A DDoS attack detection and defense method and system for 5G network slicing

Abstract

The invention discloses a method and a system for defending DDoS attack detection facing 5G network slicing, and aims to solve the problem that the later defense efficiency of DDoS attack is low caused by the fact that sub-equipment attacked by DDoS under nodes cannot be judged purposefully in the prior art. Accurate feature extraction is carried for flow table information, a Hash table using equipment as a bond is established for recording abnormal data flows of the equipment, and discarding and shielding treatment is carried out in later period, so that purposeful DDoS attack judgment is carried out on the sub-equipment under the nodes is realized, accurate and efficient DDoS detection defense is realized, the attack detection efficiency is improved, the attack relief efficiency after attack detection is improved simultaneously, and security assurance is provided for a 5G network with a great deal of SDN technology. The method and the system are applicable for related fields of network detection defense.

Description

technical field [0001] The invention belongs to the field of network security, and more specifically, relates to a DDoS attack detection and attack defense method and system for 5G network slicing based on SDN technology. Background technique [0002] In the field of mobile communications, from the initial 2G, 3G, to the now widely used 4G network, mobile networks mainly serve mobile phones, and generally only do some optimization for mobile phones. After entering 5G, the communication scenarios will become diversified and complex, and the communication between things will develop rapidly, greatly exceeding the communication needs between people. The traditional cellular network and the "one size fits all" model can no longer meet the different needs of all walks of life for the network in the 5G era. In the future 5G system, the network will be further abstracted into "network slicing" through SDN / NFV technology, thereby supporting the use of thousands of use cases, numero...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to solve the problem that the existing technology cannot target the sub-device under the node under the DDoS attack and cause the low efficiency of defending the DDoS attack in the later stage. The present invention provides a 5G network slicing based on SDN technology. DDoS attack detection and attack defense method and system of

Images