基于规则和状态检测技术的七号信令网络边界防护设备的设计与实现  

Design and Implementation of Boundary Protection Equipment for SS7 Network based on Rule and State Detection Technology

作　　者：高燕[1] 张睿[1] 

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2016年第7期943-949,共7页Communications Technology

摘　　要：七号信令网作为电信网的神经网络,是电信网的重要支撑,其安全防护是电信网安全防护体系的重要组成部分。在当前电信网逐步开放和融合的大背景下,原本封闭的七号信令网正面临着来自网络内外的巨大安全威胁。为应对目前电信网中SS7信令系统面临的安全威胁,研究提出了一种基于规则和状态检测技术的七号信令网络边界防护设备实现方案。该方案基于规则过滤、实时监控、分区隔离、透明传输、攻击防御、状态机过滤等关键技术,可应用于SS7信令网边界防护,有效解决SS7信令安全问题。As a neural network of telecommunication network, SS7 signalling network is an important support for telecom network, and its security protection also a crucial component of the security protection system for telecommunication network. Under the situation that the telecommunication network is increasingly open and integrated, the originally, closed telecom network now faces a huge security threat from internal and external network.To deal with the security threats against SS7 system, an implementation scheme of boundary protection equipment for SS7 network is proposed. Based on several critical technologies including rule-based filtering, real-time monitoring, partition isolation, transparent transmission, attack defense, state machine filtering, the proposed scheme could be applied to the boundary protection of SS7 network and effectively solving the SS7 security issues.

关 键 词：SS7 规则检测 攻击防御 安全审计 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]