Research On Security Defense System Of NGN

Along with the telecommunication's fusion tendency, customers's service demand also tended the diversification. Under this background, Next Generation Network arises at the historic moment. NGN is one kind of synthesis and opening network, which can fuse services such as correspondence, information, electronic commerce and transaction in the unified packet-switched network. So it can satisfy diverse and personalized service demand, realize service network between intercommunication, and provide fast service with audios, data, images and videos in the entire net.This fusion of network inherits all kinds of vulnerabilities from various networks, and could also have the new vulnerable problems. As the application of NGN extends unceasingly along with technology, the security problems have become more and more serious in the fast development. Therefore the research on security of the NGN becomes urgent and meaningful. In view of these, this article has carried on the detailed analysis of the next generation network's security problem, gived the deep research to single key technologies to propose the corresponding solution, and provided good reference for the next generation network's security technology.At first, this article gave an analysis about security threat and the vulnerability of next generation network, and described the possible attack. Then I listed the typical attack which possibly appeared from the network construction, the protocols and the safety control. In order to know the opposite side better, I also carried on the specific attack design, as the safety examination to the next generation network. The vulnerability analysis and the attack description of the net is the effective guarantees of the next generation network security research and has built the solid foundation for following research of this article.And then, the paper studied the authentication technology in the next generation network with emphasis, innovatively established a comprehensive user safety system by myself, which on the one hand protected user's safe when accessed, on the one hand protected the network entity from the malicious terminal. Also, the system is unified and convenient to carry on the business management and the service expansion. I have given the detailed description from the aspects of network construction, work flow and concrete design.Finally the paper unified several kinds of safety technologies and gave the whole defense plan based on the threat nalysis, which would be very good instruction and appraisal function to the NGN deployment.