5G communication network security supervision method and system based on edge computing

Abstract

The invention relates to the technical field of 5G communication network security, and discloses a 5G communication network security supervision method and system based on edge computing, and the method comprises the steps: obtaining the number of edge computing nodes and 5G terminal equipment in a supervision region, and collecting and processing the operation parameters of the terminal equipment in real time; the system comprises a data acquisition module, a data processing module, a state evaluation module and an early warning module, real-time and efficient safety supervision on the 5G communication network terminal equipment and the communication link is realized, and the safety of the communication link is further evaluated in the coverage area of each terminal equipment and the edge computing node where the terminal equipment is located. And the security protection capability of the 5G communication network is effectively improved.

Description

TECHNICAL FIELD

[0001] The application relates to the technical field of 5G communication network security, and particularly relates to a 5G communication network security supervision method and system based on edge computing. BACKGROUND

[0002] With the rapid development and wide application of 5G communication technology, the 5G communication network has become an important infrastructure supporting the informationization, digitization and intelligentization development of modern society, however, the high speed, large capacity and low latency characteristics of the 5G network also bring new security challenges.

[0003] The traditional network security supervision has the following problems: the terminal equipment types in the 5G communication network are various and the behaviors are complex, on one hand, there is a risk of single-point equipment failure, and the network security threat cannot be responded quickly, on the other hand, the communication link also faces various security threats.

[0004] In view of the above various inconveniences, the application provides a 5G communication network security supervision method and system based on edge computing. SUMMARY

[0005] The application aims to provide a 5G communication network security supervision method and system based on edge computing, and solve the above technical problems.

[0006] A 5G communication network security supervision method based on edge computing, the method comprises the following steps: Step S1, the number of edge computing nodes in the supervision area is acquired, and the number of 5G terminal equipment in the supervision area of each edge computing node is acquired; Step S2, the running parameters of all 5G terminal equipment are collected in real time, and the running parameters are processed; Step S3, the security state of each 5G terminal equipment is evaluated according to the preprocessed running parameters, and the communication link security state of the edge computing node coverage area where the 5G terminal equipment is located is evaluated; Step S4, when the 5G terminal equipment or the communication link is found to have a security risk, a security early warning mechanism is triggered immediately.

[0007] As a further description of the technical scheme of the application, the working process of step S1 comprises: All the edge computing nodes in the supervision area are numbered, and the numbers are 1, 2,..., n in turn; All the 5G terminal equipment of the i-th computing node is numbered, and the numbers are , , ; Wherein, i belongs to n.

[0008] As a further description of the technical scheme of the present application, the working process of step S2 comprises: The data processing comprises data cleaning, data integration and data conversion, the data cleaning removes noise data and redundant data by using a rule-based filtering method, the data integration integrates the operation parameters from different terminal devices, and the data conversion converts the operation parameters in different formats into a unified format.

[0009] As a further description of the technical scheme of the present application, the security state evaluation process of each 5G terminal device in step S3 comprises: obtaining the technical index parameters and the behavior parameters of the i-th 5G terminal device in the edge computing node coverage area at the current time; obtaining the technical index parameters and the behavior parameters of the i-th 5G terminal device in the edge computing node coverage area at the current time; obtaining the technical index score and the behavior score of the i-th 5G terminal device according to the technical index parameters and the behavior parameters of the i-th 5G terminal device respectively; obtaining the technical index score and the behavior score of the i-th 5G terminal device according to the technical index parameters and the behavior parameters of the i-th 5G terminal device respectively; obtaining the technical index score and the behavior score of the i-th 5G terminal device according to the technical index parameters and the behavior parameters of the i-th 5G terminal device respectively; obtaining the technical index score and the behavior score of the i-th 5G terminal device according to the technical index parameters and the behavior parameters of the i-th 5G terminal device respectively; obtaining the technical index score and the behavior score of the i-th 5G terminal device according to the technical index parameters and the behavior parameters of the i-th 5G terminal device respectively; obtaining the technical index score and the behavior score of the i-th 5G terminal device according to the technical index parameters and the behavior parameters of the i-th 5G terminal device respectively; comparing the security coefficient of the i-th 5G terminal device at the current time with the device security coefficient threshold set by the system, if the security coefficient of the i-th 5G terminal device is lower than the corresponding threshold set by the system, it is evaluated that the i-th 5G terminal device has a security risk. comparing the security coefficient of the i-th 5G terminal device at the current time with the device security coefficient threshold set by the system, if the security coefficient of the i-th 5G terminal device is lower than the corresponding threshold set by the system, it is evaluated that the i-th 5G terminal device has a security risk. As a further description of the technical scheme of the present application, the quantitative process of the technical index score comprises: obtaining the technical index score by weighted summation of the hardware technical index score and the software technical index score;

