隨者科技進步，現在能透過行動網路的結合，使大量的設備可以不需要再依賴有線通訊的環境限制，使物聯網(Internet of Things, IoT)變得更加便利。但隨著這個便利，同時也讓許多惡意也獲得便利。
為了使獲得便利的同時，也有著相對應的保護，本論文提出一種基於5G NSA(5G Non-Standalone)系統中加入零信任網路架構(Zero Trust Architecture, ZTA)與即時檢測攻擊系統，該系統可以透過零信任架構進行全面的權限控管，並透過即時檢測系統進行分散式阻斷服務攻擊(Distributed Denial-of-Service attack, DDoS Attack)檢測，當檢測到攻擊時會透過零信任架構的動態權限進行相對應的管控。在即時檢測系統中，本論文使用兩種模型長短期記憶法(Long Short-Term Memory, LSTM)與支持向量機(Support Vector Machine, SVM)進行比較。最後將傳統網路防禦架構與本論文提出的架構進行比較。
根據實際測試的結果中可以看得出來，以封包資料作為辨識資料的方式下長短期記憶法的準確率是99.64%，是相比支持向量機更加適合。以及本論文的架構比起傳統網路更能抑制攻擊來源與遭受攻擊時的擴散，明顯看出可以提升網路安全性。

With the advancement of technology, it is now possible to leverage the integration of mobile networks to eliminate the reliance on wired communication environments for a large number of devices, thereby making the Internet of Things (IoT) even more convenient. However, along with this convenience, it has also made it easier for malicious actors to operate.
In order to ensure corresponding protection alongside the convenience, this paper proposes an approach based on integrating Zero Trust Architecture (ZTA) and real-time attack detection system within the 5G NSA (5G Non-Standalone) system. This system utilizes the Zero Trust Architecture for comprehensive permission control and employs real-time detection to identify Distributed Denial-of-Service (DDoS) attacks. When an attack is detected, it enacts corresponding control measures through the dynamic permissions of the Zero Trust Architecture. In the real-time detection system, the paper compares two models: Long Short-Term Memory (LSTM) and Support Vector Machine (SVM).
Based on the results of practical testing, it can be observed that when using packet data as the identification method, LSTM achieves an accuracy rate of 99.64%, making it more suitable compared to Support Vector Machine. Furthermore, the architecture proposed in this paper demonstrates better capabilities in suppressing attack sources and limiting the spread of attacks compared to traditional network defense frameworks. This clearly indicates an enhancement in network security.

摘要.............................................................................................................................................i
Abstract.......................................................................................................................................ii
誌謝...........................................................................................................................................iii
目錄...........................................................................................................................................iv
表目錄.......................................................................................................................................vi
圖目錄......................................................................................................................................vii
第一章 緒論..............................................................................................................................1
1.1 研究背景......................................................................................................................1
1.2 研究動機與目的.........................................................................................................2
1.3 論文架構......................................................................................................................2
第二章 文獻回顧......................................................................................................................3
2.1 物聯網.........................................................................................................................3
2.2 第五代行動通訊技術.................................................................................................4
2.2.1 5G 非獨立模式 .................................................................................................5
2.2.2 5G 獨立模式 .....................................................................................................5
2.3 零信任架構.................................................................................................................6
2.4 分散式阻斷服務攻擊.................................................................................................7
2.4.1 網路頻寬消耗型..............................................................................................8
2.4.2 系統資源消耗型..............................................................................................9
2.4.3 殭屍網路........................................................................................................10
2.5 長短期記憶法(LSTM).............................................................................................. 11
2.6 支持向量機(SVM)....................................................................................................13
第三章 系統架構....................................................................................................................15
3.1 軟硬體介紹................................................................................................................15
3.2 實驗架構...................................................................................................................19
3.2.1 5G 系統架構 ...................................................................................................20
3.2.2 零信任認證架構............................................................................................20
3.2.3 即時偵測系統架構........................................................................................21
3.2.4 資料表與模型訓練........................................................................................21
3.3 系統流程....................................................................................................................24
3.3.1 認證流程圖.....................................................................................................24
3.3.2 即時攻擊檢測流程圖....................................................................................25
第四章 實驗與結果................................................................................................................26
4.1 5G 物聯網感測器收集與資料傳輸 ..........................................................................26
4.1.1 收集資料........................................................................................................26
4.1.2 資料傳輸........................................................................................................27
4.2 DDOS 攻擊架構 ........................................................................................................27
4.3 零信任認證架構.......................................................................................................28
4.4 DDOS 攻擊對於系統影響 ........................................................................................29
4.4.1 正常狀態紀錄................................................................................................29
4.4.2 SYN 攻擊狀態紀錄........................................................................................31
4.4.3 UDP 攻擊狀態下紀錄....................................................................................33
4.5 邊緣運算裝置訓練模型過程...................................................................................35
4.5.1 SVM ................................................................................................................35
4.5.2 LSTM ..............................................................................................................36
4.6 實驗結果與實際應用...............................................................................................36
4.6.1 攻擊檢測實測................................................................................................37
4.6.2 傳統架構與零信任認證架構的差異............................................................40
第五章 結論與未來研究方向................................................................................................45
參考文獻..................................................................................................................................46
Extended Abstract.....................................................................................................................49

[1] N. NEWS. " 光 躍 時 代 ： 淺 談 5G 技 術 及 資 安 威 脅 ." NCC NEWS.
