Journal of Information Security Reserach ›› 2024, Vol. 10 ›› Issue (6): 539-.

Previous Articles     Next Articles

Research and Practice of 5G Network Security Assessment Technologies

Chen Bin, Dong Ping, Xie Xiaogang, and Song Difei   

  1. (Huaxin Consulting Co., Ltd., Hangzhou 310052)
  • Online:2024-06-06 Published:2024-06-08

5G网络安全测评技术研究与实践

陈斌董平谢晓刚宋涤非   

  1. (华信咨询设计研究院有限公司杭州310052)
  • 通讯作者: 陈斌 博士,高级工程师.主要研究方向为5G网络靶场、渗透测试、模糊测试、5G网络安全. chenbin.hx@chinaccs.cn
  • 作者简介:陈斌 博士,高级工程师.主要研究方向为5G网络靶场、渗透测试、模糊测试、5G网络安全. chenbin.hx@chinaccs.cn 董平 硕士,高级工程师.主要研究方向为网络安全、数据安全. dongping.hx@chinaccs.cn 谢晓刚 工程师.主要研究方向为5G网络安全、5G网络靶场、模糊测试、人工智能. xiexiaogang.hx@chinaccs.cn 宋涤非 工程师.主要研究方向为网络安全、安全风险评估及自动化工具开发. songdifei.hx@chinaccs.cn

Abstract: With the widespread deployment of 5G networks, establishing effective network security assessment mechanisms has become increasingly important to ensure network safety and mitigate risks. This paper proposes a standardized 5G network security assessment process to address the security risks arising from the complexity of 5G technology, the iterative nature of standards, and the diversity of applications. The approach includes an integrated suite of technical solutions such as a digital twinbased 5G security parallel simulation testing platform, security penetration techniques based on the ATT&CK model, and 5G security fuzz testing. These solutions have been incorporated into a practical 5G security evaluation framework and validated through realworld case studies. The results demonstrate that the proposed assessment process and technologies effectively address emerging security challenges and enhance the overall security of 5G networks.

Key words: 5G security assessment, 5G security parallel simulation, ATT&, CK Technique Tactic Model, 5G Penetration Testing, 5G Fuzz Testing

摘要: 随着5G网络的广泛推广,建立有效的网络安全评估机制变得尤为重要,以有效提升网络安全,减少潜在风险.针对5G技术的复杂性、标准的迭代性、应用的多样性所带来的安全风险,提出了标准化的5G网络安全评估流程.给出了基于数字孪生的5G安全平行仿真测试平台、基于ATT&CK模型的安全渗透技术以及5G安全模糊测试等集成技术方案.这些方案被整合到实际的5G安全测评框架中,并通过实际案例验证了其可行性和有效性.研究结果表明,所提出的评估流程和技术能够有效应对新兴的安全挑战,有助于提高5G网络的整体安全性.


关键词: 5G安全评估, 5G安全平行仿真, ATT&, CK技战术模型, 5G渗透测试, 5G模糊测试

CLC Number: