摘要
针对目前网络切片安全隔离研究未考虑到同驻网元间的相似性以及缺少一种细粒度的隔离度评估方法的问题,提出了一种面向安全隔离的细粒度网络切片部署方法。首先,在5G核心网切片物理设施层的基础上增加虚拟化层和网元功能层,构建3层安全隔离体系。然后,设计了一个细粒度的切片安全隔离度计算模型,将同驻网元间异构性和切片内网元的专用比例分别作为虚拟化层和网元功能层的隔离度量指标。最后,提出了一种基于改进粒子群算法的切片部署方法来实现切片的安全隔离。仿真结果表明,所提算法在满足垂直行业切片隔离需求的同时能有效减少切片的部署开销,并将已部署切片的安全隔离SLA达标率提高了约20%。
To address the problem that the current research on the security isolation of net-work slices do not consider the similarity between co-resident network elements,and there is no fine-grained isolation degree evaluation method,a fine-grained network slicing deployment method for se-curity isolation is porposed.First,the virtualization layer and the network element function layer are added on the 5G core network slice infrastructure layer to build a three-layer security isolation sys-tem.Then,a fine-grained slice safety isolation calculation model is designed.The average value of the heterogeneity between co-located network elements is used as the isolation degree of the virtual-ization layer,and the exclusive proportion of network elements inside the slice is used as the isola-tion degree of the network element layer.Finally,a network slice deployment method based on the improved particle swarm algorithm is proposed to realize slice security isolation.Simulation results show that the proposed algorithm can not only meet the slice isolation requirements of vertical indus-try,but also effectively reduce the deployment cost of slice and improve the safety isolation compli-ance rate of slices by about 20%.
作者
张鑫亮
汤红波
游伟
ZHANG Xinliang;TANG Hongbo;YOU Wei(Information Engineering University,Zhengzhou 450001,China)
出处
《信息工程大学学报》
2023年第3期343-349,共7页
Journal of Information Engineering University
基金
国家自然科学基金资助项目(61941114,61801515)。
关键词
5G核心网
网络切片
安全隔离
隔离度
切片部署
5G core network
network slice
security isolation
isolation degree
network slice de-ployment
