This study proposes an efficient traffic classification model to address the growing threat of distributed denial-of-service(DDoS)attacks in 5th generation technology standard(5G)slicing networks.The proposed method u...This study proposes an efficient traffic classification model to address the growing threat of distributed denial-of-service(DDoS)attacks in 5th generation technology standard(5G)slicing networks.The proposed method utilizes an ensemble of encoder components from multiple autoencoders to compress and extract latent representations from high-dimensional traffic data.These representations are then used as input for a support vector machine(SVM)-based metadata classifier,enabling precise detection of attack traffic.This architecture is designed to achieve both high detection accuracy and training efficiency,while adapting flexibly to the diverse service requirements and complexity of 5G network slicing.The model was evaluated using the DDoS Datasets 2022,collected in a simulated 5G slicing environment.Experiments were conducted under both class-balanced and class-imbalanced conditions.In the balanced setting,the model achieved an accuracy of 89.33%,an F1-score of 88.23%,and an Area Under the Curve(AUC)of 89.45%.In the imbalanced setting(attack:normal 7:3),the model maintained strong robustness,=achieving a recall of 100%and an F1-score of 90.91%,demonstrating its effectiveness in diverse real-world scenarios.Compared to existing AI-based detection methods,the proposed model showed higher precision,better handling of class imbalance,and strong generalization performance.Moreover,its modular structure is well-suited for deployment in containerized network function(NF)environments,making it a practical solution for real-world 5G infrastructure.These results highlight the potential of the proposed approach to enhance both the security and operational resilience of 5G slicing networks.展开更多
随着工业企业数字化转型进程的加快,面向互联网的新型应用层出不穷,5G专网作为支撑这一趋势的新型基础设施,其建设开始步入部署规模化、需求定制化的阶段。5G专网组网方案的规划设计应充分考虑不同工业场景的需求,灵活利用切片、用户端...随着工业企业数字化转型进程的加快,面向互联网的新型应用层出不穷,5G专网作为支撑这一趋势的新型基础设施,其建设开始步入部署规模化、需求定制化的阶段。5G专网组网方案的规划设计应充分考虑不同工业场景的需求,灵活利用切片、用户端口功能(User Port Function,UPF)分流、5G局域网(Local Area Network,LAN)等关键技术,结合虚拟专网、混合专网、物理专网等部署方式来综合制定,为5G进一步融入行业,成为赋能工业生产的关键基础设施提供支持。展开更多
To manage and orchestrate Network Slices (NSs) for 5G Core (5GC), the MANO (MANagement and Orchestration) framework is proposed by European Telecommunications Standard Institute (ETSI). In most research testbeds, MANO...To manage and orchestrate Network Slices (NSs) for 5G Core (5GC), the MANO (MANagement and Orchestration) framework is proposed by European Telecommunications Standard Institute (ETSI). In most research testbeds, MANO systems such as Tacker, OSM and ONAP are used to initiate network slices. However, this doesn’t comply with the 3GPP 5G standards as MANO should only be responsible for dynamic management of NSs, and the static management such as provisioning or unprovisioning a network slice should be left to OSS/BSS (Operation/Business Support System). Thus, in our testbed, an integrated architecture was designed in which the management of network slices will be coordinated by both MANO and OSS/BSS. MANO would handle on-boarding, instantiating, scaling and terminating of network slices while OSS/BSS is responsible for static management of slices including provisioning and unprovisioning of network slices. To evaluate our system, it was compared with the management systems equipped with only OSS/BSS or MANO in order to analyze the shortfalls of those systems when used to deploy network slices. Through this analysis, this research confirms the necessity of applying both OSS/BSS and MANO for the coordinated management of 5G core slices as adopted by 3GPP.展开更多
基金supported by an Institute of Information&Communications Technology Planning&Evaluation(IITP)grant funded by the Korean government(MSIT)(RS-2024-00438156,Development of Security Resilience Technology Based on Network Slicing Services in a 5G Specialized Network).
文摘This study proposes an efficient traffic classification model to address the growing threat of distributed denial-of-service(DDoS)attacks in 5th generation technology standard(5G)slicing networks.The proposed method utilizes an ensemble of encoder components from multiple autoencoders to compress and extract latent representations from high-dimensional traffic data.These representations are then used as input for a support vector machine(SVM)-based metadata classifier,enabling precise detection of attack traffic.This architecture is designed to achieve both high detection accuracy and training efficiency,while adapting flexibly to the diverse service requirements and complexity of 5G network slicing.The model was evaluated using the DDoS Datasets 2022,collected in a simulated 5G slicing environment.Experiments were conducted under both class-balanced and class-imbalanced conditions.In the balanced setting,the model achieved an accuracy of 89.33%,an F1-score of 88.23%,and an Area Under the Curve(AUC)of 89.45%.In the imbalanced setting(attack:normal 7:3),the model maintained strong robustness,=achieving a recall of 100%and an F1-score of 90.91%,demonstrating its effectiveness in diverse real-world scenarios.Compared to existing AI-based detection methods,the proposed model showed higher precision,better handling of class imbalance,and strong generalization performance.Moreover,its modular structure is well-suited for deployment in containerized network function(NF)environments,making it a practical solution for real-world 5G infrastructure.These results highlight the potential of the proposed approach to enhance both the security and operational resilience of 5G slicing networks.
文摘随着工业企业数字化转型进程的加快,面向互联网的新型应用层出不穷,5G专网作为支撑这一趋势的新型基础设施,其建设开始步入部署规模化、需求定制化的阶段。5G专网组网方案的规划设计应充分考虑不同工业场景的需求,灵活利用切片、用户端口功能(User Port Function,UPF)分流、5G局域网(Local Area Network,LAN)等关键技术,结合虚拟专网、混合专网、物理专网等部署方式来综合制定,为5G进一步融入行业,成为赋能工业生产的关键基础设施提供支持。
文摘To manage and orchestrate Network Slices (NSs) for 5G Core (5GC), the MANO (MANagement and Orchestration) framework is proposed by European Telecommunications Standard Institute (ETSI). In most research testbeds, MANO systems such as Tacker, OSM and ONAP are used to initiate network slices. However, this doesn’t comply with the 3GPP 5G standards as MANO should only be responsible for dynamic management of NSs, and the static management such as provisioning or unprovisioning a network slice should be left to OSS/BSS (Operation/Business Support System). Thus, in our testbed, an integrated architecture was designed in which the management of network slices will be coordinated by both MANO and OSS/BSS. MANO would handle on-boarding, instantiating, scaling and terminating of network slices while OSS/BSS is responsible for static management of slices including provisioning and unprovisioning of network slices. To evaluate our system, it was compared with the management systems equipped with only OSS/BSS or MANO in order to analyze the shortfalls of those systems when used to deploy network slices. Through this analysis, this research confirms the necessity of applying both OSS/BSS and MANO for the coordinated management of 5G core slices as adopted by 3GPP.
