With the advent of 5G, mobile networks are becoming more dynamic and will therefore present a wider attack surface. To secure these new systems, we propose a multi-domain anomaly detection method that is distinguished by the study of traffic correlation on three dimensions: temporal by analyzing message sequences, semantic by abstracting the parameters these messages contain, and topological by linking them in the form of a graph. Unlike traditional approaches, which are limited to considering these domains independently, our method studies their correlations to obtain a global, coherent and explainable view of anomalies.
View on arXiv@article{hoger2025_2506.12070,
title={ Multi-domain anomaly detection in a 5G network },
author={ Thomas Hoger and Philippe Owezarski },
journal={arXiv preprint arXiv:2506.12070},
year={ 2025 }
}