# Detection Model for 5G Core PFCP DDoS Attacks Based on Sin-Cos-bIAVOa
## 1 Introduction  
Fifth-generation (5G) mobile communication technology represents a cutting-edge advancement in mobile systems. It is engineered to provide rapid data transmission speeds, significantly reduced latency, and support for a vast number of simultaneous connections. Today, 5G communication facilities provide the network foundation for realizing the human-machine Internet of Things; 5G technology has a wide range of application scenarios, including enhanced mobile broadband, ultra-high reliability and low-latency communications, and machine-type communications. In addition, 5G technology can provide faster network speeds and lower internal delays, support more device connections, and provide better services for various applications; for example, 5G technology is used in fields such as autonomous driving, telemedicine, and smart homes to improve the performance and reliability of various applications. The leapfrogging advancements in artificial intelligence, large language models, intelligent agents, and related technologies have introduced new challenges and a range of solutions to modern 5G network security [1]. While the 5G networks bring great convenience to mankind, their security cannot be ignored. The security issues of 5G networksinvolve many aspects, including core network, edge network, data security, virtual network technology vulnerability, network business security, network architecture security, encryption security, authentication security, privacy security, and more. Mobile communication networks [2] can be broadly divided into wireless and core networks, each employing different protocols and interfaces, requiring the application and management of distinct security technologies. Moreover, with multiple sections, security monitoring becomes complicated and traffic analysis to identify security threats is inevitably difficult. The classification of common 5G network security threats is illustrated in Figure 1. In Radio Access Networks (RAN), there are various security threats such as information leaks, user DoS, base-station DoS, eavesdropping, and unauthorized data use. Attackers can exploit paging messages to intercept victims' identities and launch DoS attacks by disrupting connections. They may also attempt to eavesdrop on communications by extracting security keystreams, especially when there are vulnerabilities in the allocation of identifiers. Furthermore, attackers can misuse network bearers for unauthorized purposes such as free data communication or caller spoofing, highlighting the need for robust security measures in RAN to protect user data and service integrity. The 5G core network faces various security threats such as information leakage, IP depletion, DDoS attacks, NAS manipulation, eavesdropping, and IP spoofing, which can impact the network's normal operation and the security of user data. Given these threats, the security of the 5G core network is crucial [3]. The core network carries user data and business data, and forms the hub of the entire mobile communication network. Today, 5G core networks face a variety of security threats. Major threats include malicious attacks and intrusions, in which hackers can exploit vulnerabilities in the 5G core network to attack and intrude core network elements, obtain sensitive information, disrupt network normality run, etc. Data leakage and privacy invasion are also concerns, as large amount of user data and business data are stored in the 5G core network. If data security protection measures are not in place, data leakage and privacy invasion may occur. Attackers may exploit vulnerabilities in the User-Plane Function (UPF) or Access Management Function (AMF) within the 5G protocol stack by repeatedly initiating attach requests, PDU session establishment requests, and similar signaling, thereby bypassing the legitimate authentication processes of the core network and continuously depleting IP  
Figure 1: Classification of 5G network security threats. Source: [2]. resources.