基于数字孪生的5G网络安全推演  

5G Network Security Deduction Based on Digital Twin

作　　者：马宇威 杜海涛 粟栗 安宁宇 MAYuwei;DU Haitao;SU Li;AN Ningyu(Security Technology Research Institute,China Mobile Research Institute,Beijing 100053,China)

机构地区：[1]中国移动通信有限公司研究院安全技术研究所,北京100053

出　　处：《计算机工程与应用》2024年第5期291-298,共8页Computer Engineering and Applications

基　　金：国家重点研发计划(2022YFB2902203);北京邮电大学-中国移动研究院联合创新中心资助。

摘　　要：为了对5G网络可能遭受的攻击及缓解攻击的措施进行研究,提出针对5G网络的安全推演模型。模型通过数字孪生技术将物理网络映射至孪生网络中,并依据模型构建虚实结合的网络推演环境;依据设计的推演场景在孪生网络中进行攻防推演,并将推演结果应用于物理网络中。结果表明利用孪生技术进行推演可减少对物理网络的影响,其得到的推演结果也可以无差别地应用于物理网络中,且具有一致的防御效果。In order to study the possible attacks on 5G network and the measures to mitigate the attacks,a security deduc-tion model for 5G network is proposed.The model maps the physical network to the twin network through digital twin technology,and builds a virtual-real network deduction environment based on it.According to the designed deduction sce-narios,the attack and defense deductions are performed in the twin network and the deductions’results are applied to the physical network.The results show that the deductions using the twin technology can reduce the impact on the physical network,and the results can be applied to the physical network indiscriminately and have consistent defense effects.

关 键 词：5G网络 安全推演 数字孪生 蜜网系统 数据联动 攻击模型 专家系统 

分 类 号：TP302.1[自动化与计算机技术—计算机系统结构]