5G Infrastructure Protocol Anomaly Detection

Ankit Mehta@Secvyn

•updated Jun 25, 2026•0•0•3

Detects anomalous device network activity involving 5G-specific protocol ports (e.g., GTP-U, SIP). The rule aggregates unique port usage per device over 1-hour intervals to identify potential network reconnaissance, scanning, or unauthorized control plane communication.