Slide
Centre Interdisciplinaire
de Recherche et d’Innovation
en Cybersécurité et Société
de Recherche et d’Innovation
en Cybersécurité et Société
1.
Moudoud, H.; Houda, Z. A. El; Brik, B.
Securing O-RAN with Zero Trust Architecture and Large Language Models Proceedings Article
In: C., Iwendi; Z., Boulouard; N., Kryvinska (Ed.): Lect. Notes Networks Syst., pp. 357–368, Springer Science and Business Media Deutschland GmbH, 2025, ISBN: 23673370 (ISSN); 978-303194619-6 (ISBN), (Journal Abbreviation: Lect. Notes Networks Syst.).
Abstract | Links | BibTeX | Tags: Access management, Access Management system, Architecture, Authentication, Block-chain, Blockchain, Computer architecture, Computer crime, Cryptography, Distributed computer systems, Intrusion Detection, Language model, Large language model, Management systems, Mobile security, Mobile telecommunication systems, Network architecture, Network security, O-RAN, Open radio access network, Radio access networks, Security systems, Security vulnerabilities, Trusted computing, Zero Trust
@inproceedings{moudoudSecuringORANZero2025,
title = {Securing O-RAN with Zero Trust Architecture and Large Language Models},
author = {H. Moudoud and Z. A. El Houda and B. Brik},
editor = {Iwendi C. and Boulouard Z. and Kryvinska N.},
url = {https://www.scopus.com/pages/publications/105011259647?origin=resultslist},
doi = {10.1007/978-3-031-94620-2_31},
isbn = {23673370 (ISSN); 978-303194619-6 (ISBN)},
year = {2025},
date = {2025-01-01},
booktitle = {Lect. Notes Networks Syst.},
volume = {1312 LNNS},
pages = {357–368},
publisher = {Springer Science and Business Media Deutschland GmbH},
abstract = {The Open Radio Access Network (O-RAN) architecture is critical for the development of 6G networks, offering flexibility and interoperability through disaggregated components. However, this openness exposes O-RAN to new security vulnerabilities, including unauthorized access, data breaches, and malicious xApp deployments. To address these challenges, we propose DistillORAN, a novel Zero-Trust architecture designed specifically for O-RAN. DistillORAN features two core components: (1) a blockchain-based decentralized trust management system for secure verification, authentication, and dynamic access control of xApps, and (2) a lightweight intrusion detection module powered by DistilBERT, a transformer-based model optimized for resource-constrained environments. DistilBERT’s ability to analyze network activities and detect anomalies in real-time allows it to identify complex security threats and multi-step attack scenarios within the O-RAN ecosystem. Its lightweight nature makes it ideal for O-RAN’s distributed infrastructure, where computational resources may be limited. By combining blockchain technology for trust management with DistilBERT’s powerful pattern recognition for intrusion detection, DistillORAN enforces a Zero-Trust security model, ensuring continuous monitoring and verification of all network components. This comprehensive solution enhances the security and resilience of O-RAN networks, aligning with the dynamic needs of next-generation mobile infrastructures. © The Author(s), under exclusive license to Springer Nature Switzerland AG 2025.},
note = {Journal Abbreviation: Lect. Notes Networks Syst.},
keywords = {Access management, Access Management system, Architecture, Authentication, Block-chain, Blockchain, Computer architecture, Computer crime, Cryptography, Distributed computer systems, Intrusion Detection, Language model, Large language model, Management systems, Mobile security, Mobile telecommunication systems, Network architecture, Network security, O-RAN, Open radio access network, Radio access networks, Security systems, Security vulnerabilities, Trusted computing, Zero Trust},
pubstate = {published},
tppubtype = {inproceedings}
}
The Open Radio Access Network (O-RAN) architecture is critical for the development of 6G networks, offering flexibility and interoperability through disaggregated components. However, this openness exposes O-RAN to new security vulnerabilities, including unauthorized access, data breaches, and malicious xApp deployments. To address these challenges, we propose DistillORAN, a novel Zero-Trust architecture designed specifically for O-RAN. DistillORAN features two core components: (1) a blockchain-based decentralized trust management system for secure verification, authentication, and dynamic access control of xApps, and (2) a lightweight intrusion detection module powered by DistilBERT, a transformer-based model optimized for resource-constrained environments. DistilBERT’s ability to analyze network activities and detect anomalies in real-time allows it to identify complex security threats and multi-step attack scenarios within the O-RAN ecosystem. Its lightweight nature makes it ideal for O-RAN’s distributed infrastructure, where computational resources may be limited. By combining blockchain technology for trust management with DistilBERT’s powerful pattern recognition for intrusion detection, DistillORAN enforces a Zero-Trust security model, ensuring continuous monitoring and verification of all network components. This comprehensive solution enhances the security and resilience of O-RAN networks, aligning with the dynamic needs of next-generation mobile infrastructures. © The Author(s), under exclusive license to Springer Nature Switzerland AG 2025.