[0010] obtaining the technical index score by weighted summation of the hardware technical index score and the software technical index score; obtaining the technical index score by weighted summation of the hardware technical index score and the software technical index score; obtaining the technical index score by weighted summation of the hardware technical index score and the software technical index score; obtaining the technical index score by weighted summation of the hardware technical index score and the software technical index score; = 1 if the i-th 5G terminal device has hardware security chip, hardware trust root and anti-physical disassembly self-destruction mechanism; = 0.8 if the i-th 5G terminal device has hardware security chip, hardware trust root and anti-physical disassembly self-destruction mechanism; = 0.3 if the i-th 5G terminal device has hardware security chip, hardware trust root and anti-physical disassembly self-destruction mechanism; = 0.3 if the i-th 5G terminal device has hardware security chip, hardware trust root and anti-physical disassembly self-destruction mechanism; = 0.3 if the i-th 5G terminal device has hardware security chip, hardware trust root and anti-physical disassembly self-destruction mechanism; = 0.3 if the i-th 5G terminal device has hardware security chip, hardware trust root and anti-physical disassembly self-destruction mechanism; = 0.3 if the i-th 5G terminal device has hardware security chip, hardware trust root and anti-physical disassembly self-destruction mechanism; =0.1; The software technology index score mathematical model is constructed, and an expression is as follows: ; In the formula, the numerator is a security enhancement capability factor, and the denominator is a risk exposure factor, wherein, is an encryption strength, is an authentication strength, and are weight coefficients of different security enhancement capability factors, is a vulnerability risk, is a historical attack risk, and are weight coefficients of different risk exposure factors.

[0011] As a further description of the technical scheme of the present application, the encryption strength is valued according to the complexity of the password combination, and the password combination type is compared with the system setting type interval, when the password combination type is greater than or equal to z, =1; when the password combination type is greater than or equal to y and less than z, =0.8; when the password combination type is greater than or equal to x and less than y, =0.3; when the password combination type is less than x, =0.1, wherein x The authentication strength is valued according to the authentication mechanism, the authentication mechanism is two-way certificate authentication, =1; the authentication mechanism is one-way authentication, =0.5; no authentication, =0; The vulnerability risk , wherein, is the number of unsolved vulnerabilities, is the number of vulnerabilities; The historical attack risk , wherein, is the attack frequency in the system setting period, is the historical maximum attack frequency of the software in the setting period.

[0012] As a further description of the technical scheme of the present application, the behavior score quantification process includes: The behavior score mathematical model is constructed, and an expression is as follows: ; In the formula, is the number of monitored behavior parameter items, p belongs to q, is the real-time value of the pth behavior parameter, a standard value of the pth behavior parameter set for the system, a deviation reference value of the pth behavior parameter, a weight coefficient corresponding to the pth behavior parameter.

[0013] As a further description of the technical scheme of the present application, the step S3 of evaluating the security state of the communication link of the edge computing node coverage area where the 5G terminal device is located includes: If any 5G terminal device in the i th edge computing node coverage area has a security risk, it means that the communication link of the i th edge computing node coverage area has a security risk. If no 5G terminal device in the i th edge computing node coverage area has a security risk, the security coefficients of all 5G terminal devices in the i th edge computing node coverage area are obtained, and the corresponding weights are used as exponents for power operation, and then all the results are multiplied to obtain the product, which is the security state coefficient of the communication link of the i th edge computing node coverage area .

[0014] As a further description of the technical scheme of the present application, the security state coefficient of the communication link of the i th edge computing node coverage area is compared with the evaluation interval set by the system: When ≥ , it means that the communication link of the i th edge computing node coverage area is safe, the overall security protection level of all 5G terminal devices in the area is high, and the current link has strong anti-attack ability and can normally carry high-sensitive services. When ≤ < , it means that the communication link of the i th edge computing node coverage area is relatively safe, most of the terminal devices in the area have good security status, but a small number of devices have slight security defects, the communication link is generally controllable, and it is recommended to regularly inspect and repair low-risk hidden dangers.

