Cyber security management system, method, and apparatus

A cyber security management system, wherein the cyber security management system is configured to implement security management of a 5G telecommunication network comprising at least two logical telecommunication network slices, and the cyber security management system comprises user equipment (UE), an access network (AN) connected to multiple carriers and multiple UEs, a network function selection module, and at least two authentication modules, wherein

• the network function selection module comprises a first memory and a first processor connected to the first memory, the first memory stores a first program, and the first processor is configured to execute the first program;
• each authentication module comprises a second memory and a second processor connected to the second memory, the second memory stores a second program, and the second processor is configured to execute the second program;
• the UE is configured to send a first service request to the network function selection module, wherein the first service request carries authentication protocol information;
• the network function selection module is configured to:
• select a target authentication module from the at least two authentication modules based on the authentication protocol information, and send a second service request to the target authentication module, wherein
• the target authentication module is configured to:
• receive the second service request, and perform mutual authentication with the UE;
• and
• the target authentication module is further configured to:
• determine a first security configuration according to a specified security policy of a specified network slice to which the UE is to be attached, and send a second service request response to the AN, wherein the second service request response carries the first security configuration;
• the AN is configured to provide network access for multiple UEs to access multiple carriers and multiple network slices;
• and
• the AN is further configured to:
• determine a second security configuration based on the first security configuration or the specified security policy, and send a first service request response to the UE, wherein the first service request response carries the second security configuration.