@inproceedings{mehrbanGameTheoreticSecurityOrchestration2026,

title = {Game-Theoretic Security Orchestration for Cross-RIC Policy Conflicts in O-RAN},

author = {A. Mehrban and H. Moudoud and B. Brik and L. Khoukhi and Z. A. El Houda},

url = {https://www.scopus.com/pages/publications/105045343135?origin=resultslist},

doi = {10.1109/ICC59461.2026.11587926},

isbn = {15503607 (ISSN); 979-831954209-0 (ISBN)},

year  = {2026},

date = {2026-01-01},

booktitle = {IEEE Int Conf Commun},

publisher = {Institute of Electrical and Electronics Engineers Inc.},

abstract = {In Open Radio Access Network (Open RAN), disaggregated network components can interact through specialized xApps or rApps from multiple vendors. Despite the flexibility of operations and the dynamism of functions enabled by the open architecture, this openness can cause conflicts in security policy enforcement (e.g., encryption levels, key rotation, firewall restrictiveness), formally defined as thresholded divergences on shared or interdependent security parameters, where one app wants to set a stricter rule while another wants a more lenient policy simultaneously. The current solutions of "first-come"or "last-write"make the change one-sided for the benefit of a single app, while other apps may be harmed by the result, and at a network level, security and stability can be compromised. In this paper, we propose a novel Game-Theoretic Security Orchestrator (GTSO) that operates at the Service Management and Orchestration (SMO) layer, with cross-RIC scope, and is responsible for resolving parameter conflicts across xApps and rApps. GTSO treats xApps/rApps as strategic players and negotiates convergent solutions using game-theoretic models such as non-cooperative Nash games, cooperative bargaining, and leader-follower (Stackelberg) that guide competing control applications toward stable equilibrium points, while exchanging strategy summaries over secure channels to protect sensitive details and enhance overall network security. © 2026 IEEE.},

note = {Journal Abbreviation: IEEE Int Conf Commun},

keywords = {Computation theory, Computer system firewalls, Cryptography, Game theory, Game-theoretic, Multiple vendors, Network architecture, Network security, Networks security, Open radio access network, Open RAN, Policy conflict, Radio access networks, Security orchestration, Service management, Service orchestration, SMO, Xapp/rapp conflict, xApp/rApp conflicts},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{mehrbanSecuringORANEquipment2025,

title = {Securing O-RAN Equipment Using Blockchain-Based Supply Chain Verification},

author = {A. Mehrban and Z. A. El Houda and H. Moudoud and B. Brik and L. Khoukhi},

url = {https://www.scopus.com/pages/publications/105011364438?origin=resultslist},

doi = {10.1109/IWCMC65282.2025.11059692},

isbn = {979-833150887-6 (ISBN)},

year  = {2025},

date = {2025-01-01},

booktitle = {Int. Wirel. Commun. Mob. Comput. Conf., IWCMC},

pages = {1570–1575},

publisher = {Institute of Electrical and Electronics Engineers Inc.},

abstract = {The Open Radio Access Network (O-RAN) architecture has enabled the integration of multi-vendor equipment, yielding a significant enhancement in the flexibility and interoperability of telecommunications networks. However, this openness has also introduced new security vulnerabilities, particularly in supply chain integrity. Malicious actors may exploit weaknesses at various stages of production, distribution, or integration, leading to critical threats such as data tampering, unauthorized access, and denial-of-service (DOS) attacks. To address these challenges, this paper proposes a novel blockchain-based framework designed to secure the O-RAN supply chain. The proposed solution leverages a private permissioned blockchain ledger and cryptographic firmware authentication to ensure the integrity and authenticity of network equipment throughout its lifecycle. Specifically, the framework consists of: (1) a decentralized architecture integrating blockchain network components, equipment node validators, and secure firmware authentication mechanisms; and (2) a consensus-based verification model to enhance trust and transparency within the supply chain. To the best of our knowledge, this is one of the first approaches to use blockchain for O-RAN supply chain security, and also addressing emerging security threats in a scalable and tamper-resistant manner. Experimental validation and security assessments demonstrate the effectiveness of the proposed framework in mitigating supply chain risks, making it a promising solution for ensuring trust and robustness in next-generation O-RAN ecosystems. © 2025 IEEE.},

note = {Journal Abbreviation: Int. Wirel. Commun. Mob. Comput. Conf., IWCMC},

keywords = {Access network equipment, Authentication, Block-chain, Blockchain, Cryptography, Denial-of-service attack, Firmware, Firmware authentication, Multi-vendor, Network architecture, Network security, O-RAN, Open radio access network, Radio access networks, Security, Security systems, Security vulnerabilities, Supply Chain Verification, Supply chains, Telecommunications networks},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{moudoudSecuringORANZero2025,

title = {Securing O-RAN with Zero Trust Architecture and Large Language Models},

author = {H. Moudoud and Z. A. El Houda and B. Brik},

editor = {Iwendi C. and Boulouard Z. and Kryvinska N.},

url = {https://www.scopus.com/pages/publications/105011259647?origin=resultslist},

doi = {10.1007/978-3-031-94620-2_31},

isbn = {23673370 (ISSN); 978-303194619-6 (ISBN)},

year  = {2025},

date = {2025-01-01},

booktitle = {Lect. Notes Networks Syst.},

volume = {1312 LNNS},

pages = {357–368},

publisher = {Springer Science and Business Media Deutschland GmbH},

abstract = {The Open Radio Access Network (O-RAN) architecture is critical for the development of 6G networks, offering flexibility and interoperability through disaggregated components. However, this openness exposes O-RAN to new security vulnerabilities, including unauthorized access, data breaches, and malicious xApp deployments. To address these challenges, we propose DistillORAN, a novel Zero-Trust architecture designed specifically for O-RAN. DistillORAN features two core components: (1) a blockchain-based decentralized trust management system for secure verification, authentication, and dynamic access control of xApps, and (2) a lightweight intrusion detection module powered by DistilBERT, a transformer-based model optimized for resource-constrained environments. DistilBERT’s ability to analyze network activities and detect anomalies in real-time allows it to identify complex security threats and multi-step attack scenarios within the O-RAN ecosystem. Its lightweight nature makes it ideal for O-RAN’s distributed infrastructure, where computational resources may be limited. By combining blockchain technology for trust management with DistilBERT’s powerful pattern recognition for intrusion detection, DistillORAN enforces a Zero-Trust security model, ensuring continuous monitoring and verification of all network components. This comprehensive solution enhances the security and resilience of O-RAN networks, aligning with the dynamic needs of next-generation mobile infrastructures. © The Author(s), under exclusive license to Springer Nature Switzerland AG 2025.},

note = {Journal Abbreviation: Lect. Notes Networks Syst.},

keywords = {Access management, Access Management system, Architecture, Authentication, Block-chain, Blockchain, Computer architecture, Computer crime, Cryptography, Distributed computer systems, Intrusion Detection, Language model, Large language model, Management systems, Mobile security, Mobile telecommunication systems, Network architecture, Network security, O-RAN, Open radio access network, Radio access networks, Security systems, Security vulnerabilities, Trusted computing, Zero Trust},

pubstate = {published},

tppubtype = {inproceedings}

}