Abstract: Cybersecurity of 5G networks has attracted international attention and become the focus. In order to strengthen cybersecurity of 5G networks, EU have issued ‘cybersecurity of 5G networks EU Toolbox of risk mitigating measure’ and implement it in EU Member States in 2020. In 2021, EU have started to formulate cybersecurity of 5G networks certification plan to implement 5G toolbox. The purpose of this paper is to study cybersecurity of 5G networks risks and risk mitigation measures. Firstly, this paper reviews the relevant research on cybersecurity of 5G networks, and introduces the background of 5G toolbox. Secondly, by using the method of literature analysis, this paper studies 5G toolbox and relevant 5G certification plans, and deeply analyzes the strategic measures, technical measures, supporting action measures and risk mitigation plans of 5G toolbox. Finally, from the perspective of the relationship between 5G toolbox and certification, the results show that: 5G toolbox takes 5G standard and 5G certification as an important means to mitigate 5G network security risks; 5G toolbox highlights the important role of 5G standard and certification in technical measures and support actions.

Key words: 5G, EU, cybersecurity, 5G toolbox, risk mitigation measurest

摘要： 5G网络安全备受国际关注，成为当前网络安全的焦点问题。欧盟为加强5G网络安全，2020年出台《欧盟5G网络安全风险缓解措施工具箱》并在欧盟成员国实施，2021年开始着手制定5G网络安全认证计划以落实5G工具箱政策。本文的目的是为研究5G面临的网络安全风险和风险缓解措施。首先，梳理了5G网络安全方面的相关研究，并介绍欧盟5G工具箱有关背景。其次，采用文献分析法，对《欧盟5G网络安全风险缓解措施工具箱》政策和相关5G认证计划进行研究，深入分析5G工具箱的战略措施、技术措施、支持行动措施和风险缓解计划等。最后，通过从5G工具箱和认证之间的关联角度研究，结果发现：欧盟5G工具箱将5G标准和5G认证作为了缓解5G网络安全风险的重要手段；欧盟5G工具箱在技术措施、支持行动中突出5G标准和认证的重要作用。

关键词: 5G, 欧盟, 网络安全, 5G工具箱, 风险缓解措施