5G新型基础设施的安全防护思路和技术转换

doi:10.3969/j.issn.1671-1122.2020.09.014

信息网络安全 ›› 2020, Vol. 20 ›› Issue (9): 67-71.doi: 10.3969/j.issn.1671-1122.2020.09.014

5G新型基础设施的安全防护思路和技术转换

刘文懋(), 尤扬

绿盟科技集团股份有限公司,北京 100089

收稿日期:2020-07-16 出版日期:2020-09-10 发布日期:2020-10-15
通讯作者: 刘文懋 E-mail:liuwenmao@nsfocus.com
作者简介:刘文懋（1983—）,男,浙江,高级工程师,博士,主要研究方向为计算安全、物联网安全|尤扬（1983—）,男,北京,工程师,硕士,主要研究方向为网络安全、可信计算

Shifting Security Protection Mindset and Mechanisms for Novel 5G Infrastructures

LIU Wenmao(), YOU Yang

NSFOCUS Technologies Group Co., Ltd., Beijing 100089, China

Received:2020-07-16 Online:2020-09-10 Published:2020-10-15
Contact: Wenmao LIU E-mail:liuwenmao@nsfocus.com

摘要/Abstract

摘要：

5G作为当前新基建中最重要的网络基础设施之一,在接入网、核心网采用了大量新技术、新架构,其带来的风险和安全运营变化需要重点关注。与安全防护技术的升级相比, 5G环境下整体安全防护思路调整显得更为重要,文章介绍了5G新型网络面临的安全挑战及其对应的安全防护理念和技术改变。

关键词: 5G安全, 安全左移, 边缘计算

Abstract:

5G Networking has been becoming the most important network infrastructure in current novel infrastructure construction campaign, where a number of novel technologies and architectures are being applied.as a result, the security risk and security operation changes need to be addressed. Compared to the security technology upgrade itself, the whole protection mindset adjustment is more important. In this paper, we introduces the security challenges of 5G novel network, and the corresponding safety protection concept and mechanisms.

Key words: 5G security, shift left, edge computing

中图分类号:

TP309

刘文懋, 尤扬. 5G新型基础设施的安全防护思路和技术转换[J]. 信息网络安全, 2020, 20(9): 67-71.

LIU Wenmao, YOU Yang. Shifting Security Protection Mindset and Mechanisms for Novel 5G Infrastructures[J]. Netinfo Security, 2020, 20(9): 67-71.

图/表 3

参考文献 8

[1]	SHIN S, PORRAS P, YEGNESWARAN V, et al. FRESCO: Modular Composable Security Services for Software-defined Networks[C]// Internet Society. Proceedings of Network and Distributed Security Symposium, April 23, 2013, San Diego, USA. San Diego: Internet Society , 2013: 135-139.
[2]	SHIN S, GU G. Attacking Software-defined Networks: A First Feasibility Study[C]// ACM. In Proceedings of the second ACM SIGCOMM workshop on Hot Topics in Software Defined Networking (HotSDN ‘13). August 2013, New York, NY, USA. New York: ACM, 2013: 165-166.
[3]	RICHARD K D, COYNE J, WEIL R. Adding Attributes to Role-based Access Control[J]. Computer, 2010,43(6):79-81.
[4]	GS-NFV-SEC-003, ETSI GS NFV-SEC 003 V1.1.1[S]. France, ETSI, 2014.
[5]	JIANG Jian, WU Hongjian. Key Technologies and Impact Analysis of Network Function Virtualization[J], Information and Communications Technology and Policy, 2014(12):1-5.
	姜建, 吴宏建. 网络功能虚拟化关键技术及影响分析[J]. 电信网技术, 2014(12):1-5.
[6]	HAWILO H, SHAMI A, MIRAHMADI M, et al. NFV: State of the Art, Challenges, and Implementation in Next Generation Mobile Networks (vEPC)[J]. IEEE Network, 2014,28(6):18-26.
[7]	MCGUIRE K, The Truth about Docker Container Lifecycles [EB/OL]. https://events.static.linuxfound.org/sites/events/files/slides/cc15_mcguire.pdf, 2015-8-17.
[8]	LIU Wenmao, QIU Xiaofeng, CHEN Pengcheng, et al. A Software Defined Security Architecture in SDN Environment[J]. Journal of Frontiers of Computer Science and Technology, 2015,9(1):63-70.

服务链	测试包大小
	64 B	512 B	1518 B
OVS	800 Mbps	3180 Mbps	5600 Mbps
NSF	2770 Mbps	9460 Mbps	9500 Mbps

URL	状态
/webfront/order/validPageCode.do	B
/webfront/jifei/getOrderId.do	M
/webfront/jifei/updateOrderId.do	M
/webfront/order/orderToneWeb.do	E

5G新型基础设施的安全防护思路和技术转换

Shifting Security Protection Mindset and Mechanisms for Novel 5G Infrastructures

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 3

参考文献 8

相关文章 1

编辑推荐

Metrics

本文评价