Tag: signalling storm

security-signalling-storm

Anomaly detection in O-RAN: Signaling Storm

2023-10-04
Signaling Storm is a specific case of DoS or DDoS attack identified by the O-RAN ALLIANCE to be addressed by xApps. When firing this kind of attack, devices authorized (or not) to access the network make repeated attempts to connect to the network, "clogging up" the RACH. In addition, due to the multi-stage nature of the hand-shaking procedure, a whole range of redundant control information is generated in the access and core network. It is, therefore, essential to quickly locate the source of this threat and decide to reject the connection request at an early stage of registration. In this blog, we present a signaling storm detection approach and a proposed algorithm to be implemented as an xApp for O-RAN RIC.
Continue reading