SMART-5G: Secure Multichannel Automated operRations Through 5G Networks

SMART-5G项目的目标是开发一套技术、工具和操作原则，使军用通信能够在民用5G基础设施上安全运行。我们将使用多访问边缘计算机或MEC的功能进行安全通信。通过利用部署在5G网络基础设施内的军方提供的服务器以及战术边缘和后端基础设施中的服务器，我们展示了如何通过各种技术获得更安全的操作环境，包括：将AI应用于网络流量检测，策略驱动的流量分离沿着低带宽安全通信路径和高带宽不安全通信路径，利用移动的边缘计算机制的虚拟多功能身份验证，以及用于自动化操作的安全策略的自我生成。 为了支持作为融合研究项目的一部分开发的场景，该团队将开发一套技术，使军事人员能够在不影响安全要求的情况下通过不安全的5G网络进行操作，并将这些技术分为三个不同但相互关联的重点：多通道利用，网络态势感知和安全工作流自动化。多通道利用包括使用具有不同性能和安全属性的多个通道来为关键任务应用程序提供所需的环境。网络态势感知通过监控和分析5G网络中的流量和活动为用户提供信息;安全工作流程的自动化使用安全协议的自动化来提高对威胁的响应能力。 这种多学科的努力汇集了计算机科学，机器学习，网络运营和管理以及社会科学等研究领域。将确定通过社会工程可以发起的潜在威胁，并提出检测和缓解的对策。

The objective of the SMART-5G project or Secure Multichannel Automated opeRations Through 5G Networks, is to develop a suite of technologies, tools and operational principles which will allow for the secure operation of military communications on civilian 5G infrastructure. We will employ the capabilities of Multi-access Edge Computers or MEC, for secure communication. By leveraging military-provided servers that are deployed within the 5G network infrastructure plus servers at the tactical edge and in the backend infrastructure, we show how a more secure operational environment can be obtained with a variety of techniques including: application of AI to network traffic inspection, policy-driven separation of traffic along a low-bandwidth secure communication path and a high-bandwidth insecure communication path, virtual multi-function authentication leveraging mobile edge computing mechanisms, and self-generation of security policies for automated operations. To support the scenarios to be developed as part of the convergence research project, the team will develop a suite of technologies to enable military personnel to operate through the insecure 5G network without compromising security requirements, and group these technologies into three different, but inter-related thrusts: multi-channel exploitation, network situation awareness, and automation of security workflows. Multi-channel exploitation includes the use of multiple channels with different performance and security properties to provide the required environment for mission-critical applications. Network situation awareness provides information to users through monitoring and analysis of the traffic and activities in the 5G network; and, automation of security workflows use automation of security protocols to improve responsiveness to threats. This multidisciplinary effort brings together research fields such as computer science, machine learning, network operations and management, and social science. Potential threats that can be launched through social engineering will be identified, and countermeasures proposed for detection and mitigation.