Research and practice of software-defined security technology architecture in the 5G+ era

Shuo QUAN; Xuliang WANG; Zeya ZHU

doi:10.11959/j.issn.1000-0801.2021277

您当前的位置：

首页 >

文章列表页 >

Research and practice of software-defined security technology architecture in the 5G+ era

Topic: Programmable Network in the 5G + Era | 更新时间：2024-06-05

- Research and practice of software-defined security technology architecture in the 5G+ era
- Telecommunications Science Vol. 37, Issue 12, Pages: 60-71(2021)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2021277
  CLC： TP393
- Published Online：2021-12，
  
  Published：20 December 2021
- 稿件说明：
移动端阅览
Shuo QUAN, Xuliang WANG, Zeya ZHU. Research and practice of software-defined security technology architecture in the 5G+ era[J]. Telecommunications science, 2021, 37(12): 60-71.
DOI：

Shuo QUAN, Xuliang WANG, Zeya ZHU. Research and practice of software-defined security technology architecture in the 5G+ era[J]. Telecommunications science, 2021, 37(12): 60-71. DOI： 10.11959/j.issn.1000-0801.2021277.

摘要

新基建和数字经济激发了云网安全的保障需求，云网融合安全也是未来的重要发展趋势。首先分析了面向5G专网用户提供整体安全服务面临的三大类问题，提出了在5G+时代软件定义安全整体架构。其次基于该架构介绍了相应的原型系统的设计与实现。最后验证了基于云化构架的软件定义安全编排与调度体系有助于精确化地整体解决5G+时代5G专网企业客户的业务安全威胁和隐患，为后续的研究提供了系统性的参考价值。

Abstract

Cloud network security has become a strong need under the background of the new infrastructure and digital economy

while cloud network integration security has been defined as an ongoing trends.Initially

three major types of problems facing 5G private network users were presented in providing overall security services

and an overall software-defined security architecture in the 5G+ era was proposed.Furthermore

the corresponding prototype system design and implementation was discussed based on this architecture.At the end

the verification shows that the software-defined security orchestration and scheduling system based on the cloud-based architecture helps to accurately solve the overall business security threats and hidden dangers of 5G private network enterprise customers in the 5G+ era

providing systematic reference value for subsequent research.

关键词

Keywords

references

ETSI GS NFV-EVE 011-2018 . Virtualised Network Function;Specification of the Classification of Cloud Native VNF implementations [S ] . 2018 .

王旭亮 , 刘增义 , 胡雅婕 , 等 . 基于NFV MANO的边缘计算多种智能化部署方案研究 [J ] . 电子技术应用 , 2019 , 45 ( 10 ): 19 - 24 , 28 .

WANG X L , LIU Z Y , HU Y J , et al . Research of various intel-ligent multi-access edge computing deployment solutions based on NFV MAN Chinese Full Text [J ] . Application of Electronic Technique , 2019 , 45 ( 10 ): 19 - 24 , 28 .

ETSI GR NFV-REL 011-2020 . Management and Orchestration;Report on NFV-MANO software modification [S ] . 2020 .

钱成功 . 基于SRv6的服务功能链系统设计与实现 [D ] . 北京:北京邮电大学 , 2020 .

QIAN C G . Design and implementation of service function chain system based on SRv6 [D ] . Beijing:Beijing University of Posts and Telecommunications , 2020 .

徐玉伟 , 赵宝康 , 时向泉 , 等 . 容器化安全服务功能链低延迟优化编排研究 [J ] . 信息网络安全 , 2020 , 20 ( 7 ): 11 - 18 .

XU Y W , ZHAO B K , SHI X Q , et al . Low-latency optimal or-chestration of containerized security service function Chain Chinese full text [J ] . Netinfo Security , 2020 , 20 ( 7 ): 11 - 18 .

刘国荣 , 沈军 , 白景鹏 . 可定义的6G安全架构 [J ] . 移动通信 , 2021 , 45 ( 4 ): 54 - 57 .

LIU G R , SHEN J , BAI J P . A definable 6G security Architec-ture Chinese full text [J ] . Mobile Communications , 2021 , 45 ( 4 ): 54 - 57 .

张鉴 , 唐洪玉 , 侯云晓 . 基于软件定义的5G网络安全能力架构 [J ] . 中兴通讯技术 , 2019 , 25 ( 4 ): 25 - 29 .

ZHANG J , TANG H Y , HOU Y X . Security capability architec-ture of software-defined 5G Network Chinese full text [J ] . ZTE Technology Journal , 2019 , 25 ( 4 ): 25 - 29 .

张华 , 岳皓 . 基于SDN的港口安全资源池建设 [J ] . 网络空间安全 , 2020 , 11 ( 3 ): 39 - 43 .

ZHANG H , YUE H . Construction of port security resource pool based on SDN Chinese Full Text [J ] . Cyberspace Security , 2020 , 11 ( 3 ): 39 - 43 .

李畅 , 徐琪 , 李光磊 , 等 . 基于服务功能链的多域安全服务按需适配方法 [J ] . 计算机工程与应用 , 2018 , 54 ( 21 ): 56 - 64 , 119 .

LI C , XU Q , LI G L , et al . On-demand adaptation method for multi-domain security services based on service function chaining Chinese Full Text [J ] . Computer Engineering and Ap-plications , 2018 , 54 ( 21 ): 56 - 64 , 119 .

华彦裴 . 智慧协同网络下基于流量感知的功能族群适配机制设计与实现 [D ] . 北京:北京交通大学 , 2020 .

HUA Y P . Design and implementation of functional group adapta-tion mechanism based on traffic awareness in smart collaborative network [D ] . Beijing:Beijing Jiaotong University , 2020 .

Views

537

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Variable granularity service function chain mapping algorithm based on microservice architecture

Improved grey wolf optimization algorithm based service function chain mapping algorithm

Overview of programmable data plane technology

Dynamic scheduling method of service function chain executors based on the mimic defense architecture

Reference architecture of the telecom network security protection system for cloud network convergence

Related Author

Xiaochun WU

Chen HONG

Yue ZHANG

Junnan ZHANG

Jingjing ZHOU

Chen HONG

Yue ZHANG

Related Institution

National Network New Media Engineering Research Center, Institute of Acoustics, Chinese Academy of Sciences

University of Chinese Academy of Sciences

Sichuan Communication Science Planning and Design Co.,Ltd.

University of Electronic Science and Technology of China

四川通信科研规划设计有限责任公司，四川成都 610041;2.电子科技大学

⁰