RF Fingerprinting to Detect Beamstealing Attacks in mmWave 5G Communications

5G mmWave networks rely on directional beamforming to ensure high-bandwidth connectivity, but the initial beam alignment process is vulnerable to beam-stealing attacks. In this scenario, an adversary transmits forged synchronization signals to hijack the receiver's connection, potentially leading to denial of service. This paper analyzes these threats and proposes a physical-layer detection mechanism based on radio frequency fingerprinting. Using a 60 GHz laboratory test-bed, we emulate legitimate and malicious transmission scenarios to evaluate specific hardware impairments. We investigate two primary detection metrics: power amplifier nonlinearities, analyzed via their Amplitude Modulation to Amplitude Modulation (AM/AM) characteristics, and local oscillator stability, quantified by carrier frequency offset drift. Experimental results demonstrate that these metrics can successfully distinguish among different transmitting devices based on their saturation levels and frequency stability profiles. The study confirms that lightweight radio frequency (RF) fingerprinting is a viable solution for hardening 5G beam management against spoofing. Keywords: Beam-stealing, 5G, mmWave, RF fingerprinting, nonlinearities, CFO

Authors

Institutions

Publication Details

Journal
Radioengineering
Published
2026-02-16
DOI
https://doi.org/10.13164/re.2026.0129
Primary Topic
Wireless Signal Modulation Classification
Type
article
Field-Weighted Citation Impact
0.00

Funders

Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

RF Fingerprinting to Detect Beamstealing Attacks in mmWave 5G Communications

R. Marsalek, J. Vychodil, M. Mohamed Sameer Ali, M. Kousal
Radioengineering
Wireless Signal Modulation Classification
article

RF Fingerprinting to Detect Beamstealing Attacks in mmWave 5G Communications

R. Marsalek, J. Vychodil, M. Mohamed Sameer Ali, M. Kousal
article en

Abstract

5G mmWave networks rely on directional beamforming to ensure high-bandwidth connectivity, but the initial beam alignment process is vulnerable to beam-stealing attacks. In this scenario, an adversary transmits forged synchronization signals to hijack the receiver's connection, potentially leading to denial of service. This paper analyzes these threats and proposes a physical-layer detection mechanism based on radio frequency fingerprinting. Using a 60 GHz laboratory test-bed, we emulate legitimate and malicious transmission scenarios to evaluate specific hardware impairments. We investigate two primary detection metrics: power amplifier nonlinearities, analyzed via their Amplitude Modulation to Amplitude Modulation (AM/AM) characteristics, and local oscillator stability, quantified by carrier frequency offset drift. Experimental results demonstrate that these metrics can successfully distinguish among different transmitting devices based on their saturation levels and frequency stability profiles. The study confirms that lightweight radio frequency (RF) fingerprinting is a viable solution for hardening 5G beam management against spoofing. Keywords: Beam-stealing, 5G, mmWave, RF fingerprinting, nonlinearities, CFO

RadioengineeringVol. 35(1)
Brno University of Technology (CZ)
Ministerstvo Vnitra České Republiky, Vysoké Učení Technické v Brně
Openalex Percentile: Top 56%
Wireless Signal Modulation Classification
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

RF Fingerprinting to Detect Beamstealing Attacks in mmWave 5G Communications — R. Marsalek, J. Vychodil, et al. · Radioengineering (2026) | TGRS Research Map | TGRS