基于强化学习的IMS及软交换网络主动防御安全策略  

An IMS and Soft-switched Network Active Defense Security Strategy Based on Reinforcement Learning

作　　者：卜宪德 刘世栋 位祺 张立杨 BU Xiande;LIU Shidong;WEI Qi;ZHANG Liyang(State Grid Smart Grid Research Institute Co.,Ltd.,Nanjing 210003,Jiangsu Province,China;State Grid Economic and Technological Research Institute Co.,Ltd.,Changping District,Beijing 102209,China;Economic and Technological Research Institute,State Grid Shandong Electric Power Company,Jinan 250021,Shandong Province,China)

机构地区：[1]国网智能电网研究院有限公司,江苏省南京市210003 [2]国网经济技术研究院有限公司,北京市昌平区102209 [3]国网山东省电力公司经济技术研究院,山东省济南市250021

出　　处：《电力信息与通信技术》2024年第6期45-51,共7页Electric Power Information and Communication Technology

基　　金：国家电网有限公司总部科技项目资助“面向新型电力系统的高隔离性通信网架构及演进关键技术”(5108-202218280A-2-416-XG)。

摘　　要：面对调度交换网从传统的程控交换机组网技术向IP语音技术演进过程中出现的网络安全问题,文章首先分析了IP多媒体子系统(IP multimedia subsystem,IMS)核心网络和软交换网络2种IP语音电话网络的安全风险和现有的安全防护措施。通过分析现有安全防护措施的薄弱之处,在入侵响应系统架构下,文章提出一种基于强化学习的IMS及软交换网络主动防御安全策略。该策略指导网络中设备根据运行状态,主动采取对应动作以应对网络安全问题,决策过程由强化学习机制完成。经计算验证,基于强化学习的IMS及软交换网络主动防御安全策略在网络遭受不同类型的攻击时,可以达到灵活的主动防御目的。To solve the security problems in the process of switching networking technology to Voice over Internet protocol of dispatching switching network,this paper first analyzes the security risks and existing security protection measures of IMS and soft-switched network.Based on the analysis of the weakness of the existing security protection measures,this paper proposes an active defense security strategy of IMS and soft-switched network based on reinforcement learning under the intrusion response system.This strategy guides the devices in the network to take corresponding actions according to the running state to deal with network security problems,and the decision-making process is completed by the mechanism of reinforcement learning.The calculation results show that the active defense security strategy of IMS and soft-switched network based on reinforcement learning can play a flexible role in proactive defense against different types of attacks.

关 键 词：IMS核心网络 软交换网络 强化学习 安全策略 

分 类 号：TN915.853[电子电信—通信与信息系统]