2.
Woodley, T.; Gagnon, S.
BPM and SOA: Synergies and challenges Journal Article
In: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 3806 LNCS, pp. 679–688, 2005, ISSN: 03029743, (ISBN: 3540300171; 9783540300175 Place: New York, NY).
Abstract | Links | BibTeX | Tags: BPM solution, Business Process Execution Language (BPEL), Computational complexity, Computer architecture, Formal languages, Information management, Information technology, Problem solving, SOA service management, Symbiotic relationships, World Wide Web
@article{woodley_bpm_2005,
title = {BPM and SOA: Synergies and challenges},
author = {T. Woodley and S. Gagnon},
url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-33744797648&doi=10.1007%2f11581062_75&partnerID=40&md5=d2c8bdaf2afbc46137231ecb42bc8151},
doi = {10.1007/11581062_75},
issn = {03029743},
year = {2005},
date = {2005-01-01},
journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},
volume = {3806 LNCS},
pages = {679–688},
abstract = {While BPM and SOA have evolved independently, there is an inevitable symbiotic relationship between them. As well, a SOA can be developed using various service formats, whether unique Web Services, orchestrated services using the Business Process Execution Language (BPEL), or other service providers. A SOA promotes the creation of highly accessible, loosely coupled, discrete business services. For greatest reach, BPM consumes and leverages such services, tying them together to solve and streamline broad business challenges. Not surprisingly however, there are certain considerations while designing a SOA to support BPM. Certain service designs align well within a BPM solution or strategy, while others can cause significant headaches for an overall BPM solution. Conversely, SOA with BPM layered on top can become an entirely different value proposition as compared to SOA alone. As a backbone for SOA components, BPM can integrate important functionalities to extend the value of the SOA investment. Similarly, BPM can provide a platform for SOA service management. We will explore the interdependencies between BPM and SOA, and will provide practical guidance on how to make each implementation mutually supportive, extending the reach and value of each. We will also discuess whether SOA alone can provide the business service functionality required for BPM solutions of the future, or if other complementary architectures may also have a role to play. © Springer-Verlag Berlin Heidelberg 2005.},
note = {ISBN: 3540300171; 9783540300175
Place: New York, NY},
keywords = {BPM solution, Business Process Execution Language (BPEL), Computational complexity, Computer architecture, Formal languages, Information management, Information technology, Problem solving, SOA service management, Symbiotic relationships, World Wide Web},
pubstate = {published},
tppubtype = {article}
}
While BPM and SOA have evolved independently, there is an inevitable symbiotic relationship between them. As well, a SOA can be developed using various service formats, whether unique Web Services, orchestrated services using the Business Process Execution Language (BPEL), or other service providers. A SOA promotes the creation of highly accessible, loosely coupled, discrete business services. For greatest reach, BPM consumes and leverages such services, tying them together to solve and streamline broad business challenges. Not surprisingly however, there are certain considerations while designing a SOA to support BPM. Certain service designs align well within a BPM solution or strategy, while others can cause significant headaches for an overall BPM solution. Conversely, SOA with BPM layered on top can become an entirely different value proposition as compared to SOA alone. As a backbone for SOA components, BPM can integrate important functionalities to extend the value of the SOA investment. Similarly, BPM can provide a platform for SOA service management. We will explore the interdependencies between BPM and SOA, and will provide practical guidance on how to make each implementation mutually supportive, extending the reach and value of each. We will also discuess whether SOA alone can provide the business service functionality required for BPM solutions of the future, or if other complementary architectures may also have a role to play. © Springer-Verlag Berlin Heidelberg 2005.
3.
Gagnon, S.
Are we ready for the service oriented architecture? Journal Article
In: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 3806 LNCS, pp. 765, 2005, ISSN: 03029743, (ISBN: 3540300171; 9783540300175 Place: New York, NY).
Abstract | Links | BibTeX | Tags: Administrative data processing, Adopter perspectives, Business Rules Systems, Computer architecture, Computer science, Configuration Management, Information analysis, Information technology, Open Source Solutions, Problem solving, Service oriented architecture, World Wide Web
@article{gagnon_are_2005,
title = {Are we ready for the service oriented architecture?},
author = {S. Gagnon},
url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-33744824076&doi=10.1007%2f11581062_86&partnerID=40&md5=0a3efa749b3c4efa8cf2039b0ea43815},
doi = {10.1007/11581062_86},
issn = {03029743},
year = {2005},
date = {2005-01-01},
journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},
volume = {3806 LNCS},
pages = {765},
abstract = {This Industry Track Panel poses a strategic question, "Are We Ready for the Service Oriented Architecture (SOA)?" We discuss this issue from both vendor and adopter perspectives in the company of 5 IT Executives. In particular, we go beyond the discussion of SOA standards as such, and try to assess the importance of this approach from the point of view of related technologies, such as Business Process Management, Enterprise Architecture, Configuration Management, Business Rules Systems, and Open Source Solutions. © Springer-Verlag Berlin Heidelberg 2005.},
note = {ISBN: 3540300171; 9783540300175
Place: New York, NY},
keywords = {Administrative data processing, Adopter perspectives, Business Rules Systems, Computer architecture, Computer science, Configuration Management, Information analysis, Information technology, Open Source Solutions, Problem solving, Service oriented architecture, World Wide Web},
pubstate = {published},
tppubtype = {article}
}
This Industry Track Panel poses a strategic question, "Are We Ready for the Service Oriented Architecture (SOA)?" We discuss this issue from both vendor and adopter perspectives in the company of 5 IT Executives. In particular, we go beyond the discussion of SOA standards as such, and try to assess the importance of this approach from the point of view of related technologies, such as Business Process Management, Enterprise Architecture, Configuration Management, Business Rules Systems, and Open Source Solutions. © Springer-Verlag Berlin Heidelberg 2005.
4.
Gagnon, S.
Are we ready for the service oriented architecture? Journal Article
In: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 3806 LNCS, pp. 765, 2005, ISSN: 03029743, (ISBN: 3540300171; 9783540300175 Place: New York, NY).
Abstract | Links | BibTeX | Tags: Administrative data processing, Adopter perspectives, Business Rules Systems, Computer architecture, Computer science, Configuration Management, Information analysis, Information technology, Open Source Solutions, Problem solving, Service oriented architecture, World Wide Web
@article{gagnonAreWeReady2005,
title = {Are we ready for the service oriented architecture?},
author = {S. Gagnon},
url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-33744824076&doi=10.1007%2f11581062_86&partnerID=40&md5=0a3efa749b3c4efa8cf2039b0ea43815},
doi = {10.1007/11581062_86},
issn = {03029743},
year = {2005},
date = {2005-01-01},
journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},
volume = {3806 LNCS},
pages = {765},
abstract = {This Industry Track Panel poses a strategic question, "Are We Ready for the Service Oriented Architecture (SOA)?" We discuss this issue from both vendor and adopter perspectives in the company of 5 IT Executives. In particular, we go beyond the discussion of SOA standards as such, and try to assess the importance of this approach from the point of view of related technologies, such as Business Process Management, Enterprise Architecture, Configuration Management, Business Rules Systems, and Open Source Solutions. © Springer-Verlag Berlin Heidelberg 2005.},
note = {ISBN: 3540300171; 9783540300175
Place: New York, NY},
keywords = {Administrative data processing, Adopter perspectives, Business Rules Systems, Computer architecture, Computer science, Configuration Management, Information analysis, Information technology, Open Source Solutions, Problem solving, Service oriented architecture, World Wide Web},
pubstate = {published},
tppubtype = {article}
}
This Industry Track Panel poses a strategic question, "Are We Ready for the Service Oriented Architecture (SOA)?" We discuss this issue from both vendor and adopter perspectives in the company of 5 IT Executives. In particular, we go beyond the discussion of SOA standards as such, and try to assess the importance of this approach from the point of view of related technologies, such as Business Process Management, Enterprise Architecture, Configuration Management, Business Rules Systems, and Open Source Solutions. © Springer-Verlag Berlin Heidelberg 2005.
