新一代网络的自动化服务与安全编排的方法

郝哲通; 张金东; 梁海彬; 崔毅

doi:10.12263/newIT.2025.12.003

您当前的位置：

首页 >

文章列表页 >

新一代网络的自动化服务与安全编排的方法

研究论文 | 更新时间：2026-04-07

- 新一代网络的自动化服务与安全编排的方法
- Optimization Methods of Automated Services and Security Orchestration for Next-Generation Networks
- 新一代信息技术 2025年8卷第12期页码：19-25
- 作者机构：
  
  中国移动通信集团设计院有限公司内蒙古分公司，内蒙古呼和浩特 010000
- 作者简介：
  
  郝哲通（1992—），男，工程师。主要研究方向为无线通信技术与系统、算力网络技术。E-mail： haozhetong@cmdi.chinamobile.com
  张金东（1983—），男，高级工程师。主要研究方向为无线技术与系统、信息能源。E-mail： zhangjindong@cmdi.chinamobile.com
  梁海彬（1990—），男，工程师。主要研究方向为无线技术与系统。E-mail： lianghaibin@cmdi.chinamobile.com
  崔毅（1983—），男，工程师。主要研究方向为无线技术与系统。E-mail： cuiyi@cmdi.chinamobile.com
- 基金信息：
- DOI：10.12263/newIT.2025.12.003
  中图分类号： TP393.08;TP393.07
- 修回：2025-11-26，
  
  录用：2025-11-26，
  
  纸质出版：2025-12-15
- 稿件说明：
移动端阅览
郝哲通, 张金东, 梁海彬, 等. 新一代网络的自动化服务与安全编排的方法[J]. 新一代信息技术, 2025, 8(12): 19-25

HAO Zhe-tong, ZHANG Jin-dong, LIANG Hai-bin, et al. Optimization Methods of Automated Services and Security Orchestration for Next-Generation Networks[J]. New Generation of Information Technology, 2025, 8(12): 19-25
郝哲通, 张金东, 梁海彬, 等. 新一代网络的自动化服务与安全编排的方法[J]. 新一代信息技术, 2025, 8(12): 19-25 DOI： 10.12263/newIT.2025.12.003.

HAO Zhe-tong, ZHANG Jin-dong, LIANG Hai-bin, et al. Optimization Methods of Automated Services and Security Orchestration for Next-Generation Networks[J]. New Generation of Information Technology, 2025, 8(12): 19-25 DOI： 10.12263/newIT.2025.12.003.

摘要

6G和新一代互联网对动态资源分配及安全协同编排提出更高要求。本文提出透明异步微分区架构（TRansparent Asynchronous Micro-Partitioning，TRAMP）框架，实现零接触服务与安全编排。该框架基于意图驱动策略，通过元编排层实时评估系统状态与策略优先级，动态选择最优算法（如ACO、B&B）；基础编排层精准决策服务部署策略（执行内容、位置、时机与方式）。同时该框架通过模块化设计，支持通过插件、驱动和管理器无缝集成新安全能力，避免厂商锁定。在1 000节点异构网络实验中，TRAMP实现1.8 ms决策时间，40 s内服务部署，安全策略执行率达92%。实验证明，该框架能高效支撑复杂网络环境下的弹性、自适应编排，为6G及未来网络提供可落地的安全自动化解决方案。

Abstract

This paper proposes the transparent asynchronous micro-partitioning (TRAMP)

a modular meta-orchestration framework for zero-touch service and security management in 6G and next-generation networks. By integrating intent-based policy governance with adaptive algorithm selection

TRAMP dynamically optimizes orchestration strategies through real-time infrastructure state analysis. Its core innovation lies in the meta-orchestration layer that autonomously selects optimal algorithms (e.g.

ACO

B) based on policy priorities and operational constraints

while the basic orchestration layer executes precise service/security deployment decisions. The framework’s plugin-driven architecture enables seamless integration of heterogeneous security capabilities without vendor lock-in. Experimental validation in 1

000-node networks demonstrates

exceptional performance: decision time of 1.8 ms and service deployment less than 40 s

achieving 92% security policy execution rate. TRAMP thus delivers scalable

adaptive

and security-aware orchestration for complex next-generation network environments

achieving the pragmatic security-automation solutions for 6G and next-generatio networks.

关键词

Keywords

references

ADEL SERHANI M , EL-KASSABI H T , SHUAIB K , et al . Self-adapting cloud services orchestration for fulfilling intensive sensory data-driven IoT workflows [J ] . Future Generation Computer Systems , 2020 , 108 : 583 - 597 .

RODAS-SANCHEZ J , GUERRERO C , SOLÍS I , et al . Microservices orchestration in the cloud-to-edge continuum: A real-world evaluation [J ] . Future Generation Computer Systems , 2023 , 138 : 362 - 375 .

