臺灣博碩士論文加值系統

在 the fifth generation(5G)中，因需大量導入IOT sensor，使得資料量呈現爆炸性的成長。在如此高流量的環境下卻要有低延遲的條件，這會讓無線傳輸的安全性的實現，變得極為困難。在導入Software Define Network(SDN)與Mobile Edge Computing(MEC)後，無線網路安全的問題有了新的解答。但是，在5G中因使用通訊範圍較小的small cell，與4G相比，換手的次數較為頻繁，使得網路服務或功能的遷移，變成一個極需解決的問題。在本文中，我們提出了一個在EPC或eNB下的防火牆建立流程，並結合EPS-AKA程序，達到減少封包傳遞的數量。我們也探討EPC中的實體故障，以load balance的方法，平均分配故障實體的工作量。另外，針對頻繁換手問題，我們考慮了Intra-MME, Inter-MME, Inter-EPC，三個環境下的換手流程，並結合UE handover的程序，精簡封包數量，降低換手的時間。最後，我們也有提到在非信任環境的換手，並提出一個可行的方法。我們也期望未來能夠此流程能夠擴大成其他服務也能使用，例如，即時翻譯。

In the near future, a huge amount of network will flow through the fifth generation (5G) network since a tremendous number of IOT devices/sensors will soon connect to their application platforms via 5G. In such a heavy-traffic environment, low-latency requirement will seriously impact wireless transmission security. Also, 5G adopts Software Defined Network (SDN) and Mobile Edge Computing (MEC) which conduct short transmission delays and user-defined security may be a solution. Also, in 5G due to employing small cells of small communication ranges, compared with those adopted by 4G, the number of handover will be relatively frequent, that the migration of network services or functions will be another problem yet to be solved. In this paper, we propose a firewall establishment process which installs firewalls in an EPC or eNB. We also implement a fault tolerant mechanism to detect the hardware failures in EPC and then distribute the workload of the failed network entity to other entities of the same functions following the principles of load balance. To solve the problem of frequent handover, we design a handover procedure for each of the three environments, including Intra-MME, Inter-MME and Inter-EPC, which are tightly integrated with UE handover procedure, aiming to reduce the number of transmitted messages and the time consumed by handover. Finally, we also expect that this firewall migration process can be applied to other services, e.g., the migration of instant translation function, in the near future.

Content
Chapter 1 Introduction 1
Chapter 2. Background and Related work 5
2.1 EPS-AKA 5
2.2 Related Studies 6
Chapter 3. System architecture 9
3.1 SGW firewall 9
3.1.1 The data structure of SGW firewall 9
3.1.2 The features of SDN controller, Manager and edge computer 11
3.1.3 SGW Firewall Establishment Procedure 12
3.2 eNB firewall 14
3.2.1 The features of eNB firewall 14
3.2.2 eNB Firewall Establishment Procedure 16
3.3 Network Entity Failure 17
3.3.1 SGW Firewall Failure 17
3.3.2 Failure of edge computer in eNB firewall 20
Chapter 4 Firewall Migration 22
4.1 Intra-MME handover (Intra eNB X2 handover) 22
4.2 Inter-MME handover (X2 handover) 24
4.3 Inter-SGW handover (S10 handover) 26
4.4 Untrusted Case 28
Chapter 5 Simulation and Discussion 29
5.1 Simulation setup 29
5.2 Round Trip Time 33
5.3 Drop rates 36
5.4 Throughputs 37
5.4.1 1 to 1 38
5.4.2 4 to 1 40
5.5 Costs of packets delivered 41
5.5.1 SGW/eNB firewall-EPS-AKA 41
5.5.2 Costs for UE handover 43
Chapter 6 Conclusions and future studies 47
Reference 48

