A method and device for preventing signaling attacks

Abstract

The embodiment of the present invention discloses a method and device for preventing signaling attacks. The method includes: receiving a general packet radio service (GPRS) tunneling protocol (GTP‑C) message sent by a serving gateway (SGW); Whether the GTP-C message is received from the S8 interface; when the GTP-C message is received from the S8 interface, it is judged whether the first characteristic parameter of the GTP-C message is legal, and the first characteristic parameter includes the following parameters At least one of: the identifier of the message source of the GTP-C message, the user's International Mobile Subscriber Identity (IMSI); if the first characteristic parameter of the GTP-C message is illegal, discard the GTP-C message or return a GTP-C response message carrying an error code cause value to the SGW. Therefore, it can effectively prevent hackers from using various attack paths to attack the PGW, and improve communication security.

Description

technical field [0001] The invention relates to the communication field, in particular to a method and device for preventing signaling attacks. Background technique [0002] The Serving GateWay (SGW for short) and the Public Data Network GateWay (PGW for short) are both important network elements in the mobile communication network. The SGW is responsible for the data plane function of user data forwarding, and the PGW provides user session management and Functions such as bearer control, data forwarding, Internet Protocol (Internet Protocol, IP) address allocation, and non-3rd Generation Partnership Project (3rd Generation Partnership Project, 3GPP) user access. [0003] In the fourth generation mobile communication technology (The 4th Generation mobile communication technology, 4G for short) network, the GTP-C protocol in the General Packet Radio Service Tunneling Protocol (General Packet Radio Service Tunneling Protocol, GTP for short) protocol is used between the SGW and...

AI Technical Summary

Problems solved by technology

[0003] In the fourth generation mobile communication technology (The 4th Generation mobile communication technology, 4G for short) network, the GTP-C protocol in the General Packet Radio Service Tunneling Protocol (General Packet Radio Service Tunneling Protocol, GTP for short) protocol is used between the SGW and the PGW The defined fifth data interface or eighth data interface S5 / S8 interface communicates. When SGW and PGW belong to the same operator, SGW and PGW communicate through S5 interface. At this time, the communication is safe. When SGW and PGW belong to When there are different operators, the SGW and PGW communicate through the S8 interface. At this time, hackers may use the SGW to attack the PGW, causing communication security risks

Images