The NIST National Cybersecurity Center of Excellence (NCCoE) has released the initial public draft Cybersecurity White Paper (CSWP) 36G, False Base Station: Applying 5G Cybersecurity and Privacy Capabilities. It details how the availability of inexpensive, off-the-shelf hardware and software tools allows attackers to mimic legitimate carrier equipment to intercept and disrupt cellular communications. The paper evaluates how 5G devices respond to six simulated false base station scenarios and examines protections available to mitigate risks.
Background
This white paper is part of the NCCoE’s work to accelerate the adoption of 5G security features by demonstrating their implementation on NCCoE’s operational 5G security testbed and providing actionable implementation guidelines to help network operators and other stakeholders enhance the cybersecurity and privacy of 5G systems and supporting infrastructures.
A false (aka Rogue or Fake) Base Station (FBS) impersonates a real carrier radio access network. It transmits and receives radio signals that mimic a legitimate 5G cell and tricks unsuspecting User Equipment (UE) to connect to it. This can result in cybersecurity risks, including service degradation, privacy breaches, and location tracking for the user. Although 5G standards include greater security features than previous generations to protect subscribers, they are still susceptible to Denial-of-Service (DoS) attacks.
About the White Paper
This white paper evaluates six FBS scenarios (simulated in the NCCoE’s 5G Security lab) to assess how the tested 5G devices respond to FBS attacks and identify areas for improvement in standards and available device-configurable protections.
By demonstrating security features on our operational 5G Testbed, we aim to deliver real-world implementation insights to advance 5G security and inform the next generation of wireless security technologies and standards.
Submit Your Feedback!
This white paper is available for public comment through October 30, 2026. Visit the NCCoE project page to learn more and download the white paper today.
