Mobile communication inter-network honeypot system and method

Abstract

The invention discloses a mobile communication inter-network honeypot system and method. According to the method and the device, various external security threat problems faced by mobile communication 2G and 3G signaling networks can be solved. A bottom layer access device is deployed at the front part of the STP at the access of a network to be protected; an access mode of noninductive tandem connection is adopted; the device forwards a signaling to be protected to a monitoring server; the monitoring server carries out abnormity detection to the signaling; a normal message is directly returned to the bottom layer access device for forwarding; with respect to the abnormal signaling, the destination address is modified; the abnormal signaling is forwarded to a honeypot device for processing at the back end of the network through the bottom layer device; and the honeypot device sends a corresponding response message according to a configured processing rule. By means of the technical solution of the invention, security detection is carried out to the signaling message entering the internal network; the abnormal signaling message is intercepted and responded; the malicious interference behaviors of the external network are actively defended; the noninductive tandem connection mode is adopted in the device; and the normal communication of the network cannot be influenced under the downtime condition of the device.

Description

technical field [0001] The invention belongs to the technical field of mobile communication security, and in particular relates to a mobile communication inter-network honeypot system and method. Background technique [0002] The global mobile communication network is an interconnected network. my country's mobile operators have signed international roaming agreements with hundreds of foreign mobile operators. According to the roaming agreement, foreign mobile operators can access some user information of the other party through the international signaling network, but the security mechanism of the 2G / 3G mobile signaling network is not perfect, and the mobile network and users are faced with network element equipment interference and user information leakage. threaten. In addition, there are various private mobile communication networks in China, generally with proprietary core network element equipment, combined with public mobile communication networks to provide services...

AI Technical Summary

Problems solved by technology

[0004] 1. Due to the need to intercept abnormal signaling, the protective equipment connected in series generally maintains the following figure 2 In the two sections of signaling links shown, in this way, once the protective equipment fails, the signaling access equipment will enter the straight-through state, and the two sections of signaling links it maintains become physically direct. For a link connecting STP devices at both ends, the signaling link will enter the relocation state until the synchronization is successful. Scenarios such as international signaling links will have a more serious impact, which is unacceptable for telecom operators

[0005] 2. The alarm forwarding method has the risk of immediate damage to user security, and the interception process causes the signaling originator to fail to receive the signaling response, which is essentially a traceable protection method

Images