[0015] When ≤ < , it means that the communication link of the i th edge computing node coverage area is relatively unsafe, and the security coefficients of multiple terminal devices in the area are low. The current link does not have strong anti-attack ability and limits sensitive service transmission. When < , it means that the communication link of the i th edge computing node coverage area is unsafe, and there may be devices in the area that have been invaded or are in a high-risk exposure state. The security of the current link cannot be guaranteed, and the problem devices must be immediately isolated, and a comprehensive security audit and link reinforcement must be performed.

[0016] A 5G communication network security monitoring system based on edge computing, the system comprising: The data acquisition module is used to collect the operating parameters of all 5G terminal devices in the coverage area of ​​the edge computing node in the regulatory area; The data processing module is used to process the collected parameters. The status assessment module is used to assess the security status of each 5G terminal device based on preprocessed operating parameters, and to assess the security status of the communication link in the coverage area of ​​the edge computing node where the 5G terminal device is located. The early warning module immediately triggers a security early warning mechanism when an assessment detects a security risk in a 5G terminal device or communication link.

[0017] The beneficial effects of this invention are: This invention not only considers the technical parameters of terminal devices but also incorporates behavioral parameters. By using weighted summation and other methods, it comprehensively assesses the security status of terminal devices, more accurately reflecting their actual security condition and avoiding the limitations of single-parameter assessment. Furthermore, based on the security status assessment results of terminal devices, this invention further evaluates the security status of communication links in the coverage area of ​​the edge computing node where the device is located. By comprehensively considering the security status of all terminal devices in the area, it quantitatively assesses the overall security level of communication links, providing a strong basis for ensuring the security of communication links. Attached Figure Description

[0018] The invention will now be further described with reference to the accompanying drawings.

[0019] Figure 1 This is a partial flowchart of the 5G communication network security supervision method based on edge computing provided by the present invention. Detailed Implementation

[0020] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0021] Please see Figure 1 As shown, this invention is a 5G communication network security supervision method based on edge computing, the method comprising the following steps: Step S1: Obtain the number of edge computing nodes within the regulatory area, and obtain the number of 5G terminal devices in the area that each edge computing node is responsible for; Step S2: Collect the operating parameters of all 5G terminal devices in real time and process the operating parameters; Step S3, evaluate the security state of each 5G terminal device according to the preprocessed operation parameters, and evaluate the communication link security state of the edge computing node coverage area where the 5G terminal device is located; Step S4, when the evaluation finds that there is a security risk in the 5G terminal device or the communication link, the security warning mechanism is triggered immediately.

[0022] Through the above technical scheme, the number of edge computing nodes in the supervision area is obtained first, and all edge computing nodes are numbered, and the number of 5G terminal devices in the area responsible for each edge computing node is obtained, and all 5G terminal devices under each edge computing node are numbered, the supervision range and object are clear, which provides a basis for subsequent data collection and state evaluation, then, the operation parameters of all 5G terminal devices are collected in real time, including technical index parameters and behavior parameters, then, the collected operation parameters are processed, including data cleaning (removing noise data and redundant data), data integration (integrating operation parameters from different terminal devices) and data conversion (converting operation parameters in different formats into a unified format), to ensure the accuracy and consistency of the data, and provide reliable data support for subsequent security state evaluation, then, the technical index parameters (such as hardware security chip, encryption strength, etc.) and behavior parameters (such as communication frequency, data transmission volume, etc.) of each 5G terminal device at the current time are obtained, according to these parameters, the technical index score and the behavior score are calculated respectively, and the security coefficient of each 5G terminal device is obtained by weighted summation, the security coefficient is compared with the threshold set by the system, the security state of each 5G terminal device is evaluated, if there is any 5G terminal device with security risk in the coverage area of a certain edge computing node, it is determined that the communication link in the area has a security risk, otherwise, according to the security coefficient of all 5G terminal devices in the area, the security state coefficient of the communication link is obtained by power operation, and compared with the evaluation interval set by the system, the security state of the communication link is evaluated, the security state of the terminal device and the communication link in the 5G communication network is evaluated comprehensively, the potential security risk is found in time, finally, when the evaluation finds that there is a security risk in the 5G terminal device or the communication link, the security warning mechanism is triggered immediately, and the relevant personnel or system is informed to take corresponding security measures, the security event is responded in time, the spread and deterioration of the security risk are prevented, and the safe and stable operation of the 5G communication network is ensured, the present application realizes real-time monitoring and evaluation of the security state of the terminal device and the communication link in the 5G communication network by combining edge computing technology, and can trigger the security warning in time, effectively improving the security protection ability of the 5G communication network.

