Network attack solution method and device, equipment and medium

Abstract

The invention discloses a network attack solution method and device, equipment and a medium, and belongs to the field of mobile communication. The method comprises the following steps: limiting the use of a terminal on a target protocol data unit (PDU) session under the condition that the SMF identifies a network attack of the terminal, wherein the target PDU session carries a target message, and the target message is a message for triggering a network element of a core network to initiate the network attack to the SMF. According to the method and the device, the UE cannot send the target message with the network attack capability to the core network without limitation, so that the DOS attack initiated by the abnormal UE is defended, and a mobile communication system is ensured to provide services for more UE as much as possible.

Description

technical field

[0001] The embodiments of the present application relate to the field of mobile communications, and in particular to a network attack solution, device, device and medium. Background technique

[0002] In an edge computing scenario, a domain name system (DomainName System, DNS) query sent by a user equipment (User Equipment, UE) may be processed by an edge application server discovery function (Edge Application Server Discovery Function, EASDF).

[0003] The session management function (Session Management Function, SMF) provides reporting (Reporting) rules and forwarding (Forwarding) rules to EASDF. The report rules provide the rules for EASDF to send reports to SMF, and the forwarding rules provide the rules for EASDF to forward messages. After the UE sends a DNS query to the EASDF, the EASDF will send a report to the SMF according to the reporting rules.

[0004] In the case of a high uplink peak rate, if the UE frequently sends DNS queries to the EASDF in...

Images