications in Satellite-Terrestrial Networks [58.70163955407538]
  Malicious eavesdroppers pose a serious threat to private information via satellite-terrestrial networks (STNs)<n>We propose a cognitive secure communication framework driven by multiple agents that coordinates spectrum scheduling and protection through real-time sensing.<n>We exploit generative adversarial networks to produce adversarial matrices, and employ learning-aided power control to set real and adversarial signal powers for protection layer.
  arXiv  Detail & Related papers  (2026-01-06T10:30:41Z)
• Meta-Learning-Based Handover Management in NextG O-RAN [47.23997854845925]
  We propose CONTRA, a framework that jointly optimize THOs and CHOs within the O-RAN architecture.<n>ConTRA is specifically designed for near-real-time deployment as an O-RAN xApp runtime.<n>We show that CONTRA improves user throughput and reduces both THO and CHO switching costs.
  arXiv  Detail & Related papers  (2025-12-26T13:01:46Z)
• Lightweight Security for Private Networks: Real-World Evaluation of WireGuard [0.0]
  This paper explores WireGuard as a lightweight alternative to IPsec for securing the user plane as well as the control plane in an industrial Open RAN deployment.<n>We implement a complete proof-of-concept in a factory environment and compare WireGuard with IPsec under industrial traffic conditions.<n>Performance measurements show that WireGuard adds minimal overhead in throughput, latency, and Central Processing Unit ( CPU) usage, achieving performance comparable to IPsec.
  arXiv  Detail & Related papers  (2025-12-10T22:30:00Z)
• Personalized 3D Spatiotemporal Trajectory Privacy Protection with Differential and Distortion Geo-Perturbation [64.60694805725727]
  This paper proposes a personalized 3Dtemporal trajectory privacy protection mechanism named 3DSTPM.<n>We analyze the characteristics of attackers that exploit correlations between locations in a trajectory and present the attack model.<n>Results demonstrate that the proposed 3DSTPM effectively reduces loss while meeting the user's personalized privacy protection needs.
  arXiv  Detail & Related papers  (2025-11-27T07:41:14Z)
• Bit-Flipping Attack Exploration and Countermeasure in 5G Network [3.0524801814543]
  We investigate the vulnerability of 5G systems to bit-flipping attacks, which is an integrity attack where an adversary intercepts 5G network traffic and modifies specific fields of an encrypted message without decryption, thus mutating the message while remaining valid to the receiver.<n>We propose a keystream-based shuffling defense mechanism to mitigate the effect of such attacks by raising the difficulty of manipulating specific encrypted fields, while introducing no additional communication overhead compared to the NAS Integrity Algorithm (NIA) in 5G.
  arXiv  Detail & Related papers  (2025-11-06T23:51:28Z)
• Privacy-preserving authentication for military 5G networks [0.0]
  5G networks gain traction in defense applications, ensuring the privacy and integrity of the Authentication and Key Agreement protocol is critical.<n>This paper provides a unified analysis of the standardized 5G AKA flow, identifying several vulnerabilities and highlighting how each exploits protocol behavior to compromise user privacy.<n>We present five lightweight mitigation strategies.<n>Among the solutions studied, those introducing a UE-generated nonce emerge as the most promising, effectively neutralizing the identified tracking and correlation attacks with negligible additional overhead.
  arXiv  Detail & Related papers  (2025-09-01T13:38:11Z)
• Active Attack Resilience in 5G: A New Take on Authentication and Key Agreement [13.49434164633215]
  5G-AKA protocol is central to authentication in current 5G deployments.<n>5G-AKA has known limitations in both security and performance.<n>This paper proposes an enhanced authentication protocol that builds on 5G-AKA's design while addressing its shortcomings.
  arXiv  Detail & Related papers  (2025-07-23T13:18:44Z)
• PWC-MoE: Privacy-Aware Wireless Collaborative Mixture of Experts [59.5243730853157]
  Large language models (LLMs) hosted on cloud servers alleviate the computational and storage burdens on local devices but raise privacy concerns.<n>Small language models (SLMs) running locally enhance privacy but suffer from limited performance on complex tasks.<n>We propose a privacy-aware wireless collaborative mixture of experts (PWC-MoE) framework to balance computational cost, performance, and privacy protection under bandwidth constraints.
  arXiv  Detail & Related papers  (2025-05-13T16:27:07Z)
• Intelligent Detection of Non-Essential IoT Traffic on the Home Gateway [45.70482328441101]
  This work presents ML-IoTrim, a system for detecting and mitigating non-essential IoT traffic by analyzing network behavior at the edge.<n>We test our framework in a consumer smart home setup with IoT devices from five categories, demonstrating that the model can accurately identify and block non-essential traffic.<n>This research advances privacy-aware traffic control in smart homes, paving the way for future developments in IoT device privacy.
