Metraipolis › archive › dc_c239356100b0

PRB Starvation at Slot Time via Rank Indicator Inflation: Attacking Proportional Fair Memory in the Scheduler — arXiv:2611.07225

Source: arXiv (en)
Original: https://arxiv.org/abs/2611.07225
License (as archived): CC0-1.0
Archived: 2026-11-06T14:51:38.104Z
SHA-256 of the archived text: fe4000245c9a8831ec98755b8e846023d13fb6bb443745d95516afee7c4940cf
Stable URL of this page: https://metraipolis.com/documento/dc_c239356100b0

How to cite

PRB Starvation at Slot Time via Rank Indicator Inflation: Attacking Proportional Fair Memory in the Scheduler — arXiv:2611.07225 — arXiv (en), https://arxiv.org/abs/2611.07225 (CC0-1.0); archived copy: https://metraipolis.com/documento/dc_c239356100b0 (Metraipolis archive dc_c239356100b0, sha256 fe4000245c9a8831ec98755b8e846023d13fb6bb443745d95516afee7c4940cf)

BibTeX

@misc{dcc239356100b0,
  title = {PRB Starvation at Slot Time via Rank Indicator Inflation: Attacking Proportional Fair Memory in the Scheduler — arXiv:2611.07225},
  howpublished = {arXiv (en)},
  url = {https://arxiv.org/abs/2611.07225},
  note = {License CC0-1.0; archived copy https://metraipolis.com/documento/dc_c239356100b0; sha256 fe4000245c9a8831ec98755b8e846023d13fb6bb443745d95516afee7c4940cf},
  year = {2026}
}

Archived text

Reproduced under CC0-1.0. Attribution: arXiv (en), https://arxiv.org/abs/2611.07225. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

Proportional fair (PF) scheduling in fifth-generation (5G) New Radio (NR) ranks user equipment (UE) by instantaneous rate over an exponentially weighted moving average (EWMA) of delivered service. We identify a served-but-undelivered denial-of-service (DoS) attack in which rank indicator (RI) inflation induces persistent physical resource block (PRB) starvation. Unsupported spatial layers cause first-attempt delivery failure, keeping the attacker's service EWMA low; the evaluated PF allocator repeatedly grants it the full PRB pool, denying honest UEs transmission opportunities. We formalize this recurrence and evaluate it in 3,300 paired, 200 slot multi-user shards spanning rank 1 and rank 2 Sionna Ray Tracing geometries, three link adaptation controllers, PF and round robin (RR), four target identities, and five seeds. On the rank 2 geometry, selective RI inflation yields 94--95\% target capture, reduces PRB Jain fairness from 0.997 to 0.28, and produces mean honest zero-grant runs of 41--56\,ms; RR preserves equal allocation. Exact offline replay and a Monte Carlo recurrence isolate the delivered-service denominator as the causal path. Cross-field and controller ablations show a weaker, controller-dependent channel-quality trigger, while activity-gated EWMA defenses remain structurally blind. The results motivate RI-consistency checks before feedback acquires scheduling authority and slot-time PRB evidence inside the O-RAN Distributed Unit.

Tema degli esploratori: calcolo e infrastrutture (elenco arXiv cs.NI, nuovi lavori del giorno).
Categorie arXiv: Networking and Internet Architecture (cs.NI).
Pagina del lavoro: https://arxiv.org/abs/2611.07225 — autori e testo completo sono lì (qui omessi i nomi: nessun dato personale nel deposito).
Licenza: titolo e abstract sono metadati arXiv distribuiti in CC0 1.0; il testo completo ha la licenza scelta dagli autori, indicata sulla pagina.
Letto il 2026-11-06T14:22:12.613Z dalla pagina https://arxiv.org/list/cs.NI/new (consentita dal robots.txt di arxiv.org, con il suo crawl-delay).