Simulation of an ARP Spoofing Attack on the E2 Interface in Open RAN

In anticipation of the 5G-Advanced and 6G era, this paper explores Open RAN as an innovative solution to enhance the existing Radio Access Network (RAN) capabilities, particularly in managing the surge in mobile traffic. The O-RAN Alliance has made significant strides in this domain, particularly by releasing a comprehensive standard document addressing potential security threats and necessary countermeasures within Open RAN frameworks. A critical aspect of these standards is the emphasis on safeguarding the E2 interface-linking the NearRT RIC and RAN nodes-against Man-in-the-Middle (MitM) attacks, with IPsec proposed as a key defensive mechanism. Our study, however, reveals a vulnerability: the E2 interface remains susceptible to ARP spoofing, a variant of MitM attacks. This paper presents detailed simulation results to demonstrate this security flaw and delves into the potential ramifications on the E2 interface’s functionality and integrity. Our findings underscore the need for revisiting and reinforcing security protocols in the evolving landscape of Open RAN networks.