[0023] As a further description of the technical scheme of the present application, the working process of step S1 includes: All edge computing nodes in the supervision area are numbered, and the numbers are 1, 2, …, n in turn; Number all 5G terminal devices on the i-th computing node, with the numbers as follows: , … ; Where i belongs to n.

[0024] As a further description of the technical solution of the present invention, the working process of step S2 includes: The data processing includes data cleaning, data integration, and data transformation. Data cleaning uses rule-based filtering methods to remove noisy and redundant data. Data integration integrates operating parameters from different terminal devices. Data transformation converts operating parameters in different formats into a unified format.

[0025] As a further description of the technical solution of the present invention, step S3, which assesses the security status of each 5G terminal device, includes: Get the coverage area of ​​the i-th edge computing node at the current time. Technical and behavioral parameters of a 5G terminal device; According to the first The technical and behavioral parameters of the first 5G terminal device were obtained. Technical indicator scores and behavioral scores for each 5G terminal device; For the The weighted sum of the technical and behavioral scores of each 5G terminal device yields the result at the current moment. Security factor of each 5G terminal device; The current time is The security factor of each 5G terminal device is compared with the system-set device security factor threshold. If the security factor of the first 5G terminal device is compared with the security factor threshold set by the system, then... If the security factor of a 5G terminal device is lower than the corresponding threshold set by the system, then the security factor of the 5G terminal device will be evaluated. Some 5G terminal devices pose security risks.

[0026] As a further description of the technical solution of the present invention, the quantification process of the technical indicator scoring includes: The technical indicator score is obtained by weighted summation of the hardware and software technical indicator scores. Hardware technical specifications score Perform the assignment, if the first If a 5G terminal device has a hardware security chip, a hardware root of trust, and a self-destruct mechanism to prevent physical disassembly, then... =1; if the first If a 5G terminal device possesses any two of the following: a hardware security chip, a hardware root of trust, and a self-destruct mechanism to prevent physical disassembly, then... =0.8; if the first If the 5G terminal device has any one of a hardware security chip, a hardware root of trust and a physical disassembly self-destruction mechanism, =0.3; if the 5G terminal device has none of the hardware security chip, the hardware root of trust and the physical disassembly self-destruction mechanism, =0.1. =0.1. The mathematical model for scoring the software technology index is constructed, and the expression is as follows: In the expression, the numerator is a security enhancement capability factor, and the denominator is a risk exposure factor, wherein, is an encryption strength, is an authentication strength, and are weight coefficients of different security enhancement capability factors, is a vulnerability risk, is a historical attack risk, and are weight coefficients of different risk exposure factors.

[0027] As a further description of the technical scheme of the present application, the encryption strength is valued according to the complexity of the password combination, and the password combination type is compared with the system setting type interval, when the password combination type is greater than or equal to z, =1; when the password combination type is greater than or equal to y and less than z, =0.8; when the password combination type is greater than or equal to x and less than y, =0.3; when the password combination type is less than x, =0.1, wherein x The authentication strength is valued according to the authentication mechanism, and the authentication mechanism is two-way certificate authentication, =1; the authentication mechanism is one-way authentication, =0.5; there is no authentication, =0. The vulnerability risk , wherein, is the number of unsolved vulnerabilities, is the number of vulnerabilities. The historical attack risk , wherein, is the attack frequency in the system setting period, is the historical maximum attack frequency of the software in the setting period.

