5Ghoul Defensive Detection: Inverted Exploit Signatures for 5G NR Pre-Authentication Attack Monitoring
Abstract
A complete defensive detection framework for the 5Ghoul family of 5G NR pre-authentication vulnerabilities, comprising an IDS script with inverted exploit signatures for all 12 published CVEs (V5-V16) and the DA1 NAS flooding downgrade attack, Wireshark forensic filters, and constitutional detection constraints following a refuse-rather-than-miss philosophy.
Fields of Study & Subjects
IPv6
Mobility
Handover
Networks
Security
Network Security and Intrusion Detection
Software-Defined Networks and 5G
Publication details
- Journal / source
- Zenodo (CERN European Organization for Nuclear Research)
- Publication date
- 20 February 2026
- Document type
- Preprint