移动边缘计算网络安全防护关键技术研究

Research on Key Technologies of Mobile Edge Computing Network Security Protection

随着物联网和5G网络的快速发展,单纯依靠云计算的集中式数据处理方式将无法满足以物联网感知为背景的大规模数据处理需求。移动边缘计算(MEC)作为新兴计算范式,是云计算的有力补充。但MEC的开放特性加剧了其面临的非授权访问、敏感数据泄露、网络攻击等安全风险。文章基于MEC在5G网络环境中面临的安全风险,结合MEC网络基础支撑统一化、能力服务化、流程编排化等特点,提出移动边缘计算网络安全防护方案,突破安全功能高效虚拟化、安全云服务联动、安全服务动态编排、安全功能自适应部署与协同调度、态势感知和高级威胁检测等技术瓶颈,形成移动边缘计算网络安全纵深防御体系,对于推进移动通信网络信息安全建设具有重要意义。

With the rapid development of the Internet of Things and 5G network,the centralized data processing approach that relies solely on cloud computing would not be able to meet the needs of large-scale data processing in the background of IoT awareness.As an emerging computing paradigm,Mobile Edge Computing(MEC)is a beneficial supplement to cloud computing.However,due to the open characteristics of MEC such as content-aware,real-time computing,and parallel processing,the security risks faced by MEC are aggravated,such as unauthorized access,sensitive data leakage,and network attacks.Based on the security risks faces by MEC in the 5G network environment,combined with the characteristics of MEC network infrastructure support unification,capability service,process orchestration etc,this paper proposes a security protection scheme for mobile edge computing network.Breaking through the key technical bottlenecks of efficient virtualization of security functions,interaction of security cloud services,dynamic orchestration of security services,adaptive deployment and collaborative scheduling of security functions,situation awareness and advanced threat detection,the defense in depth system of MEC network security is formed.It is of great significance for promoting the construction of information security in mobile communication networks.