Apparatus and Method for Detecting PRACH Storm Attacks

A method for a physical random access channel (PRACH) attack detection includes detecting by a base station a plurality of preambles sent by devices through a PRACH; launching by the base station a random access (RA) procedure for at least one device for which a preamble has been detected; decoding by the base station at least one radio resource control (RRC) connection request received in the context of a launched RA procedure; determining by the base station a first metric and a second metric, wherein the first metric is the number of RRC connection requests successfully decoded over time, wherein the second metric is the number of preambles detected over the same time and for which a RA procedure has been launched; determining whether there is a suspicion of storm attack over the PRACH based on a result of a comparison of the first and second metrics.