A false base station detection method based on network side user data

Abstract

The invention discloses a pseudo-base station detection method based on user data on the network side, which includes: parsing URL and corresponding access information from HTTP request data of multiple users in the mobile Internet, and analyzing the obtained result according to the domain name whitelist of the current network URLs are filtered to obtain abnormal URLs; for any abnormal URL, its traffic threshold is obtained, and the base station whose traffic to the abnormal URL is greater than the traffic threshold in the target time interval is determined as an abnormal base station, so as to obtain the abnormal URL corresponding For any abnormal URL, if the corresponding abnormal base station set is not empty, then it is determined that the abnormal URL is a malicious URL, and the abnormal base station set is divided so that the adjacent abnormal base stations in geographical location belong to the same A subset of abnormal base stations, so as to obtain the active area of ​​pseudo base stations. The invention can accurately obtain multiple active areas of the pseudo base station without relying on mobile terminal users.

Description

technical field [0001] The invention belongs to the field of mobile Internet network security, and more specifically relates to a method for detecting a pseudo-base station based on network-side user data. Background technique [0002] The fake base station can use the one-way authentication mechanism that the mobile phone cannot identify the base station to obtain the mobile phone card information, and force the mobile phone to send spam messages in groups. In the mobile Internet, fake base stations are one of the main ways to spread malicious URLs (Uniform Resource Locators, Uniform Resource Locators), because the numbers of spam messages sent by fake base stations can be changed at will, and phishing URLs with financial fraud nature often use 95555 , 95588, 10086 and other common service official numbers that netizens do not have a high awareness of, and users are often easily deceived and suffer economic and property losses. Moreover, the pseudo base station has the cha...

AI Technical Summary

Problems solved by technology

This method needs to enable mobile phone positioning, which will bring traffic and power loss to mobile phones. At the same time, it is impossible to perceive the geographical activity track of pseudo base stations in a large area.

[0004] In general, the existing methods for detecting pseudo-base stations cannot accurately obtain the activity area of ​​pseudo-base stations without relying on mobile terminal users, which is not conducive to communication operators' real-time and effective tracking of pseudo-base stations

Images