蜜罐技术在移动网入侵检测中的应用  

Application of Honeypot Technology in Instrusion Detection System(IDS) of Mobile Communication Core Networks

作　　者：陈辉煌[1] 汤红波[1] 刘彩霞[1] 朱可云[1] 

机构地区：[1]国家数字交换系统工程技术研究中心,郑州450002

出　　处：《电讯技术》2009年第6期31-35,共5页Telecommunication Engineering

基　　金：国家高技术研究发展计划(863计划)重点项目(2008AA011003)

摘　　要：针对当前2G、2.5G移动核心网MAP协议的安全性缺陷,深入研究了蜜罐技术,将蜜罐关键技术与移动核心网入侵检测技术相结合,提出基于蜜罐系统的入侵检测模型。实验结果表明,蜜罐系统能够实现对入侵行为的追踪定位,进一步增强移动核心网用户信息安全防护能力。To solve the security defect of MAP protocol in current mobile communication core networks, the key technology of honeypot is applied to intrusion detection system of mobile communication core networks, and then an intrusion detection model based on honeypot is introduced. The simulation result shows that it can trace the source of intrusion, and enhance the capability of protecting user data in mobile communication core networks.

关 键 词：移动通信 核心网 入侵检测 蜜罐技术 

分 类 号：TN915[电子电信—通信与信息系统]