[0028] As a further description of the technical scheme of the present application, the quantification process of the behavior score includes: ​Construct a mathematical model for behavioral scoring, expressed as follows: ; In the formula, Let p be the number of behavioral parameters being monitored, and q be a subset of p. This represents the real-time value of the p-th behavior parameter. The standard value for the p-th behavior parameter set by the system. This is the reference value for the deviation of the p-th behavioral parameter. is the weight coefficient corresponding to the p-th behavioral parameter.

[0029] Through the above technical solution, this embodiment provides a process for assessing the security status of each 5G terminal device. The system obtains the security status of the i-th edge computing node within its coverage area at the current time. The technical and behavioral parameters of each 5G terminal device are used to clarify the specific status information of the evaluation object, providing a basis for subsequent scoring. Based on the obtained technical parameters, hardware and software technical indicator scores are calculated separately, and a weighted sum is used to obtain the total technical indicator score. The hardware technical indicator score is assigned based on whether the device has a hardware security chip, a hardware root of trust, and a self-destruct mechanism to prevent physical disassembly. The software technical indicator score is calculated by constructing a mathematical model, considering security enhancement factors (such as encryption strength and authentication strength) and risk exposure factors (such as vulnerability risk and historical attack risk), quantifying the device's technical security level and reflecting the device's security at both the hardware and software levels. The protection capability is assessed by constructing a behavioral scoring mathematical model based on acquired behavioral parameters (such as communication frequency, data transmission volume, network traffic, etc.). This model considers the deviation between real-time and standard values ​​of the behavioral parameters, as well as the weights of each parameter, to calculate a behavioral score. This quantifies the device's behavioral security level and reflects its security performance during actual operation. The calculated technical indicator scores and behavioral scores are then weighted and summed to obtain the security coefficient of the j-th 5G terminal device at the current moment. Finally, this security coefficient is compared with the system-set device security coefficient threshold to determine whether the device poses a security risk. This achieves an accurate assessment of the security status of 5G terminal devices and provides strong support for the security supervision of 5G communication networks.

[0030] As a further description of the technical solution of the present invention, step S3, which assesses the communication link security status of the edge computing node coverage area where the 5G terminal device is located, includes: If any 5G terminal device in the i-th edge computing node coverage area exists security risk, it is indicated that the communication link of the i-th edge computing node coverage area exists security risk, if any 5G terminal device in the i-th edge computing node coverage area does not exist security risk, the security coefficients of all 5G terminal devices in the i-th edge computing node coverage area are acquired, the corresponding weights are respectively taken as the exponent for power operation, then all results are multiplied, and finally the product is the security state coefficient of the communication link of the i-th edge computing node coverage area .

[0031] As a further description of the technical scheme of the application, the security state coefficient of the communication link of the i-th edge computing node coverage area is compared with the evaluation interval set by the system: When ≥ , it is indicated that the communication link of the i-th edge computing node coverage area is safe, the overall security protection level of all 5G terminal devices in the area is high, the current link has strong anti-attack ability, and can normally bear high-sensitive business; When ≤ < , it is indicated that the communication link of the i-th edge computing node coverage area is relatively safe, most terminal devices in the area have good security status, but a small amount of devices exist slight security defects, the communication link is generally controllable, and it is suggested to regularly patrol and repair low-risk hidden dangers.

[0032] When ≤ < , it is indicated that the communication link of the i-th edge computing node coverage area is relatively unsafe, the security coefficients of multiple terminal devices in the area are low, the current link does not have strong anti-attack ability, and limits sensitive business transmission; When < , it is indicated that the communication link of the i-th edge computing node coverage area is unsafe, it is possible that devices in the area have been invaded or are in a high-risk exposure state, the security of the current link cannot be guaranteed, and the problem devices must be immediately isolated, and comprehensive security audit and link reinforcement are carried out.

[0033] Through the technical solution, the embodiment provides an evaluation process of a communication link security state of an edge computing node coverage area where a 5G terminal device is located. First, it is checked whether any 5G terminal device in the i-th edge computing node coverage area has a security risk. If any 5G terminal device in the i-th edge computing node coverage area has a security risk, it is directly determined that the communication link of the area has a security risk. When a terminal device security risk is found, the security state of the related communication link is quickly determined to prevent risk spreading. If any 5G terminal device in the i-th edge computing node coverage area does not have a security risk, the system further acquires the security coefficients of all 5G terminal devices in the area, performs an exponential operation on the weights corresponding to the security coefficients of the devices, and multiplies all the results to obtain the security state coefficient of the communication link of the area. By comprehensively considering the security states of all terminal devices in the area, the overall security level of the communication link is quantitatively evaluated.

