<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04133790</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-09T21:50:27+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Zero-touch security management for mMTC network slices: DDoS attack detection and mitigation</title>
            <author role="aut">
              <persName>
                <forename type="first">Redouane</forename>
                <surname>Niboucha</surname>
              </persName>
              <idno type="halauthorid">2840736-0</idno>
              <affiliation ref="#struct-302418"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sabra Ben</forename>
                <surname>Saad</surname>
              </persName>
              <idno type="idhal" notation="numeric">1263339</idno>
              <idno type="halauthorid" notation="string">2412362-1263339</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-2942-0506</idno>
              <affiliation ref="#struct-421532"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Adlen</forename>
                <surname>Ksentini</surname>
              </persName>
              <email type="md5">a621d6176bac8ad61713bd302ddf02ef</email>
              <email type="domain">univ-rennes1.fr</email>
              <idno type="idhal" notation="numeric">949345</idno>
              <idno type="halauthorid" notation="string">200092-949345</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-0972-3091</idno>
              <idno type="IDREF">https://www.idref.fr/10335767X</idno>
              <idno type="ISNI">http://isni.org/isni/0000000356660350</idno>
              <idno type="VIAF">https://viaf.org/viaf/189644420</idno>
              <affiliation ref="#struct-421532"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Yacine</forename>
                <surname>Challal</surname>
              </persName>
              <email type="md5">edb8d9b8f3299068540dbecf4a098bff</email>
              <email type="domain">esi.dz</email>
              <idno type="idhal" notation="string">yacine-challal</idno>
              <idno type="idhal" notation="numeric">8362</idno>
              <idno type="halauthorid" notation="string">2522880-8362</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-9237-6210</idno>
              <idno type="IDREF">https://www.idref.fr/090236165</idno>
              <affiliation ref="#struct-452388"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Centre De Documentation</forename>
                <surname>Eurecom</surname>
              </persName>
              <email type="md5">808fb6c747947adf4fb3953c09dd1636</email>
              <email type="domain">eurecom.fr</email>
            </editor>
            <funder ref="#projeurop-714171"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2023-06-20 11:10:52</date>
              <date type="whenModified">2023-07-07 13:47:26</date>
              <date type="whenReleased">2023-06-27 13:54:22</date>
              <date type="whenProduced">2023-05-01</date>
              <date type="whenEndEmbargoed">2023-06-20</date>
              <ref type="file" target="https://hal.science/hal-04133790v1/document">
                <date notBefore="2023-06-20"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04133790v1/file/publi-7160.pdf" id="file-4133790-3599070">
                <date notBefore="2023-06-20"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="118606">
                <persName>
                  <forename>Centre De Documentation</forename>
                  <surname>Eurecom</surname>
                </persName>
                <email type="md5">808fb6c747947adf4fb3953c09dd1636</email>
                <email type="domain">eurecom.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04133790</idno>
            <idno type="halUri">https://hal.science/hal-04133790</idno>
            <idno type="halBibtex">niboucha:hal-04133790</idno>
            <idno type="halRefHtml">&lt;i&gt;IEEE Internet of Things Journal&lt;/i&gt;, 2023, 10 (9), pp.7800-7812. &lt;a target="_blank" href="https://dx.doi.org/10.1109/JIOT.2022.3230875"&gt;&amp;#x27E8;10.1109/JIOT.2022.3230875&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">IEEE Internet of Things Journal, 2023, 10 (9), pp.7800-7812. &amp;#x27E8;10.1109/JIOT.2022.3230875&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-4133790-3599070"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="EURECOM">EURECOM</idno>
            <idno type="stamp" n="OPENAIRE">OpenAIRE</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Zero-touch security management for mMTC network slices: DDoS attack detection and mitigation</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Redouane</forename>
                    <surname>Niboucha</surname>
                  </persName>
                  <idno type="halauthorid">2840736-0</idno>
                  <affiliation ref="#struct-302418"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sabra Ben</forename>
                    <surname>Saad</surname>
                  </persName>
                  <idno type="idhal" notation="numeric">1263339</idno>
                  <idno type="halauthorid" notation="string">2412362-1263339</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-2942-0506</idno>
                  <affiliation ref="#struct-421532"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Adlen</forename>
                    <surname>Ksentini</surname>
                  </persName>
                  <email type="md5">a621d6176bac8ad61713bd302ddf02ef</email>
