5G“云网边端”一体化纵深安全防护体系研究及应用

doi:10.11959/j.issn.1000-0801.2022276

电信科学 ›› 2022, Vol. 38 ›› Issue (10): 173-179.doi: 10.11959/j.issn.1000-0801.2022276

5G“云网边端”一体化纵深安全防护体系研究及应用

张国新

中国电信股份有限公司广东分公司，广东广州 510081

修回日期:2022-10-14 出版日期:2022-10-20 发布日期:2022-10-01
作者简介:张国新（1968- ），男，博士，中国电信股份有限公司广东分公司副总经理，中国电信集团有限公司科学技术委员会委员，长期从事通信网络、云计算、大数据、网络安全、企业数字化等专业规划建设及运营工作

Research and application of 5G cloud-network-edge-end integrated in-depth security protection system

Guoxin ZHANG

Guangdong Branch of China Telecommunications Co., Ltd., Guangzhou 510081, China

Revised:2022-10-14 Online:2022-10-20 Published:2022-10-01

摘要/Abstract

摘要：

创新地提出了一种5G“云网边端”一体化纵深安全防护实现方案，探索了5G定制网的网络安全防护体系，介绍了体系的基本架构、特性、实现方案和应用效果。在实现方案中重点介绍了两个要点：通过部署5G“云网边端”4个方面的安全系统，形成多层次、多维度的安全防护能力；建立适配体系的运营流程，包含一键加固、安全防御、态势感知和一键应急4个部分。最后给出了5G“云网边端”一体化纵深安全防护体系的实际应用效果。

关键词: 5G, 云网边端, 一体化, 可信终端, 端到端

Abstract:

A 5G cloud-network-edge-end integrated in-depth security protection implementation scheme was innovatively proposed, the network security protection system of 5G customized network was explored, and the basic architecture, characteristics, implementation scheme and application effect of the system were introduced.In the implementation plan, two key points were emphasized.Firstly, by deploying the security system of the four aspects of the 5G cloud network, the edge and the end, the multi-level and multi-dimensional security protection capability was formed.Secondly, the operation process of the adaptation system, including one-key reinforcement, security defense, situational awareness and one-key emergency response was established.Finally, the practical application effect of the 5G cloud-network-edge-end integrated in-depth security protection system was given.

Key words: 5G, cloud-network-edge-end, integration, trusted terminal, end-to-end

中图分类号:

TN918.91

张国新. 5G“云网边端”一体化纵深安全防护体系研究及应用[J]. 电信科学, 2022, 38(10): 173-179.

Guoxin ZHANG. Research and application of 5G cloud-network-edge-end integrated in-depth security protection system[J]. Telecommunications Science, 2022, 38(10): 173-179.

图/表 3

参考文献 10

[1]	中国电信. 中国电信5G定制网产品手册（2020发布版）[R]. 2020.
	China Telecom. China Telecom 5G customized network prod-uct manual (Version 2020)[R]. 2020.
[2]	张滨 . 5G边缘计算安全研究与应用[J]. 电信工程技术与标准化, 2020,33(12): 1-7.
	ZHANG B . Research and application on the 5G edge compu-ting[J]. Telecom Engineering Technics and Standardization, 2020,33(12): 1-7.
[3]	RAMEZAN A , ABDELNASSER B , LIU W ,et al. EAP-ZKP:AZero-knowledge proof based authentication protocol to prevent DDoS attacks at the edge in beyond 5G[C]// Proceedings of 2021 IEEE 4th 5G World Forum (5GWF). Piscataway:IEEE Press, 2021: 259-264.
[4]	IASHVILI G , IAVICH M , BOCU R ,et al. Intrusion detection system for 5G with a focus on DOS/DDOS attacks[C]// Pro ceedings of 2021 11th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems:Technology and Applications. Piscataway:IEEE Press, 2021: 861-864.
[5]	YUAN J , ZHANG F , YU L ,et al. Research of security of 5G-enabled industrial Internet and its application[C]// Proceedings of 2021 IEEE Conference on Telecommunications,Optics and Computer Science. Piscataway:IEEE Press, 2021: 428-435.
[6]	YAN W F , SHU Q , GAO P . Security risk prevention and control deployment for 5G private industrial networks[J]. China Communications, 2021,18(9): 167-174.
[7]	ZHANG X J , FEI J X , JIANG H T ,et al. Research on power 5G business security architecture and protection technologies[C]// Proceedings of 2021 6th International Conference on Power and Renewable Energy (ICPRE). Piscataway:IEEE Press, 2021: 913-917.
[8]	MATHEW A , . Network slicing in 5G and the security concerns[C]// Proceedings of 2020 4th International Conference on Computing Methodologies and Communication (ICCMC). Piscataway:IEEE Press, 2020: 75-78.
[9]	全国信息安全标准化技术委员会. 信息安全技术网络安全等级保护基本要求[R]. 2019.
	National Information Security Standardization Technical Committee. Information security technology -- Basic requirements for classified protection of network security[R]. 2019.
[10]	韩洁, 钟逸铭, 陈明亮 . 电力行业网络安全态势感知分析[J]. 软件, 2022,43(5): 128-130.
	HAN J , ZHONG Y M , CHEN M L . Analysis of network security situation awareness in power industry[J]. Software, 2022,43(5): 128-130.

