基于SOAR的电力5G MEC安全解决方案

SOAR-based 5G MEC security solution for electric power

5G技术与MEC技术的融合为电力行业的升级转型提供了有力的支撑,但电力5G MEC采用了新型架构和部署,传统的安全防护措施无法有效应对新环境下出现的各类安全威胁和挑战。为此,提出一种基于安全编排自动化与响应技术的电力5G MEC安全解决方案。依据智能电网业务在接入的高开放性、异构终端连接的海量性、业务的低延时性和威胁处理的低干预性四个方面的安全需求特征,针对终端安全威胁、APP安全威胁、接入安全威胁和威胁处置不及时等问题,提出将SOAR组件引入5G MEC,实现威胁情报收集、安全事件响应编排和执行自动化;并设计云边、边边协同的层级MEC部署方案,提供整体联动的安全保障。仿真实验结果表明,所设计的方案可以依据剧本快速灵活部署,反应时间短,可有效抵御常见攻击。

The integration of 5G technology and MEC(multi-access edge computing)technology can provide strong support for the upgrading and transformation of the electric power industry,and a new type of architecture and deployment is applied in the electric power 5G MEC,and the traditional security protection measures can not effectively respond to all kinds of security threats and challenges that appear in the new environment.A security solution for electric power 5G MEC based on security orchestration automation and response technology is proposed.According to the security demand characteristics of smart grid services in four aspects:high openness of access,massive connectivity of heterogeneous terminals,low latency of services,and low intervention of threat processing,and in allusion to the problems of terminal security threat,APP security threat,access security threat,and untimely disposal of threats,SOAR components are introduced into 5G MEC to realize threat intelligence collection,security event response orchestration and execution automation.The cloud-side and edge-side collaborative tier MEC deployment scheme is used to provide overall linked security assurance.The simulation experimental results show that the scheme can be deployed quickly and flexibly according to the script,with short response time,and can effectively defend against common attacks.