5G核心網(wǎng)與安全關(guān)鍵技術(shù)

第1 章 5G 時代的安全風(fēng)險 ................................................................................................... 001
1.1 5G 愿景與發(fā)展情況 .................................................................................................... 001
1.1.1 5G 總體概述 ..................................................................................................... 001
1.1.2 5G 發(fā)展情況 ..................................................................................................... 005
1.2 5G 網(wǎng)絡(luò)與關(guān)鍵技術(shù) .................................................................................................... 014
1.2.1 5G 新架構(gòu) ......................................................................................................... 014
1.2.2 5G 新技術(shù) ......................................................................................................... 021
1.2.3 新終端 ............................................................................................................... 037
1.2.4 新應(yīng)用 ............................................................................................................... 038
1.3 5G 時代的安全風(fēng)險 .................................................................................................... 043
1.3.1 新架構(gòu)安全風(fēng)險 ............................................................................................... 044
1.3.2 新技術(shù)安全風(fēng)險 ............................................................................................... 047
1.3.3 新終端安全風(fēng)險 ............................................................................................... 050
1.3.4 新應(yīng)用安全風(fēng)險 ............................................................................................... 053
第2 章 5G 網(wǎng)絡(luò)架構(gòu)安全 ....................................................................................................... 056
2.1 概述 .............................................................................................................................. 056
2.2 5G 網(wǎng)絡(luò)安全架構(gòu) ........................................................................................................ 057
2.3 5G 安全能力 ................................................................................................................ 058
2.3.1 5G 認證機制與密鑰協(xié)商 ................................................................................. 058
2.3.2 身份標識隱藏 ................................................................................................... 061
2.3.3 不可信的非3GPP 接入安全 ............................................................................ 063
2.3.4 控制面與用戶面數(shù)據(jù)保護 ............................................................................... 065
2.3.5 網(wǎng)絡(luò)互通安全 ................................................................................................... 068
2.3.6 移動性安全 ....................................................................................................... 069
2.3.7 會話管理安全 ................................................................................................... 070
2.3.8 能力開放安全 ................................................................................................... 071
第3 章 5G 虛擬化安全 ........................................................................................................... 074
3.1 NFV 安全 ..................................................................................................................... 074
3.1.1 NFV 硬件資源層安全 ...................................................................................... 075
3.1.2 NFV Hypervisor 層安全 ................................................................................... 079
3.1.3 NFV 虛擬機層安全 .......................................................................................... 083
3.1.4 NFV VNF 層安全 ............................................................................................. 086
3.1.5 NFV MANO 安全 ............................................................................................. 091
3.2 SDN 安全 ..................................................................................................................... 093
3.2.1 5G 時代的SDN 安全思考 ............................................................................... 093
3.2.2 SDN 數(shù)據(jù)平面安全 .......................................................................................... 094
3.2.3 SDN 控制平面安全 .......................................................................................... 097
3.2.4 SDN 應(yīng)用平面安全 .......................................................................................... 099
3.2.5 SDN 南/北向接口安全 ..................................................................................... 100
第4 章 5G 移動邊緣計算安全.............................................................................................. 102
4.1 概述 .............................................................................................................................. 102
4.2 基礎(chǔ)設(shè)施安全 .............................................................................................................. 103
4.2.1 物理環(huán)境安全 ................................................................................................... 104
4.2.2 資產(chǎn)管理安全 ................................................................................................... 105
4.2.3 設(shè)備硬件安全 ................................................................................................... 106
4.2.4 基礎(chǔ)設(shè)施虛擬化安全 ....................................................................................... 107
4.3 網(wǎng)絡(luò)服務(wù)安全 .............................................................................................................. 109
4.3.1 組網(wǎng)安全 ........................................................................................................... 109
4.3.2 UPF 安全 ........................................................................................................... 111
4.4 邊緣計算平臺及應(yīng)用安全 .......................................................................................... 113
4.4.1 邊緣計算平臺安全 ........................................................................................... 113
4.4.2 邊緣計算應(yīng)用安全 ........................................................................................... 114
4.5 認證安全 ...................................................................................................................... 116
4.5.1 編排管理認證 ................................................................................................... 116
4.5.2 能力開放認證 ................................................................................................... 117
4.5.3 終端接入認證 ................................................................................................... 118
4.6 協(xié)議安全 ...................................................................................................................... 119
4.6.1 認證授權(quán)協(xié)議 ................................................................................................... 120
4.6.2 密鑰協(xié)商協(xié)議 ................................................................................................... 122
4.6.3 隱私保護協(xié)議 ................................................................................................... 123
4.6.4 數(shù)據(jù)共享協(xié)議 ................................................................................................... 124
4.7 邊緣入侵檢測 .............................................................................................................. 125
4.7.1 入侵檢測對象 ...........................