5.
Woodley, T.; Gagnon, S.
BPM and SOA: Synergies and challenges Journal Article
In: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 3806 LNCS, pp. 679–688, 2005, ISSN: 03029743, (ISBN: 3540300171; 9783540300175 Place: New York, NY).
Abstract | Links | BibTeX | Tags: BPM solution, Business Process Execution Language (BPEL), Computational complexity, Computer architecture, Formal languages, Information management, Information technology, Problem solving, SOA service management, Symbiotic relationships, World Wide Web
@article{woodleyBPMSOASynergies2005,
title = {BPM and SOA: Synergies and challenges},
author = {T. Woodley and S. Gagnon},
url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-33744797648&doi=10.1007%2f11581062_75&partnerID=40&md5=d2c8bdaf2afbc46137231ecb42bc8151},
doi = {10.1007/11581062_75},
issn = {03029743},
year = {2005},
date = {2005-01-01},
journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},
volume = {3806 LNCS},
pages = {679–688},
abstract = {While BPM and SOA have evolved independently, there is an inevitable symbiotic relationship between them. As well, a SOA can be developed using various service formats, whether unique Web Services, orchestrated services using the Business Process Execution Language (BPEL), or other service providers. A SOA promotes the creation of highly accessible, loosely coupled, discrete business services. For greatest reach, BPM consumes and leverages such services, tying them together to solve and streamline broad business challenges. Not surprisingly however, there are certain considerations while designing a SOA to support BPM. Certain service designs align well within a BPM solution or strategy, while others can cause significant headaches for an overall BPM solution. Conversely, SOA with BPM layered on top can become an entirely different value proposition as compared to SOA alone. As a backbone for SOA components, BPM can integrate important functionalities to extend the value of the SOA investment. Similarly, BPM can provide a platform for SOA service management. We will explore the interdependencies between BPM and SOA, and will provide practical guidance on how to make each implementation mutually supportive, extending the reach and value of each. We will also discuess whether SOA alone can provide the business service functionality required for BPM solutions of the future, or if other complementary architectures may also have a role to play. © Springer-Verlag Berlin Heidelberg 2005.},
note = {ISBN: 3540300171; 9783540300175
Place: New York, NY},
keywords = {BPM solution, Business Process Execution Language (BPEL), Computational complexity, Computer architecture, Formal languages, Information management, Information technology, Problem solving, SOA service management, Symbiotic relationships, World Wide Web},
pubstate = {published},
tppubtype = {article}
}
While BPM and SOA have evolved independently, there is an inevitable symbiotic relationship between them. As well, a SOA can be developed using various service formats, whether unique Web Services, orchestrated services using the Business Process Execution Language (BPEL), or other service providers. A SOA promotes the creation of highly accessible, loosely coupled, discrete business services. For greatest reach, BPM consumes and leverages such services, tying them together to solve and streamline broad business challenges. Not surprisingly however, there are certain considerations while designing a SOA to support BPM. Certain service designs align well within a BPM solution or strategy, while others can cause significant headaches for an overall BPM solution. Conversely, SOA with BPM layered on top can become an entirely different value proposition as compared to SOA alone. As a backbone for SOA components, BPM can integrate important functionalities to extend the value of the SOA investment. Similarly, BPM can provide a platform for SOA service management. We will explore the interdependencies between BPM and SOA, and will provide practical guidance on how to make each implementation mutually supportive, extending the reach and value of each. We will also discuess whether SOA alone can provide the business service functionality required for BPM solutions of the future, or if other complementary architectures may also have a role to play. © Springer-Verlag Berlin Heidelberg 2005.