2026· E3S Web of Conferences· 0 citations· 2 references
TL;DR
An AI-assisted, cross-layer security orchestration framework that integrates epoch-wise telemetry with ML-based risk estimation and formalizes mitigation as a Constrained Markov Decision Process (CMDP), and empirical evidence that adaptive mitigation can reduce security risk without sacrificing service guarantees is provided.
Abstract
5G networks increasingly rely on key enabling technologies such as Software-Defined Networking (SDN), Network Function Virtualization (NFV), Multi-Access Edge Computing (MEC), and end-to-end network slicing to deliver heterogeneous services with strict quality-of-service (QoS) guarantees. However, programmability, multi-tenancy, and distributed edge–cloud operation significantly expand the attack surface. At the same time, traditional rule-based and reactive security mechanisms remain slow to adapt and may violate latency constraints during mitigation. This paper addresses the problem of QoS-compliant, closed-loop security control for sliced SDN/NFV infrastructures. We propose an AI-assisted, cross-layer security orchestration framework that integrates epoch-wise telemetry with ML-based risk estimation and formalizes mitigation as a Constrained Markov Decision Process (CMDP). The CMDP controller selects enforceable actions— slice isolation, rate limiting, traffic rerouting, and key reconfiguration—while explicitly satisfying latency/overhead constraints, and executes them via SDN flow-rule updates and NFV policy/VNF reconfiguration. Simulation results over 50 decision epochs demonstrate effective response to an injected high-risk event: risk spikes to 0.95 at epoch 15, after which the controller drives risk toward ≈0.10 while maintaining latency below the 40ms QoS bound (with a transient rise during mitigation and subsequent stabilization). The reward trajectory briefly degrades during disruption but recovers and converges to a positive long-term return, indicating stable constraint-aware operation. This work provides (i) a deployable cross-layer orchestration architecture for sliced networks, (ii) a QoS-constrained CMDP decision model that converts risk signals into actionable SDN/NFV controls, and (iii) empirical evidence that adaptive mitigation can reduce security risk without sacrificing service guarantees.
A 5G network slicing intrusion detection mechanism, called the DDoS Defense Model on 5G Network Slices (2D5NS) which integrates machine learning and real-time traffic monitoring techniques to detect and mitigate DDoS attacks within an O-RAN is proposed.
Kun-Lin Tsai, Shih-Ting Chiu, Chihhsiong Shih et al.· Computer Modeling in Enginee...· 0 citations
The adaptive outline lessens controller CPU utilization, speeds up mitigation response times, lowers end-to-end latency, and keeps higher throughput when compared to static mitigation procedures, according to experimental evaluations carried out in a precise SDN emulation environment.
Nirzari Patel, H. Patel· International journal of com...· 0 citations
An Adaptive SDN-Edge 5G Architecture (ASE-5G) is proposed that integrates SDN programmability with edge-assisted control-plane coordination while preserving compatibility with the 3rd Generation Partnership Project (3GPP) service-based architecture.
Vivi Monita, Naufal Hanan, Lutfianto et al.· 0 citations
5G-Advanced (3GPP Release 18) architectural changes include multi-access edge computing (MEC) architectural changes, network automation, and non-public networks (NPNs). It is important to note that even though these advancements provide substantial performance advantages, they destroy fixed-perimeter security models, p...
E. Egho-Promise, Ekereuke Udoh, Edita Gashi et al.· Information· 0 citations
Results prove the combination of adaptive intelligence, secure virtualization, and dynamic policy enforcement boosts cybersecurity defenses in unique ways for programmable SDN and DCN infrastructures.
Hasan Alkahtani· JOIV: International Journal...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.