https://nccnews.com.tw/202010/ch2.html (accessed May 24, 2023).
[2] Z. Feng, P. Zhou, Q. Wang, and W. Qi, "A dual-layer zero trust architecture for 5g industry
mec applications access control," in 2022 IEEE 5th International Conference on Electronic
Information and Communication Technology (ICEICT), 2022: IEEE, pp. 100-105.
[3] K. Ramezanpour and J. Jagannath, "Intelligent zero trust architecture for 5G/6G tactical
networks: Principles, challenges, and the role of machine learning," arXiv:2105.01478
[cs.NI], 2021.
[4] F. A. Qazi, "Study of Zero Trust Architecture for Applications and Network Security," in
2022 IEEE 19th International Conference on Smart Communities: Improving Quality of
Life Using ICT, IoT and AI (HONET), 2022: IEEE, pp. 111-116.
[5] 邱昱勳, "適用於oneM2M架構之物聯網分散式阻斷服務攻擊檢測與防治," 國立虎尾
科技大學, 2022.
[6] ZDNET. "Google says it mitigated a 2.54 Tbps DDoS attack in 2017, largest known to
date." ZDNET. https://www.zdnet.com/article/google-says-it-mitigated-a-2-54-tbpsddos-attack-in-2017-largest-known-to-date/ (accessed may 25, 2023).
[7] UNIT42. "Mirai Variant V3G4 Targets IoT Devices." UNIT42.
https://unit42.paloaltonetworks.com/mirai-variant-v3g4/ (accessed JUN 4, 2023).
[8] X. Chen, D. W. K. Ng, W. Yu, E. G. Larsson, N. Al-Dhahir, and R. Schober, "Massive
access for 5G and beyond," IEEE Journal on Selected Areas in Communications, vol. 39,
no. 3, pp. 615-637, 2020.
[9] B. Dorsemaine, J.-P. Gaulier, J.-P. Wary, N. Kheir, and P. Urien, "Internet of things: a
definition & taxonomy," in 2015 9th International Conference on Next Generation Mobile
Applications, Services and Technologies, 2015: IEEE, pp. 72-77.
[10] JavaTpoint. "https://www.javatpoint.com/iot-internet-of-things." JavaTpoint.
https://www.javatpoint.com/iot-internet-of-things (accessed May 23, 2023).
[11] 阿旺. "Day2 物聯網簡介 - iT 邦幫忙::一起幫忙解決難題，拯救 IT 人的一天." 阿
旺. https://ithelp.ithome.com.tw/articles/10216713 (accessed May 23, 2023).
[12] 宅學習 . "4. 產 業 價 值 ( 生 態 ) 鏈 、 物 聯 網 標 準 | 宅學習 ." 宅學習 .
https://sls.weco.net/node/23340 (accessed May 20223, 2023).
[13] R. Mohamed, S. Zemouri, and C. Verikoukis, "Performance evaluation and comparison
between SA and NSA 5G networks in indoor environment," in 2021 IEEE International
Mediterranean Conference on Communications and Networking (MeditCom), 2021: IEEE,
pp. 112-116.
