SYNOPSIS
In this talk, Dr. Matheus E. Garbelini and Shijie Luo will provide an overview of their work over the past few years on 5G Security Testing.
Specifically, they will outline some key challenges they faced in testing commercial phones over-the-air and how these challenges were overcome to develop their security testing framework.
They will discuss how their technology has evolved from a rogue base station (5Ghoul) approach to what they now call “Man-in-the-Middle Overshadowing”, and how this method uncovered a new downgrade attack in the 5G Standard.
Lastly, they will demonstrate their open-source framework called Sni5Gect, which enables sniffing and injecting attacks against 5G-capable phones.
AGENDA
6:30PM - 7.00PM - Registration, light dinner & networking
7:00PM - 7.05PM - Introduction of Speaker
7.05PM - 8:05PM - 5g Security – From Sniffing To Crashing Your Phone (includes live demo of the open-source Sni5Gect framework)
8:05PM - 8:30PM - Q&A & Wrap-Up
ABOUT THE SPEAKERS
Dr. Matheus Eduardo Garbelini, PhD, Temasek Laboratories@NTU
Dr. Matheus is a Research Scientist at Temasek Laboratories@NTU and a White Hat Wireless Hacker by hobby. With his academic background in Electronics Engineering and Computer Science, he has been using automated wireless fuzzing techniques to find flaws in IoT firmware since 2019. Through his research, he discovered implementation vulnerabilities in the chipset of countless Bluetooth, Wi-Fi, and 5G commercial IoT devices.
Luo Shijie, Research Associate, Temasek Laboratories@NTU
Shijie is a Research Associate at Temasek Laboratories@NTU and a PhD student at Singapore University of Technology and Design (SUTD). He has been poking holes in 5G security through his research (recently published in Usenix 2025), which led to the development of Sni5Gect, a security testing framework which can sniff and inject payloads in 5G networks.
***************************************************************
This is a chapter professional development event thus 1.5 CPE hours will be available for your CPE submission. To facilitate submission of CPE points on your behalf by the local chapter - please identify yourself clearly with <ISC2 membership number> + your full name when you sign up or during registration onsite.
Notes:
1) As spaces are limited, if you cannot attend after registering, please cancel your registration or email info@isc2chapter.sg at least 2 business days before the event.
2) For ISC2 members residing in Singapore who are not yet members of our local Singapore Chapter, please sign up with us through our ISC2 Singapore Chapter website under "Membership-Join us"
- https://www.isc2chapter.sg/join-us
Membership Rates:
Professional Member: $50/year
Associate Member (Non-credential holders): $30/year
Student Member: $10/year