[0034] A 5G communication network security supervision system based on edge computing, the system comprising: a data acquisition module for acquiring working parameters of all 5G terminal devices in the edge computing node coverage area of the supervision area; a data processing module for processing the acquired parameters; a state evaluation module for evaluating the security state of each 5G terminal device according to the preprocessed operating parameters, and evaluating the communication link security state of the edge computing node coverage area where the 5G terminal device is located; a warning module for triggering a security warning mechanism immediately when it is found that the 5G terminal device or the communication link has a security risk.

[0035] It should be noted that the formulas in the present application are dimensionless and the numerical values are calculated. The formulas are obtained by software simulation of a large amount of data to obtain a formula closest to the actual situation. The threshold interval, standard interval and coefficient involved in the present application are empirical values, which are set by a person skilled in the art according to the actual situation.

[0036] The above describes one embodiment of the present application in detail, but the content is only a preferred embodiment of the present application and cannot be considered as limiting the scope of the present application. Any equivalent changes and improvements made within the scope of the present application should still belong to the patent coverage of the present application.

Claims

1.A method for security supervision of a 5G communication network based on edge computing, characterized in that, The method comprises the following steps: Step S1, obtaining the number of edge computing nodes in the supervision area, and obtaining the number of 5G terminal devices in the area responsible by each edge computing node; Step S2, collecting the running parameters of all 5G terminal devices in real time, and processing the running parameters; Step S3, evaluating the security state of each 5G terminal device according to the preprocessed running parameters, and evaluating the communication link security state of the edge computing node coverage area where the 5G terminal device is located; Step S4, when it is found that there is a security risk in the 5G terminal device or the communication link, triggering the security early warning mechanism immediately. 2.The edge computing based 5G communication network security supervision method of claim 1, wherein, The working process of step S1 comprises: All edge computing nodes in the supervision area are numbered, and the numbers are 1, 2, …, n in turn; All 5G terminal devices of the i-th computing node are numbered, and the numbering is sequentially , , ; Wherein, i belongs to n. 3.The edge computing based 5G communication network security supervision method of claim 2, wherein, The working process of step S2 comprises: The data processing includes data cleaning, data integration and data conversion. The data cleaning uses a rule-based filtering method to remove noise data and redundant data. The data integration integrates the running parameters from different terminal devices. The data conversion converts running parameters of different formats into a unified format. 4.The edge computing based 5G communication network security supervision method of claim 2, wherein, The process of evaluating the security state of each 5G terminal device in step S3 comprises: Obtain technical index parameters and behavior parameters of the ith edge computing node at the current moment, which cover the area of the 5G terminal device ​ According to the technical index parameters and the behavior parameters of the first 5G terminal device, a technical index score and a behavior score of the first 5G terminal device are obtained respectively. According to the technical index parameters and the behavior parameters of the first 5G terminal device, a technical index score and a behavior score of the first 5G terminal device are obtained respectively. According to the technical index parameters and the behavior parameters For the first The weighted sum of the technical and behavioral scores of each 5G terminal device yields the result at the current moment. Security factor of each 5G terminal device; The current time is The security factor of each 5G terminal device is compared with the system-set device security factor threshold. If the security factor of the first 5G terminal device is compared with the security factor threshold set by the system, then... If the security factor of a 5G terminal device is lower than the corresponding threshold set by the system, then the security factor of the 5G terminal device will be evaluated. Some 5G terminal devices pose security risks. 5.The edge computing based 5G communication network security supervision method of claim 4, wherein, The quantification process of the technical index score comprises: The weighted sum of the hardware technical index score and the software technical index score is obtained to obtain the technical index score; Score the hardware technical indicators Perform assignment, if the first 5G terminal device has hardware security chip, hardware root of trust and anti-physical disassembly self-destruction mechanism, then =1; if the first 5G terminal device has hardware security chip, hardware root of trust and anti-physical disassembly self-destruction mechanism, any two of which, then =0.8; if the first 5G terminal device has hardware security chip, hardware root of trust and anti-physical disassembly self-destruction mechanism, any one of which, then =0.3; if the first 5G terminal device does not have hardware security chip, hardware root of trust and anti-physical disassembly self-destruction mechanism, then =0.1; A mathematical model of the software technical index score is constructed, and the expression is: ； wherein the numerator is a security enhancement factor and the denominator is a risk exposure factor, wherein is the encryption strength, is the authentication strength, and are weight coefficients for different security enhancement factors, respectively, is the vulnerability risk, is the historical attack risk, and are weight coefficients for different risk exposure factors, respectively. 