Tomas Harvan

Security Monitoring of 5G Core Networks Using Elastic Stack: Architecture, Detection Rules, and CVE-Based Validation

Applying general-purpose SIEM tools to 5G Standalone Core networks is hindered by the absence of protocol dissectors for NGAP, GTP-U, and PFCP in standard data collection agents. This paper addresses that gap with a security monitoring system for Open5GS integrating Elastic Stack with a custom tcpdump and tshark captur...