Distinguishing a malicious NAS message replay from legitimate 5G retransmissions by analysing Packet Data Unit sequence counter drift in a captured NAS signalling trace.
-
Updated
Oct 12, 2026 - Python
Distinguishing a malicious NAS message replay from legitimate 5G retransmissions by analysing Packet Data Unit sequence counter drift in a captured NAS signalling trace.
White papers on cybersecurity, AI-assisted development, and protocol forensics
Tracing a 5G subscriber identity and movement across handovers and AMF reallocations using GUTI reallocation events in an N2 NGAP capture.
Detecting and extracting a 4-bit-per-packet covert channel hidden in 5G GTP-U user-plane packet header nibbles using flow analysis and sync-word-triggered nibble reassembly.
To associate your repository with the protocol-forensics topic, visit your repo's landing page and select "manage topics."