5G网络安全监测预警机制浅析

Analysis of 5G Network Security Monitoring and Early Warning Mechanism

随着5G的发展,对5G网络安全进行监测预警的需求越来越迫切。传统4G网络的安全监测主要部署在IP网络侧,集中在应用层,具有很大的局限性。5G的3GPP标准在核心网中引入了NWDAF网元,实现了将切片特定的网络状态分析信息通知给其他用户,从而根据此进行网络安全监测预警,5G PPP也提出了PulSAR等四项监测功能,实现网络攻击进程监控等功能,但是,这些标准的研究目前只局限于监测预警机制的某一部分。因此,提出了一种基于SDN与现有5G网络架构深度融合的安全监测预警机制,该机制具有较强的扩展性及广泛的适用性,能全面对5G网络安全进行全程监测并预警。

With the development of 5G,the need for monitoring and early warning of 5G network security is becoming more and more urgent.The security monitoring of traditional 4G networks is mainly deployed on the IP network side and concentrated on the application layer,which has great limitations.5G’s 3GPP standard introduces NWDAF network elements in the core network,which realizes the notification of slicespecific network status analysis information to other users,so as to carry out,based on this,the network security monitoring and warning.5G PPP also proposes four monitoring functions,including PulSAR,to implement functions such as network attack process monitoring.However,the research of these standards is currently limited to a certain part of the monitoring and early warning mechanism.Therefore,a security monitoring and early warning mechanism based on the deep integration of SDN and the existing 5G network architecture is proposed.This mechanism has strong scalability and wide applicability,and is able to comprehensively monitor and give early warning of 5G network security.