5G network multistage attack mitigation method based on software defined network (SDN) and network function virtualization (NFV)

Abstract

The invention provides a 5G network multistage attack mitigation method based on SDN and FNV. The 5G network multistage attack mitigation method comprises the following steps of a first step, expanding an SDN-MN architecture; a second step, according to the expanded SDN-MN architecture, obtaining a proof driving security evaluation mechanism in which a software defined network-mobile network (SDN-MN) based on NFV detection; a third step, measuring the security level of a static network through the proof driving security evaluation mechanism and a generated new-probability proof driving attack graph; a fourth step, calculating a state node probability, an action node probability and a posterior probability in the attack graph through a security evaluation algorithm in the proof driving security evaluation mechanism; and a fifth step, disposing an attack mitigation mechanism by means of SDN control and NFV, and disposing a corresponding attack mitigation plan through a security level which is obtained from the proof driving attack graph. The 5G network multistage attack mitigation method can be directly used in a 5G network and can perform strategy decision according to a current network environment and settles an attack mitigation strategy disposition problem.

Description

technical field [0001] The present invention relates to the field of mobile communication security, in particular to a multi-level attack mitigation method for 5G networks based on SDN and NFV. Background technique [0002] The development of mobile communication networks has promoted the birth of the next generation of mobile communication 5G networks. 5G networks can connect various smart devices and heterogeneous networks together, making 5G networks more diverse and complex than ever. With a large amount of sensitive and confidential information accessing 5G networks, how to provide effective security services is a key issue that 5G networks need to solve. [0003] At the same time, multi-stage attacks are one of the most harmful cybersecurity threats. It tries to conceal the attack by attacking in multiple steps, and each step deals less damage than the total damage. Most current security devices only analyze single-stage attacks, so it is difficult to prevent a comp...

AI Technical Summary

Problems solved by technology

There are currently many studies using attack graphs for general network security assessment, but these methods cannot be directly used in 5G networks

The second is the choice of security strategy

There are also some studies on strategy selection, but most of them study strategy selection in special environments and cannot be directly applied to SDN-MN

Images