基于关联融合的volte流量分析研究  

Research on VoLTE Traffic Based on Association Fusion

作　　者：刘敏[1] 陈曙晖[1] LIU Min;CHEN Shuhui(College of Computer,National University of Defense Technology,Changsha 410073,China)

机构地区：[1]国防科技大学计算机学院,长沙410073

出　　处：《信息网络安全》2020年第4期81-86,共6页Netinfo Security

基　　金：国家重点研发计划[2017YFB0802300]。

摘　　要：随着VoLTE的不断普及,VoLTE用户以及移动网络中VoLTE流量持续增加。在4G、5G网络不断普及的背景下,开展VoLTE流量的分析研究工作具有十分重要的意义。文章介绍了VoLTE基本网络架构及其语音编码原理;在VoLTE信令数据与语音数据相关性分析的基础上,结合VoLTE会话中信令完整性的不足,提出了基于信令引导以及无信令引导下的VoLTE语音分析处理方法;通过对比VoLTE所采用的AMR语音的传输格式和播放格式,阐述了格式转换与AMR语音还原处理方法。文章通过关联融合技术获取了用户VoLTE通话相关的通联信息,为合法网络取证工作提供了重要信息保障。With the increasing popularity of VoLTE, VoLTE users and VoLTE traffic in mobile networks continue to increase. In the context of the continuous popularization of 4 G and 5 G networks, it is of great significance to carry out research on VoLTE traffic. This paper introduces VoLTE network architecture and the principle of speech coding. Based on the analysis of the correlation between VoLTE signaling data and voice data, combined with the fact that the integrity of VoLTE session message is insufficient, this paper proposes a method of VoLTE speech analysis and processing based on signaling guidance and without signaling guidance. By comparing AMR voice transmission format and audio format, this paper proposes the method of format conversion and AMR voice recovery. Through association fusion, the connection information related to VoLTE calls are obtained, which provides important information guarantee for lawful network forensics.

关 键 词：VoLTE AMR编码 语音还原 网络取证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]