Terminal Event Reporting for DoS Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Terminals face security threats such as Denial of Service (DoS) attacks when initiating connection requests to Base Stations, leading to network access denial and prolonged downtime.
Innovation Solution
A method and apparatus for reporting information, where a terminal records event information upon encountering a denial event during a connection request and sends an event report to the network once access is regained, including parameters like event type, location, and cause of denial.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a terminal sends connection requests to Base Stations, then network access is enabled, but the terminal becomes vulnerable to DoS attacks causing prolonged downtime
Solution Approach 1:
The terminal performs preliminary actions by recording denial event information locally before network access is fully restored. This allows the terminal to have security data ready for immediate reporting once connection is re-established, preventing loss of security information during the downtime caused by DoS attacks.
Solution Approach 2:
The system implements feedback by reporting the recorded denial event information to the network after successful re-connection. This feedback loop enables the network to receive security threat information from the terminal, allowing the network to identify and address potential DoS attacks based on the reported denial patterns.
2Reliability
If the network manually collects and troubleshoots security threats, then security issues can be identified, but labor and time costs increase
Solution Approach 1:
The terminal performs self-service by autonomously recording denial event information and automatically reporting it to the network after re-connection. This eliminates the need for manual collection of security data by network operators, reducing both labor costs and troubleshooting time while maintaining reliable security monitoring.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An information reporting method, apparatus, terminal, and storage medium, belonging to the terminal field of communication. The method comprises: a terminal sends a connection request, the connection request being used for requesting the establishment of a wireless connection with an access network device in a network; when a rejection event corresponding to the connection request occurs, the terminal records event information of the rejection event, the rejection event referring to an event in response to rejection of the connection request; and, after the terminal successfully accesses the network, the terminal sends to the network event reporting information generated on the basis of the event information. By means of the terminal reporting event information of the rejection event and sending event reporting information to the network after successfully accessing the network, the present disclosure facilitates the network learning about potential security threats, such as DoS attacks, on the basis of the event reporting information. By means of the reporting of the terminal, the network collects information related to the DoS attacks to which it is subject, helping to reduce labour and time costs and increase efficiency relative to manual collection and troubleshooting methods.