融合媒体环境下5G核心网全流量安全检测分析系统的设计与实现  

Design and Implementation of the Full-flow Security Detection and Analysis System for 5G Core Network in Converged Media Environment

作　　者：黄振川 Huang Zhenchuan(China Media Group,Beijing 100020,China)

机构地区：[1]中央广播电视总台,北京100020

出　　处：《广播与电视技术》2023年第2期106-112,共7页Radio & TV Broadcast Engineering

摘　　要：本文首先从5G全方位赋能融合媒体体系的5G媒体应用场景出发,阐述了5G核心网信令面和用户面可能面临的多种安全风险,然后针对异常终端接入和信令风暴等风险,重点给出了5G核心网全流量安全检测与分析系统的设计要点,包括系统架构设计、5G核心网接口数据采集、5G核心网4大类协议解析、信息关联回填和系统部署,最后描述了系统的功能实现,包括终端异常或非法接入检测、信令风暴检测、异常信令分析、切片安全审计与分析和用户面UPF业务综合分析。Starting from the 5G media application scenarios of the 5G converged media system,this paper first describes the various security risks that the 5G core network signaling plane and user plane may face.Then,in view of the risks of abnormal terminal access and signaling storms that may be faced,the design of the 5G core network full-flow security detection and analysis system is discussed,including system architecture design,5G core network interface data collection,5G core network four major types of protocol analysis,information association backfill and system deployment.Finally,the six major functional implementations of the system are described,including terminal abnormal or illegal access monitoring,signaling storm monitoring,abnormal signaling analysis,network slice security audit and analysis,and user plane function UPF service comprehensive analysis.

关 键 词：5G 核心网安全 信令风暴 全流量安全分析 

分 类 号：TP915.08[自动化与计算机技术]