  arXiv  Detail & Related papers  (2025-04-22T09:40:05Z)
• MDHP-Net: Detecting an Emerging Time-exciting Threat in IVN [42.74889568823579]
  We identify a new time-exciting threat model against in-vehicle network (IVN)<n>These attacks inject malicious messages that exhibit a time-exciting effect, gradually manipulating network traffic to disrupt vehicle operations and compromise safety-critical functions.<n>To detect time-exciting threat, we introduce MDHP-Net, leveraging Multi-Dimentional Hawkes Process (MDHP) and temporal and message-wise feature extracting structures.
  arXiv  Detail & Related papers  (2025-04-16T08:41:24Z)
• TIMESAFE: Timing Interruption Monitoring and Security Assessment for Fronthaul Environments [25.43682473591802]
  We show how a spoofing attack is able to cause a production-ready O-RAN and 5G-compliant private cellular base station to catastrophically fail within 2 seconds of the attack.<n>To counter this, we design a Machine Learning-based monitoring solution capable of detecting various malicious attacks with over 97.5% accuracy.
  arXiv  Detail & Related papers  (2024-12-17T16:13:37Z)
• SoK: Evaluating 5G Protocols Against Legacy and Emerging Privacy and Security Attacks [2.5554069583567487]
  We study existing privacy and security attacks in pre-5G networks, analyzing the weaknesses that lead to these attacks. We study the security characteristics of 5G up to the new Release 19, and examine mitigation mechanisms of 5G to the identified pre-5G attacks.
  arXiv  Detail & Related papers  (2024-09-10T09:30:37Z)
• Advanced Penetration Testing for Enhancing 5G Security [0.0]
  This paper reviews penetration testing approaches for identifying security vulnerabilities in 5G networks. It examines ways adversaries exploit vulnerabilities in 5G networks, covering tactics and strategies targeted at 5G features. Our research indicates that 5G penetration testing should use a multithreaded approach for addressing current security challenges.
  arXiv  Detail & Related papers  (2024-07-24T13:35:35Z)
• Autonomous Adaptive Security Framework for 5G-Enabled IoT [0.8738214980779235]
  5G can provide more rapid connection speeds, lower latency, faster downloads, and capability to connect more devices. 5G-enabled IoT networks increase systems vulnerabilities to security threats due to these dynamics. This task specifies new adaptive strategies of security intelligence with associated scenarios to meet the challenges of 5G-IoT characteristics.
  arXiv  Detail & Related papers  (2024-06-04T13:17:04Z)
• Establishing Trust in the Beyond-5G Core Network using Trusted Execution Environments [4.235733335401408]
  We review the security implications introduced in B5G networks, and the security mechanisms that are supported by the 5G standard. We propose a vertical extension of Zero Trust, namely, Zero Trust Execution, to model untrusted execution environments. We provide an analysis on how to establish trust in Beyond-5G network architectures using Trusted Execution Environments.
  arXiv  Detail & Related papers  (2024-05-20T17:02:18Z)
• Penetration Testing of 5G Core Network Web Technologies [53.89039878885825]
  We present the first security assessment of the 5G core from a web security perspective. We use the STRIDE threat modeling approach to define a complete list of possible threat vectors and associated attacks. Our analysis shows that all these cores are vulnerable to at least two of our identified attack vectors.
  arXiv  Detail & Related papers  (2024-03-04T09:27:11Z)
• A Survey and Comparative Analysis of Security Properties of CAN Authentication Protocols [92.81385447582882]
  The Controller Area Network (CAN) bus leaves in-vehicle communications inherently non-secure. This paper reviews and compares the 15 most prominent authentication protocols for the CAN bus. We evaluate protocols based on essential operational criteria that contribute to ease of implementation.
  arXiv  Detail & Related papers  (2024-01-19T14:52:04Z)
• Artificial Intelligence Empowered Multiple Access for Ultra Reliable and Low Latency THz Wireless Networks [76.89730672544216]
  Terahertz (THz) wireless networks are expected to catalyze the beyond fifth generation (B5G) era. To satisfy the ultra-reliability and low-latency demands of several B5G applications, novel mobility management approaches are required. This article presents a holistic MAC layer approach that enables intelligent user association and resource allocation, as well as flexible and adaptive mobility management.
  arXiv  Detail & Related papers  (2022-08-17T03:00:24Z)
• A Comprehensive Overview on 5G-and-Beyond Networks with UAVs: From Communications to Sensing and Intelligence [152.89360859658296]
  5G networks need to support three typical usage scenarios, namely, enhanced mobile broadband (eMBB), ultra-reliable low-latency communications (URLLC) and massive machine-type communications (mMTC) On the one hand, UAVs can be leveraged as cost-effective aerial platforms to provide ground users with enhanced communication services by exploiting their high cruising altitude and controllable maneuverability in 3D space. On the other hand, providing such communication services simultaneously for both UAV and ground users poses new challenges due to the need for ubiquitous 3D signal coverage as well as the strong air-ground network interference.
  arXiv  Detail & Related papers  (2020-10-19T08:56:04Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.