5G网络切片端到端安全实现机理和提升方法研究

Typical application scenarios of 5G networks include enhanced bandwidth, ultra-low latency, and massive connectivity. 5G network slicing technology is a key supporting technology for network operators to provide differentiated services for different users. Operators can deploy multiple logical networks on the same physical infrastructure. However, since different network slices share physical resources, it is easy to cause information leakage before different slices. In addition, each network slice includes multiple heterogeneous network resources, which are composed of a radio access network sub-slice, a transport bearer sub-slice, and a core network sub-slice. Thus, it becomes more difficult to realize end-to-end security for each slice..Based on the challenges and requirements faced by 5G network slicing, this project conducts in-depth research on the implementation mechanism and improvement method of end-to-end security. This project mainly explores three aspects, including the mechanism of slice security problem, the evaluation model of slice security risk and the provisioning of reliable network slice. Meanwhile, this project focuses on solving the scientific problem “How to deal with the game relationship between slice security isolation and efficient resource sharing?”. During this process, two key innovations can be achieved, that is, an algorithm of slice security isolation based on resource sharing degree and a joint orchestration mechanism of heterogeneous resources for each slice. In this way, this project will lay the theoretical foundation for the innovative development of 5G network slicing technology.

5G网络典型的应用场景包括增强带宽、超低时延和海量连接三种。5G网络切片技术是网络运营商为不同用户提供差异化服务的关键支撑技术，运营商可以在同一物理基础设施上部署多个逻辑网络。然而，由于不同网络切片共享物理资源，容易引起不同切片之间信息泄露。此外，每一个网络切片包含多种异构网络资源，由无线接入网子切片、光传输网络子切片和核心网子切片连接组成，增加了切片端到端安全的实现难度。.本项目从5G网络切片所面临的挑战与需求出发，对5G网络切片端到端安全实现机理和提升方法展开深入研究，通过对切片安全问题的产生机理、切片安全风险的评估模型和切片安全可靠提供方法三个方面进行深入探索，重点解决“切片安全隔离和资源高效共享的博弈关系”这一科学问题，在此过程中形成基于资源共享度的切片安全隔离算法和面向网络切片的异构资源联合编排机制两个核心创新，为5G网络切片技术的创新发展奠定理论基础。

本项目从5G网络切片所面临的挑战与需求出发，对5G网络切片端到端安全实现机理和提升方法展开深入研究，通过对切片安全问题的产生机理、切片安全风险的评估模型和切片安全可靠提供方法三个方面进行深入探索，搭建了5G网络切片端到端安全仿真平台，解决了“切片安全隔离和资源高效共享的博弈关系”这一科学问题，为5G网络切片技术的发展应用奠定理论基础。项目取得如下研究成果：.1）建立了支持基带功能动态分割和可编程光传输的5G Flexible-RAN结构，实现传输容量和无线性能之间的平衡。设计了基于数据包复制技术的5G URLLC切片映射算法，并详细比较了波长隔离和链路隔离两种方案的性能结果。.2）提出了一种旁路攻击感知的5G RAN切片动态隔离机制，在保证切片安全性的前提下，提高了网络资源的利用率。设计了一种基于边缘节点协作的自适应流量调度算法，减小了DDoS攻击对延迟敏感业务的影响。.3）实现了一种不需要预共享信息的无错误密钥分发方案，有效满足5G网络切片安全加密对应的密钥需求。提出了一种基于机器学习的光纤窃听检测和定位方案，通过收集接收端的性能数据，利用神经网络识别光纤通信系统的运行状态。.基于上述研究工作，项目组发表高水平SCI学术论文18篇，EI论文23篇，授权国家发明专利20项和国际发明专利2项，部分专利实现成果转化，出版中英文学术专著各1部，在国内外学术会议上完成特邀报告6次，组织参加国际学术会议20余人次，获省部级科技奖励2项。