Multi-level attack mitigation method for 5G network based on SDN and NFV

Abstract

The present invention provides a 5G network multi-level attack mitigation method based on SDN and NFV, including the following steps: Step 1: Extend the SDN-MN architecture; Step 2: According to the extended SDN-MN architecture, obtain the application of SDN-MN and the Evidence-driven security assessment mechanism for NFV detection; Step 3: measure the security level of the static network through the evidence-driven security assessment mechanism and the generated new probability evidence-driven attack graph; Step 4: Security in the evidence-driven security assessment mechanism The evaluation algorithm calculates the state node probability, action node probability and posterior probability in the attack graph; step 5: use SDN control and NFV to deploy the attack mitigation mechanism, and deploy the corresponding attack mitigation plan based on the security level obtained from the evidence-driven attack graph. The present invention can be directly applied to the 5G network, and can make policy judgment according to the current network environment in time, and solve the deployment problem of the attack mitigation policy.

Description

technical field [0001] The present invention relates to the field of mobile communication security, in particular to a multi-level attack mitigation method for 5G networks based on SDN and NFV. Background technique [0002] The development of mobile communication networks has promoted the birth of the next generation of mobile communication 5G networks. 5G networks can connect various smart devices and heterogeneous networks together, making 5G networks more diverse and complex than ever. With a large amount of sensitive and confidential information accessing 5G networks, how to provide effective security services is a key issue that 5G networks need to solve. [0003] At the same time, multi-stage attacks are one of the most harmful cybersecurity threats. It tries to conceal the attack by attacking in multiple steps, and each step deals less damage than the total damage. Most current security devices only analyze single-stage attacks, so it is difficult to prevent a comp...

AI Technical Summary

Problems solved by technology

There are currently many studies using attack graphs for general network security assessment, but these methods cannot be directly used in 5G networks

The second is the choice of security strategy

There are also some studies on strategy selection, but most of them study strategy selection in special environments and cannot be directly applied to SDN-MN

Images