MIRAGE
MIRAGE (Mobility-Invariant RAN Attack-detection Guard Engine) separates real mobility from data-plane attacks using protocol structure rather than raw message counts. It turns cross-layer invariants into an attack classifier and mitigation selector.