4G and 5G air interface attack detection method based on signal and signaling fingerprint

Abstract

The invention discloses a 4G and 5G air interface attack detection method based on signal and signaling fingerprints. The method comprises the following steps: 1) a signal and signaling fingerprint acquisition stage: searching EARFCN and PCI in each target protection area; for each group of searched EARFCN and PCI, generating a signaling fingerprint and a signal fingerprint corresponding to the group of EARFCN and PCI information; 2) an attack detection stage: searching EARFCN and PCI in a target protection area; for each group of searched EARFCN, the PCI obtains a corresponding signaling fingerprint and a corresponding signal fingerprint; Comparing the fingerprint with the corresponding signaling fingerprint and the signal fingerprint acquired in the step 1); and determining whether the air interface attack exists according to the comparison result. Signal attack detection of a certain area can be achieved only by installing drive test software on the terminal, and the air interface attack detection method is simple and easy to deploy.

Description

technical field [0001] The invention mainly relates to the field of network security, in particular to a 4G / 5G air interface attack detection method based on signal and signaling fingerprints. Background technique [0002] With the popularization of 4G and 5G mobile communication networks, whether mobile communication functions can be used normally has become a key factor affecting people's quality of life. Due to the openness of 4G and 5G air interfaces, signal interference attacks on air interfaces are easy to implement (such as fake base station attacks, jammer attacks), etc. Once implemented successfully, it will affect the normal communication of users, resulting in affecting the normal communication of users. [0003] In order to prevent air interface attacks (such as fake base stations and jammers that prevent users from using mobile communication networks) from affecting users' normal communication, a large number of solutions have been proposed, such as using fake b...

AI Technical Summary

Problems solved by technology

Due to the openness of 4G and 5G air interfaces, it is easy to implement signal interference attacks against air interfaces (such as fake base station attacks and jammer attacks).

[0003] In order to prevent air interface attacks (such as fake base stations and jammers that prevent users from using mobile communication networks) from affecting users' normal communication, a large number of solutions have been proposed, such as using fake base station signal identification technology to identify fake base stations, using signal analysis technology to identify jammers, etc. These methods usually require dedicated hardware equipment to analyze signals, which have high requirements on hardware and are not easy to implement and deploy on a daily basis.

Images