Reference
[1] A. Ijaz, L. Zhang, M. Grau, A. Mohamed, S. Vural, A.U. Quddus, M.A. Imran, C.H. Foh and R.Tafazolli, “Enabling Massive IoT in 5G and Beyond Systems: PHY Radio Frame Design Considerations,” IEEE Access, vol. 4, 2016, pp.3322-3339.
[2] J.M. Khurpade, D. Rao and P.D. Sanghavi, “A Survey on IOT and 5G Network,” International Conference on Smart City and Emerging Technology, 2018, pp.1-3.
[3] D. Fang, Y. Qian and R.Q. Hu, “Security for 5G Mobile Wireless Networks,” IEEE Access, Vol.6, 2018, pp.4850-4874.
[4] S. Vij and A. Jain, “5G: Evolution of a secure mobile technology,” International Conference on Computing for Sustainable Global Development, 2016, pp.2192-2196.
[5] X. Liang and X.Qiu, “A software defined security architecture for SDN-based 5G network,” IEEE International Conference on Network Infrastructure and Digital Content, 2016, pp.17-21.
[6] J. Zhao, S. Guo, K. Zheng, X. Niu and Y. Jiang, “An active defense model for Web Accessing DoS attack,” IEEE International Conference on Information Theory and Information Security, 2010, pp314-318.
[7] B.A.A. Nunes, M. Mendonca, X.N. Nguyen, K. Obraczka and T. Turletti, “A Survey of Software-Defined Networking: Past, Present, and Future of Programmable Networks,” IEEE Communications Surveys & Tutorials, Vol.16, Issue 3, Third Quarter, 2014, pp.1617-1634.
[8] D. Kreutz, F.M. V.Ramos, P.E. Veríssimo, C.E. Rothenberg, S. Azodolmolky and S. Uhlig, “Software-Defined Networking: A Comprehensive Survey,” Proceedings of the IEEE, Vol.103, Issue 1, Jan. 2015, pp.14-76.
[9] C.J. Bernardos, A.L. Oliva, P. Serrano, A. Banchs, L.M. Contreras, H. Jin and A.J.C. ZÚÑIGA, “ An architecture for software defined wireless networking,” IEEE Wireless Communications, Vol. 21, Issue 3, June. 2014, pp.52-61.
[10] N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker and J. Turner, “OpenFlow: Enabling Innovation in Campus Networks,” ACM SIGCOMM Computer Communication Review, Vol.38, Number 2, April 2008, pp.69-74.
[11] Open Network Foundation https://www.opennetworking.org/, March 2019
[12]A. Basta, W. Kellerer, M. Hoffmann, K. Hoffmann and E.D. Schmidt, “A Virtual SDN-enabled LTE EPC Architecture: a case study for S-/P-Gateways functions,” IEEE SDN for Future Networks and Services, 2013, pp.1-7.
[13] M. Naeem, W. Ejaz, L. Karim, S.H. Ahmed, A. Anpalagan, M. Jo, and H. Song, ”Distributed Gateway Selection for M2M Communication in Cognitive 5G Networks,” IEEE Network, Vol.31, Issue 6, November/December 2017, pp.94-100.
[14] L. Velasco and M. Ruiz, “Flexible Fog Computing and Telecom Architecture for 5G Networks,” International Conference on Transparent Optical Networks, 2018, pp.1-4.
[15] Y. C. Hu, M. Patel, D. Sabella, N. Sprecher and V. Young, “Mobile Edge Computing A key technology towards 5G,” ETSI White Paper, No. 11, September 2015, pp.1-16.
[16] X. Ge ,J. Ye ,Y. Yang and Q. Li, “User Mobility Evaluation for 5G Small Cell Networks Based on Individual Mobility Model,” IEEE Journal on Selected Areas in Communications, Vol.34, Issue 3, March 2016, pp.528-541.
[17] A. Arins, “Firewall as a service in SDN OpenFlow network,” IEEE Workshop on Advances in Information, Electronic and Electrical Engineering, Nov. 2015, pp.1-5.
[18] N. Zope, S. Pawar and Z. Saquib, “Firewall and load balancing as an application of SDN,” IEEE Conference on Advances in Signal Processing, 2016, pp.354-359.
[19] S.V. Morzhov and M.A. Nikitinskiy, “Development and Research of the PreFirewall Network Application for Floodlight SDN Controller,” Moscow Workshop on Electronic and Networking Technologies, 2018, pp.1-4.
[20] S. Asadollahi, B. Goswami, A.S. Raoufy and H.G.J. Domingos, “Scalability of software defined network on floodlight controller using OFNet,” International Conference on Electrical, Electronics, Communication, Computer, and Optimization Techniques, 2017, pp.1-5.
[21] N. Gray, C. Lorenz and A. Müssig, “A priori state synchronization for fast failover of stateful firewall VNFs,” IEEE NetSays, March 2017, pp.1-6.
[22] S. Fichera, M. Gharbaoui, P. Castoldi, B. Martini and A. Manzalini, “On Experimenting 5G: Testbed Set-up for SDN Orchestration across Network Cloud and IoT domains,” IEEE Conference on Network Softwarization, 2017, pp.1-6.
[23] K. Zhang, S. Leng, Y. He, S. Maharjan and Y. Zhang, “Cooperative Content Caching in 5G Networks with Mobile Edge Computing,” IEEE Wireless Communications, Vol.25, Issue 3, June 2018, pp.80-87.
[24] P. Bellavista, A. Zanni and M. Solimando, “A Migration-enhanced Edge Computing Support for Mobile Devices in Hostile Environments,” International Wireless Communications and Mobile Computing Conference, 2017, pp.957-962.
[25] LibSVM, [online] Available: http://www.csie.ntu.edu.tw/~cjlin/libsvm, March 2019
[26] Z. Guoa, R. Liub, Y. Xuc, A. Gushchind, A. Walide and H.J. Chaoc, “STAR: Preventing flow-table overflow in software-defined networks,” Computer Networks, Vol.125, 2017, pp.15-25.
[27] J. Liu, Y. Shi, L. Zhao, Y. Cao, W. Sun and N. Kato, “Joint Placement of Controllers and Gateways in SDN-Enabled 5G-Satellite Integrated Network,” IEEE Journal on Selected Areas in Communications, Vol.36, Issue 2, Feb. 2018, pp.221-232.