Have to learn the paging in 5G for CSA as the TorPEDO attack has an influence on (unknown) Fake Cell Towers in CSA positioning.

#1 My question: Can anybody explain to me the paging in general, its effect on CSA?
#2 Is it important to differentiate between direct and indirect paging in 5G?
#3 Is there a risk of sofrware definded radio paging multi (unaware) Fake Cell Towers?

There is a risk that unaware Fake Cell Towers mismatch a CSA (as its a non-physical/non-proofable approach). I still cannot dive through the crypto key exchange in such an approach.

Any Crypto forensic examiner in the wild?  

For those that haven't caught up on the TorPEDO news here are some links.....

thehackernews.com/2019...chers.html
www.helpnetsecurity.co...-networks/
www.securitynewspaper....-networks/
threatpost.com/torpedo...5g/142174/
securityaffairs.co/wor...4g-5g.html

And here is the link to the research paper that originated the current web discussions..

www.ndss-symposium.org..._paper.pdf
_________________
Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 

Does a mobile recognize if a paging regquest is delayed from genuine source in comparison to a paging request from a fake cell tower?  

The paging runs on PCH Paging CHannel of the physical layer (L1). It seems that a UE cannot detect if after being out of range of a tracking area that it gets paged by a FBS.

Is paging in 5G different from LTE related to crypto?  

Can anybody explain how the PCCH and the PCH interwork in 5G?