[14] H. Guo, X. Zhao, B. Cai, J. Hou, M. Wei, and X. Xu, "Research on Handover Technology
47
in 5G NSA and SA Hybrid Network," in 2022 IEEE International Symposium on
Broadband Multimedia Systems and Broadcasting (BMSB), 2022: IEEE, pp. 1-5.
[15] E. T. Taiwan. "5G SA開台 多重無線技術測試再添挑戰 - 電子工程專輯." Anthea
Chuang. https://www.eettaiwan.com/20221019nt31-5g-sa-multi-test/ (accessed May 23,
2023).
[16] G. 技嘉科技. "5G | 第五代行動通訊技術 - GIGABYTE 技嘉科技." GIGABYTE 技
嘉科技. https://www.gigabyte.com/tw/Glossary/5g (accessed May 23, 2023).
[17] NIST. "Draft (2nd) SP 800-207, Zero Trust Architecture." NIST.
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207-draft2.pdf
(accessed July 8, 2023).
[18] J. B. Michael, G. C. Dinolt, F. B. Cohen, and D. Wijesekera, "Can you trust zero trust?,"
Computer, vol. 55, no. 8, pp. 103-105, 2022.
[19] C. Zhang et al., "Tag-Based Trust Evaluation In Zero Trust Architecture," in 2022 4th
International Academic Exchange Conference on Science and Technology Innovation
(IAECST), 2022: IEEE, pp. 772-776.
[20] J. Kindervag, "Build security into your network’s dna: The zero trust network
architecture," Forrester Research Inc, vol. 27, 2010.
[21] M. Alawneh and I. M. Abbadi, "Integrating trusted computing mechanisms with trust
models to achieve zero trust principles," in 2022 9th International Conference on Internet
of Things: Systems, Management and Security (IOTSMS), 2022: IEEE, pp. 1-6.
[22] B. Zhang, T. Zhang, and Z. Yu, "DDoS detection and prevention based on artificial
intelligence techniques," in 2017 3rd IEEE International Conference on Computer and
Communications (ICCC), 2017: IEEE, pp. 1276-1280.
[23] C. Kolias, G. Kambourakis, A. Stavrou, and J. Voas, "DDoS in the IoT: Mirai and other
botnets," Computer, vol. 50, no. 7, pp. 80-84, 2017.
[24] S. Hochreiter and J. Schmidhuber, "Long short-term memory," Neural computation, vol.
9, no. 8, pp. 1735-1780, 1997.
[25] S. Prakash, A. S. Jalal, and P. Pathak, "Forecasting COVID-19 Pandemic using Prophet,
LSTM, hybrid GRU-LSTM, CNN-LSTM, Bi-LSTM and Stacked-LSTM for India," in
2023 6th International Conference on Information Systems and Computer Networks
(ISCON), 2023: IEEE, pp. 1-6.
[26] M. A. I. Sunny, M. M. S. Maswood, and A. G. Alharbi, "Deep learning-based stock price
prediction using LSTM and bi-directional LSTM model," in 2020 2nd novel intelligent
and leading emerging sciences conference (NILES), 2020: IEEE, pp. 87-92.
[27] 何文翔, "以SVM分類器辨識人體舞姿之研究," 碩士, 電機工程學系, 國立臺灣海
洋大學, 基隆市, 2018. [Online]. Available: https://hdl.handle.net/11296/n3zkb8
[28] A. R. Wani, Q. Rana, U. Saxena, and N. Pandey, "Analysis and detection of DDoS attacks
on cloud computing environment using machine learning techniques," in 2019 Amity
48
International conference on artificial intelligence (AICAI), 2019: IEEE, pp. 870-875.
[29] IT邦幫忙. "[筆記]機器學習技法-支持向量機(Support Vector Machine , SVM)."
Kevin https://ithelp.ithome.com.tw/articles/10231614 (accessed May 25, 2023).
[30] K. Linux. "hping3 | Kali Linux Tools." Kali Linux. https://www.kali.org/tools/hping3/
(accessed May 23, 2023).
[31] Wireshark. "tshark(1) Manual Page." Wireshark. https://www.wireshark.org/docs/manpages/tshark.html (accessed May 23, 2023).
[32] S. R. Systems. "5G NSA srsUE — srsRAN 4G 23.04 documentation." Software Radio
Systems.
https://docs.srsran.com/projects/4g/en/latest/app_notes/source/5g_nsa_amari/source/inde
x.html (accessed May 23, 2023