6.The edge computing based 5G communication network security supervision method of claim 5, wherein, The encryption strength According to the value of the password combination complexity, the password combination type is compared with the system setting type interval. When the password combination type is greater than or equal to z, = 1; when the password combination type is greater than or equal to y and less than z, = 0.8; when the password combination type is greater than or equal to x and less than y, = 0.3; When the password combination category is less than x, = 0.1, where x < y < z. the authentication strength = 1 ; the authentication mechanism is a two-way certificate authentication, = 1 ; the authentication mechanism is a one-way authentication, = 0.5; no authentication, = 0; the vulnerability risk wherein, is the number of unresolved vulnerabilities, is the number of vulnerabilities; the historical attack risk wherein, setting a periodic attack frequency for the system, setting a historical maximum attack frequency for the software within a set period. 7.The edge computing based 5G communication network security supervision method of claim 4, wherein, The quantification process of the behavior score comprises: A mathematical model of the behavior score is constructed, and the expression is: ； In the formula, p is the number of monitored behavior parameters, and p belongs to q, is the real-time value of the pth behavior parameter, is the standard value of the pth behavior parameter set by the system, is the reference value of the pth behavior parameter deviation amount, is the weight coefficient corresponding to the pth behavior parameter. 8.The edge computing based 5G communication network security supervision method of claim 2, wherein, The process of evaluating the communication link security state of the edge computing node coverage area where the 5G terminal device is located in step S3 comprises: If any 5G terminal device in the coverage area of the i-th edge computing node exists a security risk, it is indicated that the communication link in the coverage area of the i-th edge computing node exists a security risk. If no 5G terminal device in the coverage area of the i-th edge computing node exists a security risk, the security coefficients of all 5G terminal devices in the coverage area of the i-th edge computing node are obtained, and the corresponding weights are respectively used as the exponents for power operation. Then, all the results are multiplied, and the final product is the security state coefficient of the communication link in the coverage area of the i-th edge computing node . 9.The edge computing based 5G communication network security supervision method of claim 8, wherein, The security state coefficient of the communication link of the i-th edge computing node coverage area is compared with the evaluation interval set by the system: When ≥ , indicates that the i-th edge computing node coverage area communication link security, the overall security protection level of all 5G terminal devices in the area is high, the current link has strong anti-attack ability, and can normally carry high-sensitive services; When ≤ < , indicates that the i-th edge computing node coverage area communication link is relatively safe, most of the terminal devices in the area are in good security condition, but there are a small number of devices with slight security defects, the overall communication link is controllable, and it is recommended to regularly patrol and repair low-risk hidden dangers; When ≤ < , it indicates that the communication link of the i-th edge computing node coverage area is less secure, the security coefficients of multiple terminal devices in the area are low, and the current link does not have strong anti-attack ability, limiting sensitive business transmission; When < , indicates that the i-th edge computing node coverage area communication link is insecure, there may be devices in the area that have been invaded or are in a high-risk exposure state, the current link security cannot be guaranteed, and the problem device must be immediately isolated, and a comprehensive security audit and link reinforcement must be performed. 10.A system for edge computing based 5G communication network security supervision, used for implementing the method for edge computing based 5G communication network security supervision according to any one of claims 1-9, characterized in that, The system comprises: A data acquisition module for acquiring the working parameters of all 5G terminal devices in the edge computing node coverage area of the supervision area; A data processing module for processing the acquired parameters; A state evaluation module for evaluating the security state of each 5G terminal device according to the preprocessed running parameters, and evaluating the communication link security state of the edge computing node coverage area where the 5G terminal device is located; An early warning module for triggering the security early warning mechanism immediately when it is found that there is a security risk in the 5G terminal device or the communication link.

Images