Mobile network honeypot system for 5G independent networking

Abstract

The embodiment of the invention discloses a mobile network honeypot system for 5G independent networking, and the system comprises a 5G independent networking simulation module which is used for providing different types of simulation network elements; a port monitoring module which is used for monitoring the port of each simulation network element to obtain a signaling message sent by an attack client and transmitting the signaling message to the service processing module; a service processing module which is used for generating a corresponding security event according to the signaling message and transmitting the security event to the security event communication management module; and a security event communication management module which is used for issuing the security event on the security analysis platform. A mobile network honeypot system of a 5G independent network is disguised as a normally running network element to decoy an attacker to invade, network information of the attacker is obtained, a security event is generated according to a signaling message of the attacker and is published to a security analysis platform, so the characteristics of the attacker are analyzed, and the user can conveniently take corresponding security defense measures according to the analysis result.

Description

technical field [0001] The embodiment of the present invention relates to the field of 5G communication, in particular to a mobile network honeypot system for 5G independent networking. Background technique [0002] With the 5G independent networking, that is, the construction and commercialization of the 5G SA core network, the virtualization of network elements of the 5G SA core network and the direct connection and access of users, the 5G SA core network faces new security risks, including: signaling security, user Issues such as access security and cloud security for 5G deployment. [0003] The security of the 5G core network mainly involves issues such as signaling attacks caused by mobile network-oriented edge application connections. At the same time, the virtualization of network elements in the 5G SA core network, as IT equipment, can be accessed, which is easy to cause penetration attacks and Therefore, the network is facing various risks of security attacks. Co...

AI Technical Summary

Problems solved by technology

[0003] The security of the 5G core network mainly involves issues such as signaling attacks caused by mobile network-oriented edge application connections. At the same time, the virtualization of network elements in the 5G SA core network, as IT equipment, can be accessed, which is easy to cause penetration attacks and exploit attacks, so the network faces various risks of security attacks

Images