Threat Diagnostic Checklists of Security Service in 5G Communication Network Virtualization Environment
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
The purpose of this paper is to review the direction of the slicing security policy, which is a major consideration in the context of standardization in 5G communication network security, to derive security vulnerability diagnosis items, and to present about analyzing and presenting the issues of discussion for 5G communication network virtualization. As for the research method, the direction of virtualization security policy of 5G communication network of ENISA (European Union Agency for Cybersecurity), a European core security research institute, and research contents such as virtualization security policy and vulnerability analysis of 5G communication network from related journals were used for analysis. In the research result of this paper, the security structure in virtualization security of 5G communication network is arranged, and security threats and risk management factors are derived. In addition, vulnerability diagnosis items were derived for each security service in the risk management area. The contribution of this study is to summarize the security threat items in 5G communication network virtualization security that is still being discussed, to be able to gain insights of the direction of European 5G communication network cybersecurity, and to derive vulnerabilities diagnosis items to be considered for virtualization security of 5G communication network. In addition, the results of this study can be used as basic data to develop vulnerability diagnosis items for virtualization security of domestic 5G communication networks. In the future, it is necessary to study the detailed diagnosis process for the vulnerability diagnosis items of 5G communication network virtualization security.
Abstract
The purpose of this paper is to review the direction of the slicing security policy, which is a major consideration in the context of standardization in 5G communication network security, to derive security vulnerability diagnosis items, and to present about analyzing and presenting the issues of discussion for 5G communication network virtualization. As for the research method, the direction of virtualization security policy of 5G communication network of ENISA (European Union Agency for Cybersecurity), a European core security research institute, and research contents such as virtualization security policy and vulnerability analysis of 5G communication network from related journals were used for analysis. In the research result of this paper, the security structure in virtualization security of 5G communication network is arranged, and security threats and risk management factors are derived. In addition, vulnerability diagnosis items were derived for each security service in the risk management area. The contribution of this study is to summarize the security threat items in 5G communication network virtualization security that is still being discussed, to be able to gain insights of the direction of European 5G communication network cybersecurity, and to derive vulnerabilities diagnosis items to be considered for virtualization security of 5G communication network. In addition, the results of this study can be used as basic data to develop vulnerability diagnosis items for virtualization security of domestic 5G communication networks. In the future, it is necessary to study the detailed diagnosis process for the vulnerability diagnosis items of 5G communication network virtualization security.
참고문헌 (20)
- R. Khondoker, "SDN and NFV Security:Security Analysis of Software-Defined Networking and Network Function Virtualization (Vol. 30)" (2018), Springer LNCS Publishing
- Abdullah Jameel Rowaished, "An Overview into Applications and Risks in 5G NR Technology", International Journal of Electronics and Communication Engineering, 8(3), pp.8~9 (2021), Seventh Sense Research Group Journals[DOI]
- B. Young, "The Security Risks and Challenges of 5G Communications", International Journal of Cyber Research and Education, 3(2), pp.36~53 (2021)[DOI]
- Y. Wu, "Information security decisions of firms considering security risk interdependency", Journal of Expert Systems with Applications, 178, pp.1~15 (2021)[DOI]
- M. Siavvas, "Technical debt as an indicator of software security risk : a machine learning approach for software development enterprises", Enterprise Information Systems, pp.1~43 (2020)[DOI]
- M. Kataev, "Fuzzy model estimation of the risk factors impact on the target of promotion of the software product", Enterprise Information Systems, 14(6), pp.797~781 (2020)[DOI]
- J. Singh, "Multilevel Security Framework for NFV Based on Software Defined Perimeter", Journal of IEEE Network, 34(5), pp.114~119 (2020)[DOI]
- Real World Threat Modeling Using the PASTA Methodology, "T. UcedaVelez", OWASP, ~ (2012)
- "Trike v1 methodology document. Draft, work in progress" (2005)[URL]
- Attack trees, "B. Schneier", Dr. Dobb’s J, ~ (1999)
- J. Jurjens, "UMLsec: Extending UML for secure systems development", International Conference on The Unified Modeling Language, pp.412~425 (2002), Springer
- C. Alberts, "Introduction to the OCTAVE approach" (2003), Carnegie Mellon University
- I. Alexander, "Misuse cases : use cases with hostile intent", IEEE Software, 20(1), pp.58~66 (2003)[DOI]
- H. Lohr, "Modeling trusted computing support in a protection profile for high assurance security kernels", International conference on trusted computing, pp.45~62 (2009), Springer
- Qualitative Risk Analysis with the DREAD Model, "D. Czagan", ~ (2014)
- M. S. Lund, "Model-driven risk analysis: the CORAS approach" (2010), Springer Science & Business Media
- "Threat Modeling With STRIDE"[URL]
- 문형진, "사물인터넷 통신기술에 내재된 보안위협과 대응 전략", 융합정보논문지, 6(2), pp.37~44 (2016), 중소기업융합학회[DOI]
- 원종혁, "IoT 계층별 보안위협 분석 및 대응기술 개선 방안 연구", 융합정보논문지, 8(6), pp.149~157 (2018), 중소기업융합학회[DOI]
- 조진근, "PC보안 강화를 위한 기술적 취약점 진단항목 개선 연구", 융합정보논문지, 9(3), pp.1~7 (2019), 중소기업융합학회[DOI]