Core network security penetration test method, system and equipment based on ontology rule

Abstract

The invention belongs to the technical field of 5G network security, and discloses a core network security penetration test method, system and device based on an ontology rule. The method comprises the following steps of: constructing a model for reflecting semantics of a core network; constructing a security detection rule for a specific attack; the security detection rule and the domain model are put into an inference engine, and vulnerabilities, attack chains and / or corresponding defense chains which may occur in the service execution process are inferred; and executing a penetration test. Aiming at the current situation that a penetration test system for reflecting core network semantics is lacked at present, an ontology-based representation method is adopted to establish an ontology model of a core network; constructing a security detection rule for the key network element according to the semantic model to realize discovery of vulnerabilities and attack chains; and completing defense chain construction according to a discovery result of the attack chain.

Description

technical field [0001] The invention belongs to the technical field of 5G network security, and in particular relates to a core network security penetration testing method, system and equipment based on ontology rules. Background technique [0002] At present, the 5G security requirements defined by the International Standardization Organization 3GPP are mainly applicable to three application scenarios, namely enhanced mobile broadband (eMBB, Enhanced Mobile Broadband), massive machine type communication (mMTC, massive Machine Type Communication), and ultra-reliable low-latency communication ( uRLLC, ultra-Reliable Low Latency Communication). In addition to carrying traditional voice and data services, a large number of vertical industry applications, such as the Internet of Things, Internet of Vehicles, remote data services, virtual reality, and augmented reality applications, will also be realized and popularized through 5G networks. In order to improve the flexibility an...

AI Technical Summary

Problems solved by technology

There is also no unified vulnerability attack and defense rule base, resulting in the output of penetration testing often relying on the personal experience and prior knowledge of penetration testing engineers and their teams

Images