sankeerthana-n/Behavioural-Zero-Trust-Security-Framework-for-5G-Non-Terrestrial-Networks-NTN-
GitHub: sankeerthana-n/Behavioural-Zero-Trust-Security-Framework-for-5G-Non-Terrestrial-Networks-NTN-
该项目模拟了一个面向 5G 非地面网络的行为零信任安全框架，通过对多层卫星节点进行实时遥测信任评分来检测并防御欺骗、重放和冒充攻击。
Stars: 0 | Forks: 0
# BZT-NTN 安全框架
**面向 5G 非地面网络的行为零信任安全框架**
这是一个功能完整、可本地运行的演示，通过行为信任评分、主动策略缓存和实时威胁检测，模拟基于卫星的 5G NTN 安全。
## 架构
```
+------------------+ +---------------------+ +------------------+
| NTN Simulator | --> | Analytics Engine | --> | PDP Engine |
| (4 sat layers) | | (Trust Scoring) | | (Token Caching) |
+------------------+ +---------------------+ +------------------+
| | |
v v v
+---------------------------------------------------------------+
| FastAPI REST Server |
| http://localhost:8000 |
+---------------------------------------------------------------+
|
v
+---------------------------------------------------------------+
| Live Web Dashboard |
| http://localhost:8000/dashboard |
+---------------------------------------------------------------+
```
## 快速开始（3 条命令）
```
pip install -r requirements.txt
uvicorn api_server:app --reload --port 8000
# 在浏览器中打开 http://localhost:8000/dashboard
```
## API Endpoints
| Method | Endpoint | Description |
|--------|------------------|------------------------------------------|
| GET | /status | 系统健康状况、运行时间、活跃节点 |
| GET | /telemetry | 最后 50 条遥测记录 |
| GET | /decisions | 最后 50 条带有信任评分的 PDP 决策 |
| GET | /metrics | 实时 KPI（延迟、检测、缓存） |
| GET | /attacks | 检测到/注入的攻击事件 |
| POST | /inject_attack | 触发攻击：velocity_spoof、replay、impersonation |
| GET | /cache_state | 各层主动缓存内容 |
| GET | /handover_log | 垂直切换延迟日志 |
| GET | /dashboard | 实时 Web 仪表盘 |
## 卫星层
| Layer | Altitude | Velocity | Token TTL | RTT |
|-------|-----------|------------|-----------|--------|
| HAPS | 20 km | 0-50 m/s | 30s | 15ms |
| LEO | 550 km | 7500-8000 | 10s | 20ms |
| MEO | 8000 km | 3700-4100 | 60s | 100ms |
| GEO | 35786 km | 3000-3200 | 120s | 600ms |
## 攻击场景
1. **Velocity Spoof** - LEO 节点报告 HAPS 级别的速度（约 20 m/s）
2. **Replay Attack** - MEO 节点重复相同的时间戳 5 次
3. **Node Impersonation** - 节点声明使用已存在的 ID，但带有错误的 GPS 偏移（偏移 +30-50 度）
## 信任评分
```
Trust = w1(Location) + w2(Velocity) + w3(Identity)
Decision thresholds:
>= 70 -> ALLOW (green)
40-69 -> CHALLENGE (yellow)
< 40 -> DENY (red)
```
## 评估目标
| Metric | Target | Achieved |
|------------------------|------------|----------|
| Auth Latency (cached) | < 50ms | ~5-8ms |
| Spoofing Detection | > 90% | > 92% |
| Cache Hit Rate | > 85% | > 95% |
| Session Continuity | 100% | 100% |
| Signalling Overhead | < 8% | ~4-6% |
## 项目结构
```
bzt_ntn_framework/
api_server.py # FastAPI app + background simulation loop
ntn_simulator.py # Satellite telemetry generator (Module 1)
analytics_engine.py # Trust scoring + threat detection (Module 2)
pdp_engine.py # PDP, token caching, PEP simulation (Module 3)
dashboard.html # Self-contained live dashboard (Module 5)
requirements.txt # fastapi uvicorn httpx
README.md # This file
```
标签：5G NTN, AV绕过, FastAPI, HTTP/HTTPS抓包, JSONLines, SAGIN, 态势感知, 运行时操纵, 逆向工具, 零信任