RAID: In-Network RA Signaling Storm Detection for 5G Open RAN
Mohamed Rouili, Yang Xiao, Sihang Liu, Raouf Boutaba

TL;DR
RAID is a real-time, in-network detection system using programmable switches and machine learning to identify and mitigate signaling storms in 5G Open RAN, ensuring QoS and control-plane stability.
Contribution
The paper introduces RAID, a novel in-network detection system leveraging P4-programmable switches and ML for microsecond-scale RA storm detection in 5G O-RAN.
Findings
Achieves over 94% detection accuracy.
Maintains detection delay around 3.4 microseconds.
Effective across various traffic loads.
Abstract
The disaggregation and virtualization of 5G Open RAN (O-RAN) introduces new vulnerabilities in the control plane that can greatly impact the quality of service (QoS) of latency-sensitive 5G applications and services. One critical issue is Random Access (RA) signaling storms where, a burst of illegitimate or misbehaving user equipments (UEs) send Radio Resource Control (RRC) connection requests that rapidly saturate a Central Unit's (CU) processing pipeline. Such storms trigger widespread connection failures within the short contention resolution window defined by 3GPP. Existing detection and mitigation approaches based on near-real-time RAN Intelligent Controller (n-RT RIC) applications cannot guarantee a timely reaction to such attacks as RIC control loops incur tens to hundreds of milliseconds of latency due to the non-deterministic nature of their general purpose processor (GPP)…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSoftware-Defined Networks and 5G · Network Time Synchronization Technologies · Wireless Networks and Protocols
