arXiv:2410.05312cs.CRcs.AI2024-10被引 20

用联邦学习打造智能安全切片架构,提升5G/6G网络防御能力。

An Intelligent Native Network Slicing Security Architecture Empowered by Federated Learning

  • 基于联邦学习部署智能微服务作为安全代理,实现分布式协同防护。
  • 对切片内攻击识别准确率达99.99%,整体架构达95.60%。
  • 适合关注5G/6G安全、微服务架构与联邦学习融合的开发者与研究者。

网络切片(NS)已革新下一代5G/6G移动网络(NGMN)、车联网、工业物联网及垂直领域的资源共享模式,支持多样化服务需求。尽管已有大量研究推进其发展,现有架构仍缺乏内在智能安全能力。本文提出一种安全原生架构,基于机器学习部署智能微服务作为联邦代理,为切片未来互联网基础设施(SFI2)参考架构提供切片内与架构级操作安全。联邦学习契合现代分布式微服务架构,具备统一性与可扩展性,适用于服务与安全双重需求。通过ML-Agents与安全代理,利用通用非侵入式遥测数据,在网络切片架构中实现约95.60%的平均准确率,切片内检测达99.99%。结果表明该机制具备提升架构级安全潜力,开启网络切片安全研究新方向。

原文摘要 · Abstract (English)

Network Slicing (NS) has transformed the landscape of resource sharing in networks, offering flexibility to support services and applications with highly variable requirements in areas such as the next-generation 5G/6G mobile networks (NGMN), vehicular networks, industrial Internet of Things (IoT), and verticals. Although significant research and experimentation have driven the development of network slicing, existing architectures often fall short in intrinsic architectural intelligent security capabilities. This paper proposes an architecture-intelligent security mechanism to improve the NS solutions. We idealized a security-native architecture that deploys intelligent microservices as federated agents based on machine learning, providing intra-slice and architectural operation security for the Slicing Future Internet Infrastructures (SFI2) reference architecture. It is noteworthy that federated learning approaches match the highly distributed modern microservice-based architectures, thus providing a unifying and scalable design choice for NS platforms addressing both service and security. Using ML-Agents and Security Agents, our approach identified Distributed Denial-of-Service (DDoS) and intrusion attacks within the slice using generic and non-intrusive telemetry records, achieving an average accuracy of approximately $95.60\%$ in the network slicing architecture and $99.99\%$ for the deployed slice -- intra-slice. This result demonstrates the potential for leveraging architectural operational security and introduces a promising new research direction for network slicing architectures.

网络切片联邦学习安全架构5G/6G

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。