2 citations · 6 across the 19 of their papers we have counts for
15 papers · 1 filter
Tick-Tock on the Open Fronthaul: Securing Synchronization in O-RAN
Yiwei Zhang, Enrico Pisanti, Imtiaz Karim +2
The Precision Time Protocol (PTP) provides the time and phase synchronization required by disaggregated Open Radio Access Networks (O-RAN). Yet, in current open fronthaul deploymen…
Understanding the Usability of Cryptographic Verification Tools
Tarikul Islam, Yasin Islam, Khandakar Ashrafi Akbar +1
Cryptographic protocol verification tools are widely used to analyze the security of complex protocols, yet how users interact with these tools remains comparatively understudied.…
A2ABreak: Systematic Security Analysis of the A2A Protocol
Alireza Lotfi, Mirza Masfiqur Rahman, Imtiaz Karim +1
The Agent2Agent (A2A) protocol, now governed by the Linux Foundation, is an open standard that enables autonomous AI agents to discover, authenticate with, and delegate tasks to on…
PhantomCall: Evading ML Malware Detectors via Function Call Graph Perturbation
Md Ajwad Akil, Adrian Shuai Li, Imtiaz Karim +3
Prior adversarial attacks on Windows PE malware detectors target raw bytes, PE headers, or intra-function control-flow graphs, leaving the function call graph (FCG) unexplored as a…
A Lightweight Post-Quantum Authentication Framework for 5G Base Station Bootstrapping
Saleh Darzi, Mirza Masfiqur Rahman, Imtiaz Karim +3
The absence of authenticated bootstrapping between User Equipments (UEs) and Base Stations (BSs) in 5G leaves System Information Block (SIB) broadcasts unprotected, enabling fake B…
Breaking 5G on The Lower Layer
Subangkar Karmaker Shanto, Imtiaz Karim, Elisa Bertino
As 3GPP systems have strengthened security at the upper layers of the cellular stack, plaintext PHY and MAC layers have remained relatively understudied, though interest in them is…
Proving DNSSEC Correctness: A Formal Approach to Secure Domain Name Resolution
Qifan Zhang, Zilin Shen, Imtiaz Karim +2
The Domain Name System Security Extensions (DNSSEC) are critical for preventing DNS spoofing, yet its specifications contain ambiguities and vulnerabilities that elude traditional…
Zero-Trust Strategies for O-RAN Cellular Networks: Principles, Challenges and Research Directions
Charalampos Katsis, Imtiaz Karim, Elisa Bertino
Cellular networks are foundational to modern communication, supporting a broad range of applications, from civilian use to enterprise systems and military tactical networks. The ad…
Future-Proofing Authentication Against Insecure Bootstrapping for 5G Networks: Feasibility, Resiliency, and Accountability
Saleh Darzi, Mirza Masfiqur Rahman, Imtiaz Karim +3
The 5G protocol lacks a robust base station (BS) authentication mechanism during the initial bootstrapping phase, leaving it susceptible to fake BSs, spoofed broadcasts, and large-…
VWAttacker: A Systematic Security Testing Framework for Voice over WiFi User Equipments
Imtiaz Karim, Hyunwoo Lee, Hassan Asghar +4
We present VWAttacker, the first systematic testing framework for analyzing the security of Voice over WiFi (VoWiFi) User Equipment (UE) implementations. VWAttacker includes a comp…
LLMalMorph: On The Feasibility of Generating Variant Malware using Large-Language-Models
Md Ajwad Akil, Adrian Shuai Li, Imtiaz Karim +4
Large Language Models (LLMs) have transformed software development and automated code generation. Motivated by these advancements, this paper explores the feasibility of LLMs in mo…
Standing Firm in 5G: A Single-Round, Dropout-Resilient Secure Aggregation for Federated Learning
Yiwei Zhang, Rouzbeh Behnia, Imtiaz Karim +2
Federated learning (FL) is well-suited to 5G networks, where many mobile devices generate sensitive edge data. Secure aggregation protocols enhance privacy in FL by ensuring that i…
CellularLint: A Systematic Approach to Identify Inconsistent Behavior in Cellular Network Specifications
Mirza Masfiqur Rahman, Imtiaz Karim, Elisa Bertino
In recent years, there has been a growing focus on scrutinizing the security of cellular networks, often attributing security vulnerabilities to issues in the underlying protocol d…
Gotta Detect 'Em All: Fake Base Station and Multi-Step Attack Detection in Cellular Networks
Kazi Samin Mubasshir, Imtiaz Karim, Elisa Bertino
Fake base stations (FBSes) pose a significant security threat by impersonating legitimate base stations (BSes). Though efforts have been made to defeat this threat, up to this day,…
Segment-Based Formal Verification of WiFi Fragmentation and Power Save Mode
Zilin Shen, Imtiaz Karim, Elisa Bertino
The IEEE 802.11 family of standards, better known as WiFi, is a widely used protocol utilized by billions of users. Previous works on WiFi formal verification have mostly focused o…