                  <email type="domain">univ-rennes1.fr</email>
                  <idno type="idhal" notation="numeric">949345</idno>
                  <idno type="halauthorid" notation="string">200092-949345</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-0972-3091</idno>
                  <idno type="IDREF">https://www.idref.fr/10335767X</idno>
                  <idno type="ISNI">http://isni.org/isni/0000000356660350</idno>
                  <idno type="VIAF">https://viaf.org/viaf/189644420</idno>
                  <affiliation ref="#struct-421532"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Yacine</forename>
                    <surname>Challal</surname>
                  </persName>
                  <email type="md5">edb8d9b8f3299068540dbecf4a098bff</email>
                  <email type="domain">esi.dz</email>
                  <idno type="idhal" notation="string">yacine-challal</idno>
                  <idno type="idhal" notation="numeric">8362</idno>
                  <idno type="halauthorid" notation="string">2522880-8362</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-9237-6210</idno>
                  <idno type="IDREF">https://www.idref.fr/090236165</idno>
                  <affiliation ref="#struct-452388"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">104419</idno>
                <idno type="issn">2372-2541</idno>
                <idno type="eissn">2327-4662</idno>
                <title level="j">IEEE Internet of Things Journal</title>
                <imprint>
                  <publisher>IEEE</publisher>
                  <biblScope unit="volume">10</biblScope>
                  <biblScope unit="issue">9</biblScope>
                  <biblScope unit="pp">7800-7812</biblScope>
                  <date type="datePub">2023-05-01</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1109/JIOT.2022.3230875</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Security</term>
                <term xml:lang="en">Zero-touch Service Management (ZSM)</term>
                <term xml:lang="en">5G</term>
                <term xml:lang="en">Denial of Service</term>
                <term xml:lang="en">Machine Learning</term>
                <term xml:lang="en">Network Slicing</term>
                <term xml:lang="en">Network Slicing Machine Learning Denial of Service 5G Zero-touch Service Management (ZSM) Security</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>massive Machine Type Communications (mMTC) network slices in 5G aim to connect a massive number of MTC devices, opening the door for a widened attack surface. Network slices are well isolated, resulting in a low impact on other running slices when attackers control IoT devices belonging to a mMTC network slice (i.e., in-slice attack). However, the impact of the in-slice attacks on the shared infrastructure components with other slices, such as the 5G Core Network (CN), can be harmful, considering the massive number that can be part of mMTC slice. In this paper, we propose a zero-touch security management solution that uses Machine Learning (ML) to detect and mitigate in-slice attacks on 5G CN components, focusing on Distributed Denial of Service (DDoS) attacks. To this aim, we propose: (1) a novel closed-control loop that assists the 5G CN in detecting and mitigating attacks; (2) a ML algorithm that predicts the upper bound of expected MTC devices Attach Requests during a time interval (or an event); (3) a detection algorithm that analyzes an event and uses the ML output to compute a probability that a specific device has participated to an attack; (4) a mitigation algorithm that disconnects and blocks MTC devices suspected to be part of an attack; (5) a Proof of concept implementation on top of a 5G facility.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-302418" status="VALID">
          <orgName>École Nationale Supérieure d'Informatique [Alger]</orgName>
          <orgName type="acronym">ESI</orgName>
          <desc>
            <address>
              <addrLine>Alger Oued Smar, 16309</addrLine>
              <country key="DZ"/>
            </address>
            <ref type="url">http://www.esi.dz/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-421532" status="VALID">
          <orgName>Eurecom [Sophia Antipolis]</orgName>
          <desc>
            <address>
              <addrLine>Campus SophiaTech, 450 Route des Chappes, CS 50193 - 06904 Biot Sophia Antipolis cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.eurecom.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-452388" status="VALID">
          <idno type="ROR">https://ror.org/01w58xz62</idno>
          <orgName>Qatar Computing Research Institute [Doha, Qatar]</orgName>
          <orgName type="acronym">QCRI</orgName>
          <desc>
            <address>
              <addrLine>Tornado Tower,18th floorDoha, Qatar</addrLine>
              <country key="QA"/>
            </address>
            <ref type="url">http://www.qcri.org/home</ref>
          </desc>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="europeanProject" xml:id="projeurop-714171" status="VALID">
          <idno type="number">871780</idno>
          <idno type="program">H2020-ICT-2018-20</idno>
          <idno type="call">H2020-ICT-2019-2</idno>
          <orgName>MonB5G</orgName>
          <desc>Distributed management of Network Slices in beyond 5G</desc>
          <date type="start">2019-11-01</date>
          <date type="end">2023-04-30</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>