Abstract:With the emergence of cloud native technology, the network slicing enables automatic service orchestration, flexible network scheduling and scalable network resource allocation, which profoundly affects the traditional security solution. Security is regarded as a technology independent of the cloud native architecture in the initial design, traditional passive defense such as “reinforced” and “stacked” is relied on to achieve system security protection. The lack of intrinsic security mechanisms makes the system capability insufficient when faces the uncertain threat brought by vulnerabilities and backdoors under the ecosystem of opening-up and sharing. The static nature of existing networks and computing systems makes them easy to be compromised and hard to defend, and thus it is urgent to provide intrinsic security and proactive protection against the unpredictable attacks. To this end, this paper proposes a novel paradigm named intrinsic cloud security (iCS) from the perspective of dynamic defense. The dynamic defense provides component-level security, and has complementary and consistency with the cloud native environment. In particular, iCS introduces mimic defense and moving target defense (MTD), and makes full use of the new features introduced by cloud native to implement an intrinsic and proactive defense mechanism with acceptable costs and efficiency. The iCS paradigm achieves seamless integration and symbiosis evolution between security and cloud native. We implement a trial of iCS based on 5GC commercial system and evaluate its performance on costs, efficiency and attack success. The result shows that the iCS enhanced mode always can provide a better and more stable defense effects.

Secure Cloud Architecture for 5G Core Network

Intrinsic Security and Self-Adaptive Cooperative Protection Enabling Cloud Native Network Slicing

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

A Cloud-ICT Convergence Service Architecture SDN/NFV Powered

An Elastic Reconstruction of 5G Network Oriented Cloud-ICT Convergence Service

MimicCloudSim: an Environment for Modeling and Simulation of Mimic Cloud Service

ML-SLD: A message-level stateless design for cloud-native 5G core network

Secure Cloud Computing Architecture for Mobile Internet

Security Architecture and Key Technologies for Super SIM-Based 5G End-Cloud System

Customized Network Security for Cloud Service

High Performance and Security in Cloud Computing

Csfc: Building Credible Service Function Chain on the Cloud

5G Enhanced Service-based Core Design

CloudSEC: A Cloud Architecture for Composing Collaborative Security Services

Secure Cloud Computing Architecture on Mobile Internet

Deployment of Robust Security Scheme in SDN Based 5G Network over NFV Enabled Cloud Environment

SBA-Based Mobile Edge Computing

Enhancing the Trustworthiness of 6G Based on Trusted Multi-Cloud Infrastructure: A Practice of Cryptography Approach

5GC-SDP: Security Enhancement of 5G Core Networks with Zero Trust

Comparative Analysis of 5G Mobile Communication Network Architectures

Scientific Workflow Execution System Based on Mimic Defense in the Cloud Environment.