5G防御网络采用商用gndeb零信任架构

IF 1.3 4区 计算机科学 Q3 ENGINEERING, ELECTRICAL & ELECTRONIC
Woocheol Kim, Sunji Oh, Chang-Gyu Lim, Kiwon Kim, Jongkuk Lee, Hea-Sook Park
{"title":"5G防御网络采用商用gndeb零信任架构","authors":"Woocheol Kim,&nbsp;Sunji Oh,&nbsp;Chang-Gyu Lim,&nbsp;Kiwon Kim,&nbsp;Jongkuk Lee,&nbsp;Hea-Sook Park","doi":"10.4218/etrij.2024-0476","DOIUrl":null,"url":null,"abstract":"<p>As 5G technology expands globally, the demand for secure and reliable military communication is growing significantly. This study examines 5G military network architectures that integrate commercial 5G elements, ranging from isolated to shared configurations, to balance security, cost, and coverage. We propose a network leveraging commercial next-generation Node B (gNodeB or gNB) with a military Public Land Mobile Network (PLMN) ID, ensuring extensive coverage, robust security, and cost efficiency. To enhance secure access, a zero trust (ZT) architecture using a software-defined perimeter (SDP) is employed. The connection process for user equipment accessing private networks is detailed through 5G authentication and ZT access management. Simulated 5G analysis compares scenarios before and after applying SDP under denial-of-service (DoS) and IP scanning attacks. Results demonstrate that SDP mitigates IP scanning threats, improves throughput during DoS attacks, and maintains performance. Validation on a real-world 5G testbed confirms feasibility, robust security, and stability. These findings underscore the potential of ZT-based 5G military networks for modern defense communication.</p>","PeriodicalId":11901,"journal":{"name":"ETRI Journal","volume":"47 3","pages":"445-458"},"PeriodicalIF":1.3000,"publicationDate":"2025-06-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.4218/etrij.2024-0476","citationCount":"0","resultStr":"{\"title\":\"5G defense network using commercial gNodeB with zero trust architecture\",\"authors\":\"Woocheol Kim,&nbsp;Sunji Oh,&nbsp;Chang-Gyu Lim,&nbsp;Kiwon Kim,&nbsp;Jongkuk Lee,&nbsp;Hea-Sook Park\",\"doi\":\"10.4218/etrij.2024-0476\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<p>As 5G technology expands globally, the demand for secure and reliable military communication is growing significantly. This study examines 5G military network architectures that integrate commercial 5G elements, ranging from isolated to shared configurations, to balance security, cost, and coverage. We propose a network leveraging commercial next-generation Node B (gNodeB or gNB) with a military Public Land Mobile Network (PLMN) ID, ensuring extensive coverage, robust security, and cost efficiency. To enhance secure access, a zero trust (ZT) architecture using a software-defined perimeter (SDP) is employed. The connection process for user equipment accessing private networks is detailed through 5G authentication and ZT access management. Simulated 5G analysis compares scenarios before and after applying SDP under denial-of-service (DoS) and IP scanning attacks. Results demonstrate that SDP mitigates IP scanning threats, improves throughput during DoS attacks, and maintains performance. Validation on a real-world 5G testbed confirms feasibility, robust security, and stability. These findings underscore the potential of ZT-based 5G military networks for modern defense communication.</p>\",\"PeriodicalId\":11901,\"journal\":{\"name\":\"ETRI Journal\",\"volume\":\"47 3\",\"pages\":\"445-458\"},\"PeriodicalIF\":1.3000,\"publicationDate\":\"2025-06-09\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"https://onlinelibrary.wiley.com/doi/epdf/10.4218/etrij.2024-0476\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"ETRI Journal\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://onlinelibrary.wiley.com/doi/10.4218/etrij.2024-0476\",\"RegionNum\":4,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q3\",\"JCRName\":\"ENGINEERING, ELECTRICAL & ELECTRONIC\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"ETRI Journal","FirstCategoryId":"94","ListUrlMain":"https://onlinelibrary.wiley.com/doi/10.4218/etrij.2024-0476","RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"ENGINEERING, ELECTRICAL & ELECTRONIC","Score":null,"Total":0}
引用次数: 0

摘要

随着5G技术在全球范围内的扩展,对安全可靠的军事通信的需求正在显著增长。本研究考察了5G军事网络架构,这些架构集成了商用5G元素,从隔离配置到共享配置,以平衡安全性、成本和覆盖范围。我们提出了一种利用商用下一代节点B (gNodeB或gNB)和军用公共陆地移动网络(PLMN) ID的网络,确保广泛的覆盖范围、强大的安全性和成本效益。为了增强安全访问,采用了使用软件定义边界(SDP)的零信任(ZT)架构。通过5G认证和ZT接入管理,详细描述用户设备接入专网的连接过程。5G仿真分析对比了SDP在DoS (denial- service)攻击和IP扫描攻击下应用前后的场景。结果表明,SDP减轻了IP扫描威胁,提高了DoS攻击时的吞吐量,并保持了性能。在实际5G测试平台上的验证证实了可行性、强大的安全性和稳定性。这些发现强调了基于中兴通讯的5G军事网络在现代国防通信中的潜力。
本文章由计算机程序翻译,如有差异,请以英文原文为准。

5G defense network using commercial gNodeB with zero trust architecture

5G defense network using commercial gNodeB with zero trust architecture

As 5G technology expands globally, the demand for secure and reliable military communication is growing significantly. This study examines 5G military network architectures that integrate commercial 5G elements, ranging from isolated to shared configurations, to balance security, cost, and coverage. We propose a network leveraging commercial next-generation Node B (gNodeB or gNB) with a military Public Land Mobile Network (PLMN) ID, ensuring extensive coverage, robust security, and cost efficiency. To enhance secure access, a zero trust (ZT) architecture using a software-defined perimeter (SDP) is employed. The connection process for user equipment accessing private networks is detailed through 5G authentication and ZT access management. Simulated 5G analysis compares scenarios before and after applying SDP under denial-of-service (DoS) and IP scanning attacks. Results demonstrate that SDP mitigates IP scanning threats, improves throughput during DoS attacks, and maintains performance. Validation on a real-world 5G testbed confirms feasibility, robust security, and stability. These findings underscore the potential of ZT-based 5G military networks for modern defense communication.

求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
ETRI Journal
ETRI Journal 工程技术-电信学
CiteScore
4.00
自引率
7.10%
发文量
98
审稿时长
6.9 months
期刊介绍: ETRI Journal is an international, peer-reviewed multidisciplinary journal published bimonthly in English. The main focus of the journal is to provide an open forum to exchange innovative ideas and technology in the fields of information, telecommunications, and electronics. Key topics of interest include high-performance computing, big data analytics, cloud computing, multimedia technology, communication networks and services, wireless communications and mobile computing, material and component technology, as well as security. With an international editorial committee and experts from around the world as reviewers, ETRI Journal publishes high-quality research papers on the latest and best developments from the global community.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信