CITesting: Systematic Testing of Context Integrity Violations in LTE Core Networks
Jan 1, 2025·,,,,·
1 min read
Mincheol Son
Kwangmin Kim
Beomseok Oh
CheolJun Park
Yongdae Kim
Type
Publication
Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security, CCS 2025, Taipei, Taiwan, October 13-17, 2025
🏆 Distinguished Paper Award
Impact
We uncovered 29, 22, 16, and 59 distinct CIVs in Open5GS, srsRAN, Amarisoft, and Nokia LTE cores, respectively. These allow remote detachment, IMSI exposure, and presence detection without requiring proximity. We contributed patches to Open5GS and Amarisoft. CITesting will be released as an open-source tool to support future uplink security research.