The load-bearing documents for a DIB program — CMMC / DFARS regulatory text (eCFR), federal rulemaking, NIST publications and OIRA review — organized as a library. Pick a document; the reader shows the dex dossier: what it says, why it matters, and the concrete obligations it imposes. Originals open at the source.
CSWP 36G, False Base Station: Applying 5G Cybersecurity and Privacy CapabilitiesInitial Public Draft
This NIST white paper evaluates how 5G devices respond to false base station attacks and identifies improvements for standards and device protections.
This NIST Cybersecurity White Paper (CSWP 36G) details the security risks posed by False Base Stations (FBS) in 5G networks, where attackers use inexpensive hardware to mimic legitimate cells and exploit pre-authentication vulnerabilities. The paper evaluates six simulated FBS scenarios using the NCCoE 5G Cybersecurity testbed to assess how tested 5G devices respond to these attacks, noting that while incremental standards improvements have reduced privacy breaches and DoS attacks, vulnerabilities still exist. It identifies areas for improvement in standards and available device-configurable protections to enhance 5G cybersecurity and privacy.
DIBs and network operators must understand FBS vulnerabilities to protect against interception, privacy breaches, and DoS attacks in 5G communications, directly impacting CMMC/NIST 800-171 controls related to network integrity and data confidentiality.