Newest papers

MASAR: Multi-stage Attack Surface Analysis and Reasoning Framework for Telecom Networks

Heba Osama, Wessam DeifAllah, Ahmed Saafan, Haitham A. Ghalwash · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.29343 · cited by 0 works (OpenAlex) · open-access PDF

Chinese

现代电信网络日益复杂的行为引入了需要系统威胁分析的安全挑战,然而,建筑威胁建模框架之间仍然存在差距,如Spoofing、Tampering、Repudiation、信息披露、服务拒绝和特权提升(STRIDE)和操作知识库,如MITRE五G威胁层级别(FiGHT)。这种差距限制了将建筑弱点与特定的协议行为和攻击序列联系起来的能力。本文介绍了多阶段攻击表面分析和推理(MASAR),一种正式的知识框架,通过三个层架构:战略威胁地图(FiGHT)。

Machine translation (Meta M2M100); the English original follows.

Abstract

The increasing complexity of modern telecommunications networks introduces security challenges that require systematic threat analysis. However, a gap remains between architectural threat modeling frameworks, such as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege (STRIDE), and operational knowledge bases, such as the MITRE Five-G Hierarchy of Threats (FiGHT). This gap limits the ability to connect architectural weaknesses with specific protocol behaviors and attack sequences. This paper presents Multi-stage Attack Surface Analysis and Reasoning (MASAR), a formal framework that bridges this gap through three layers: strategic threat mapping, logical attack path decomposition using directed acyclic graphs (DAGs), and operational synthesis of tactics, techniques, and procedures (TTPs). MASAR is evaluated using a 5G-ready IP Multimedia Subsystem (IMS) architecture, examining two signaling attack scenarios: early media billing bypass through Session Initiation Protocol (SIP) signaling and subscriber information disclosure and topology discovery through the Diameter Cx interface. MiniZinc constraint models are used to analyze the reachability of unsafe protocol states. The analysis demonstrates how MASAR connects architectural threats with specific protocol behaviors and supports security controls that account for network states in telecommunications systems.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Computer science, Computer security, Reachability, Signaling protocol, Protocol (science), Computer network

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange