基于数字孪生的5G网络安全推演

doi:10.3778/j.issn.1002-8331.2210-0248

摘要/Abstract

摘要： 为了对5G网络可能遭受的攻击及缓解攻击的措施进行研究，提出针对5G网络的安全推演模型。模型通过数字孪生技术将物理网络映射至孪生网络中，并依据模型构建虚实结合的网络推演环境；依据设计的推演场景在孪生网络中进行攻防推演，并将推演结果应用于物理网络中。结果表明利用孪生技术进行推演可减少对物理网络的影响，其得到的推演结果也可以无差别地应用于物理网络中，且具有一致的防御效果。

关键词: 5G网络, 安全推演, 数字孪生, 蜜网系统, 数据联动, 攻击模型, 专家系统

Abstract: In order to study the possible attacks on 5G network and the measures to mitigate the attacks, a security deduction model for 5G network is proposed. The model maps the physical network to the twin network through digital twin technology, and builds a virtual-real network deduction environment based on it. According to the designed deduction scenarios, the attack and defense deductions are performed in the twin network and the deductions’ results are applied to the physical network. The results show that the deductions using the twin technology can reduce the impact on the physical network, and the results can be applied to the physical network indiscriminately and have consistent defense effects.

Key words: 5G network, security deduction, digital twin, honeynet system, data linkage, attack model, expert system

马宇威, 杜海涛, 粟栗, 安宁宇. 基于数字孪生的5G网络安全推演[J]. 计算机工程与应用, 2024, 60(5): 291-298.

MA Yuwei, DU Haitao, SU Li, AN Ningyu. 5G Network Security Deduction Based on Digital Twin[J]. Computer Engineering and Applications, 2024, 60(5): 291-298.

参考文献

[1] The White House. National strategy to secure 5G of the United States of America[R]. Washington DC: The White House, 2020.
[2] 3GPP. System architecture for the 5G system: TS23. 501[S]. France: 3GPP Support Office, 2019.
[3] 冯登国, 徐静, 兰晓. 5G移动通信网络安全研究[J]. 软件学报, 2018, 29(6): 1813-1825.
FENG G D, XU J, LAN X. Study on 5G mobile communication network security[J]. Journal of Software, 2018, 29(6): 1813-1825.
[4] SHAFI M, MOLISCH A F, SMITH P J, et al. 5G: a tutorial overview of standards, trials, challenges, deployment, and practice[J]. IEEE Journal on Selected Areas in Communications, 2017, 35: 1201-1221.
[5] JI X S, HUANG K Z, JIN L, et al. Overview of 5G security technology[J]. Science China Information Sciences, 2018, 61: 081301.
[6] IMT-2020(5G)推进组. 5G安全报告[R]. 北京: 中国信息通信研究院, 2020.
IMT-2020(5G) Promotion Group. 5G security report[R]. Beijing: China Academy of Information and Communications Technology, 2020.
[7] 方滨兴, 贾焰, 李爱平, 等. 网络空间靶场技术研究[J]. 信息安全学报, 2016, 1(3): 1-9.
FANG B X, JIA Y, LI A P, et al. Cyber ranges: state-of-the-art and research challenges[J]. Journal of Cyber Security, 2016, 1(3): 1-9.
[8] 李馥娟, 王群. 网络靶场及其关键技术研究[J]. 计算机工程与应用, 2022, 58(5): 12-22.
LI F J, WANG Q. Research on cyber ranges and its key technologies[J]. Computer Engineering and Applications, 2022, 58(5): 12-22.
[9] 杨林瑶, 陈思远, 王晓, 等. 数字孪生与平行系统: 发展现状、对比及展望[J]. 自动化学报, 2019, 45(11): 2001-2031.
YANG L Y, CHEN S Y, WANG X, et al. Digital twins and parallel systems: state of the art, comparisons and prospect[J]. Acta Automatica Sinica, 2019, 45(11): 2001-2031.
[10] 陶飞, 马昕, 胡天亮, 等. 数字孪生标准体系[J]. 计算机集成制造系统, 2019, 25(10): 2405-2418.
TAO F, MA X, HU T L, et al. Research on digital twin standard system[J]. Computer Integrated Manufacturing System, 2019, 25(10): 2405-2418.
[11] 陶飞, 刘蔚然, 刘检华, 等. 数字孪生及其应用探索[J]. 计算机集成制造系统, 2018, 24(1): 1-18.
TAO F, LIU W R, LIU J H, et al. Digital twin and its potential application exploration[J]. Computer Integrated Manufacturing System, 2018, 24(1): 1-18.
[12] 孙滔, 周铖, 段晓东, 等. 数字孪生网络(DTN): 概念架构及关键技术[J]. 自动化学报, 2021, 47(3): 569-582.
SUN T, ZHOU C, DUAN X D, et al. Digital twin network (DTN): concepts, architecture, and key technologies[J]. Acta Automatica Sinica, 2021, 47(3): 569-582.
[13] 李琳利, 顾复, 李浩, 等. 仿生视角的数字孪生系统信息安全框架及技术[J]. 浙江大学学报 (工学版), 2022, 56(3): 419-435.
LI L L, GU F, LI H, et al. Framework and key technologies of digital twin system cyber security under perspective of bionics[J]. Journal of ZheJiang University (Engineering Science), 2022, 56(3): 419-435.
[14] 石乐义, 李阳, 马猛飞. 蜜罐技术研究新进展[J]. 电子与信息学报, 2019, 41(2): 498-508.
SHI L Y, LI Y, MA M F. Latest Research progress of honeypot technology[J]. Journal of Electronics & Information Technology, 2019, 41(2): 498-508.
[15] 符永铨, 赵辉, 王晓锋, 等. 网络行为仿真综述[J]. 软件学报, 2022, 33(1): 274-296.
FU Y Q, ZHAO H, WANG X F, et al. State-of-the-art survey on network behavior emulation[J]. Journal of Software, 2022, 33(1): 274-296.
[16] 徐瑨, 吴慧慈, 陶小峰. 5G网络空间安全对抗博弈[J]. 电子与信息学报, 2020, 42(10): 2319-2329.
XU J, WU H C, TAO X F. 5G Cyberspace security game[J]. Journal of Electronics & Information Technology, 2020, 42(10): 2319-2329.
[17] 张煜东, 吴乐南, 王水花. 专家系统发展综述[J]. 计算机工程与应用, 2010, 46(19): 43-47.
ZHANG Y D, WU L N, WANG S H. Survey on development of expert system[J]. Computer Engineering and Applications, 2010, 46(19): 43-47.
[18] 杨志强, 粟栗, 杨波, 等. 5G安全技术与标准[M]. 北京: 人民邮电出版社, 2020: 68-76.
YANG Z Q, SU L, YANG B, et al. 5G security technologies and standards[M]. Beijing: Posts & Telecom Press, 2020: 68-76.
[19] 3GPP. Security architecture and procedures for 5G system: TS33. 501[S]. France: 3GPP Support Office, 2020.
[20] 强奇, 武刚, 黄开枝, 等. 5G 安全技术研究与标准进展[J]. 中国科学: 信息科学, 2021, 51(3): 347-366.
QIANG Q, WU G, HUANG K Z, et al. Survey on research and standardization of 5G security technology[J]. Scientia Sinica Information Sciences , 2021, 51(3): 347-366.
[21] 3GPP. Signalling System No.7 (SS7) security gateway; Architecture, functional description and protocol details: TS29.204[S]. France: 3GPP Support Office, 2015.
[22] 3GPP. Mobile Application part (MAP) specification: TS29.002[S]. France: 3GPP Support Office, 2015.