[1]	王妍, 彭莹. 国际电信联盟（ITU）6G标准化研究[J]. 电信科学, 2023, 39(6): 129-138.
[2]	张辰, 王红凯, 毛冬, 潘司晨, 赵帅. 面向电力终端的轻量化5G硬加密通信模组研究及应用[J]. 电信科学, 2023, 39(6): 159-169.
[3]	赵亚飞, 闫冰, 孙耀华, 彭木根. 低轨星座通导一体化：现状、机遇和挑战[J]. 电信科学, 2023, 39(5): 90-100.
[4]	许浩, 吴琳. 基于5G网络的VoWi-Fi互操作研究[J]. 电信科学, 2023, 39(5): 144-154.
[5]	王建斌, 王淑春, 廖尚金, 施淑媛. 基于DCNN-LSTM负荷预测算法的5G基站节能系统研究[J]. 电信科学, 2023, 39(4): 133-141.
[6]	张乐, 马洪源. 运营商网络边缘云安全实践[J]. 电信科学, 2023, 39(4): 165-172.
[7]	谭艳霞, 王光全, 王泽林, 郑滟雷, 张贺, 张晨芳, 韩赛, 沈世奎. SDN智能管控编排系统技术方案研究[J]. 电信科学, 2023, 39(3): 143-152.
[8]	刘思杨, 张云飞. 从智能网联1.0到智能网联2.0：面向双智的实时数字孪生城市构建[J]. 电信科学, 2023, 39(3): 32-44.
[9]	刘光海, 肖天, 李贝, 程新洲, 薛永备, 李一, 朱小萌, 郑雨婷. 4G载波向5G重耕之前的5G业务覆盖能力研究[J]. 电信科学, 2023, 39(3): 115-123.
[10]	刘晨熙, 马睿, 彭木根. 无人机通信感知一体化：架构、技术与展望[J]. 电信科学, 2023, 39(2): 1-9.
[11]	刘雅琼, 吕哲, 赵亚飞, 寿国础. AI技术在卫星通信/互联网领域的应用综述[J]. 电信科学, 2023, 39(2): 10-24.
[12]	陈佳, 章坚武, 张浙亮. 基于上下文信息与注意力特征的欺骗语音检测[J]. 电信科学, 2023, 39(2): 92-102.
[13]	鲁玉龙, 沈海燕, 张俊尧, 杨兴磊, 解亚龙, 杨玲玲. 智能铁路新一代移动通信关键技术探索与展望[J]. 电信科学, 2023, 39(1): 30-41.
[14]	巩传兵, 杨明帅, 吴松, 葛海平, 张守国, 刘磊, 祁云山, 徐辉. 基站价值评估模型的应用研究[J]. 电信科学, 2023, 39(1): 100-107.
[15]	张孟哲, 夏宜君. 5G在工业领域的应用现状、问题及推广建议[J]. 电信科学, 2023, 39(1): 126-135.

5G“云网边端”一体化纵深安全防护体系研究及应用

Research and application of 5G cloud-network-edge-end integrated in-depth security protection system

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 3

参考文献 10

相关文章 15

Metrics

推荐阅读 0