COSTA G C M , BITTENCOURT L F , BUYYA R . Orchestrating fog computing: A systematic review and a reference architecture [J ] . ACM Computing Surveys , 2022 , 55 ( 9 ): 1 - 36 .

SVOROBEJ S , MORKEVIČIUS N , VILEITA D , et al . Adaptive service deployment in heterogeneous edge environments [C ] // 2020 IEEE 6th World Forum on Internet of Things (WF-IoT) . New Orleans : IEEE , 2020 : 1 - 6 .

DAVOLI F , LOMBARDO C , MARCHESE M , et al . End-to-end orchestration across administrative domains in the edge-cloud continuum [J ] . IEEE Transactions on Network and Service Management , 2022 , 19 ( 2 ): 1385 - 1399 .

AFOLABI I , SAMDANIS K , COSTA P , et al . A framework for end-to-end orchestration of 6G network slices [J ] . IEEE Communications Standards Magazine , 2021 , 5 ( 3 ): 48 - 54 .

BANDARI V . A comprehensive review of AI applications in automated container orchestration, predictive maintenance, security and compliance, resource optimization, and continuous deployment and testing [J ] . International Journal of Intelligent Automation and Computing , 2021 , 4 ( 1 ): 1 - 19 .

ZHONG Y , LIU L , ZHANG X , et al . A survey on resource orchestration for machine learning workloads in containerized environments [J ] . ACM Computing Surveys , 2024 , 56 ( 4 ): 1 - 37 .

DALAKITSIS A , SARRIGIANNIS I , KALOXYLOS A , et al . Deep learning-aided mobility prediction with genetic algorithm optimization for latency-sensitive service migration in edge computing [C ] // 2021 IEEE 17th International Conference on Mobility, Sensing and Networking (MSN) . Abu Dhabi : IEEE , 2021 : 215 - 223 .

TAM V , ZHANG H , WANG L , et al . Fusing graph neural networks with deep reinforcement learning: Taxonomy, applications, and challenges [J ] . ACM Computing Surveys , 2023 , 56 ( 3 ): 1 - 36 .

VASILAKOS A V , LIU Y , ALOQAILY M , et al . AI-driven SOAR: Multi-source data fusion for intelligent security orchestration and automated response [J ] . IEEE Transactions on Dependable and Secure Computing , 2024 , 21 ( 4 ): 2105 - 2119 .

MOLINA ZARCA A , BERNABE J B , TRAPERO R , et al . Security management architecture for NFV/SDN-aware IoT systems [J ] . IEEE Internet of Things Journal , 2019 , 6 ( 5 ): 8005 - 8020 .

KINYUA J M , KARANJA E M , MWANGI S W , et al . Intelligent SOAR: An AI/ML-driven framework for cybersecurity orchestration and automated response [J ] . Journal of Cybersecurity and Privacy , 2023 , 3 ( 2 ): 478 - 495 .

ISLAM N , KURNIAWAN M , PATEL D , et al . SOAR taxonomy: Conceptual framework and architecture dimensions for security orchestration systems [C ] // Proceedings of the 17th International Conference on Availability, Reliability and Security (ARES 22) . Vienna : ACM , 2022 : 1 - 10 .

LEE Y C , WANG H Y , CHEN S Y , et al . Minimal human intervention security orchestration: A confidence-driven architecture for automated incident response [C ] // 2023 IEEE International Conference on Communications (ICC 2023) . Rome : IEEE , 2023 : 1 - 6 .

MOLINA C , RODRIGUEZ P , GARCIA F , et al . IoT-HoneyGuard: An autonomous self-protecting honeynet framework for resource-constrained IoT environments [J ] . ACM Transactions on Cyber-Physical Systems , 2023 , 7 ( 3 ): 1 - 24 .

BARTWAL A S , PRAKASH A , JOSHI J . Deception at scale: SOAR-driven dynamic honeypot orchestration to maximize attacker dwell time [C ] // Proceedings of the 2022 ACM Asia Conference on Computer and Communications Security (ASIACCS 22) . New York : ACM , 2022 : 771 - 785 .

IMRITH K , RATTAN P , DEDEOGLU V . SecFog: Lightweight virtualization-enabled security service integration for resource-constrained fog nodes [C ] // 2023 IEEE International Conference on Fog Computing (ICFC) . Piscataway : IEEE , 2023 : 45 - 59 .

崔晓靖 . 基于流程编排及RPA自动化的网络监控日常管理标准化体系研究 [J ] . 中国标准化 , 2025 ( 15 ): 80 - 84 .

冯西桥 . 核反应堆压力管道与压力容器的LBB分析 [R ] . 北京 : 清华大学核能技术设计研究院 , 1997 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

暂无数据