CSWP 36G, False Base Station: Applying 5G Cybersecurity and Privacy CapabilitiesInitial Public Draft
Updated under an hour ago ()
This initial public draft details how the availability of inexpensive, off-the-shelf hardware and software tools allows attackers to mimic legitimate carrier equipment to intercept and disrupt cellular communications. The paper evaluates how 5G devices respond to six simulated false base station scenarios and examines protections available to mitigate risks. Background This white paper is part of the NCCoE's work to accelerate the adoption of 5G security features by demonstrating their implementation on NCCoE's operational 5G security testbed and providing actionable implementation guidelines to help network operators and other stakeholders enhance the cybersecurity and privacy of 5G systems and supporting infrastructures. A false (aka Rogue or Fake) Base Station (FBS) impersonates a real carrier radio access network. It transmits and receives radio signals that mimic a legitimate 5G cell and tricks unsuspecting User Equipment (UE) to connect to it. This can result in cybersecurity risks, including service degradation, privacy breaches, and location tracking for the user. Although 5G standards include greater security features than previous generations to protect subscribers, they…
- Tags
- NIST, draft open for comment
- Related exam domains
- CISSP 1: Security and Risk Management; CISSP 3: Security Architecture and Engineering; CISSP 4: Communication and Network Security; CISA 3: Information Systems Acquisition, Development and Implementation; CISA 4: Information Systems Operations and Business Resilience
- Source record id
- https://csrc.nist.gov/pubs/cswp/36/g/false-base-station-applying-5g-cybersecurity-and-p/ipd
- First seen by InfoSec Signals
- 10/9/2026
Source: NIST CSRC drafts open for comment, National Institute of Standards and Technology, Computer Security Resource Center about this source more from it
Exam domain labels come from a keyword heuristic and are study hints, not an official mapping. The summary is the publisher's own text, shortened; the linked record is authoritative.