基于低复杂度随机分组检测的LTE核心网入侵识别

Intrusion Recognition for LTE Core Network Based on Low-Complexity Random Packet Detection

在长期演进(LTE)核心网中,使用报文检测功能来检测通过策略和计费控制(PCC)系统分组数据网络网关的分组,可减少恶意用户带来的安全威胁。为此,提出一种基于低复杂度随机分组检测的LTE核心网入侵识别方法。给出第三代合作伙伴计划演进分组核心PCC系统的基本架构,在此基础上,设计一种随机分组检测方案解析模型构建方式,用于从入侵检测率方面评估检测性能。同时设计一种随机分组检测方案来优化执行深度分组检查的成本。实验结果表明,该模型提供了设置检测率的有效手段,能够达到检测率、检测成本和检测延迟之间的平衡。

In Long Term Evolution(LTE)core network,message detection is used in Policy Control and Charging(PCC)system to detect packets passing through the packet data network gateway,which reduces the security threat brought by malicious users.For this reason,this paper proposes an intrusion recognition method for LTE core network based on low-complexity random packet detection.The basic architecture of the PCC system of the 3rd Generation Partnership Project(3GPP)evolved packet core is given.On this basis,the construction method of an analytical model of the random packet detection scheme is proposed.This model is used to evaluate the detection performance from the aspect of intrusion detection rate.At the same time,a random packet detection scheme is designed in order to optimize the cost of Deep Packet Inspection(DPI)implementation.Experimental results show that the model provides an effective means to set the detection rate and achieves a balance among the detection rate,the detection cost and the detection delay.