基于低复杂度随机分组检测的LTE核心网入侵识别  

Intrusion Recognition for LTE Core Network Based on Low-Complexity Random Packet Detection

作　　者：刘雅丽 石瑞峰[1] 任晓亮[2] LIU Yali;SHI Ruifeng;REN Xiaoliang(College of Computer and Information Engineering,Inner Mongolia Agricultural University,Hohhot 010018,China;School of Chinese Materia Medica,Tianjin University of Traditional Chinese Medicine,Tianjin 301617,China)

机构地区：[1]内蒙古农业大学计算机与信息工程学院,呼和浩特010018 [2]天津中医药大学中药学院,天津301617

出　　处：《计算机工程》2020年第8期139-145,152,共8页Computer Engineering

基　　金：国家自然科学基金(81473543)。

摘　　要：在长期演进(LTE)核心网中,使用报文检测功能来检测通过策略和计费控制(PCC)系统分组数据网络网关的分组,可减少恶意用户带来的安全威胁。为此,提出一种基于低复杂度随机分组检测的LTE核心网入侵识别方法。给出第三代合作伙伴计划演进分组核心PCC系统的基本架构,在此基础上,设计一种随机分组检测方案解析模型构建方式,用于从入侵检测率方面评估检测性能。同时设计一种随机分组检测方案来优化执行深度分组检查的成本。实验结果表明,该模型提供了设置检测率的有效手段,能够达到检测率、检测成本和检测延迟之间的平衡。In Long Term Evolution(LTE)core network,message detection is used in Policy Control and Charging(PCC)system to detect packets passing through the packet data network gateway,which reduces the security threat brought by malicious users.For this reason,this paper proposes an intrusion recognition method for LTE core network based on low-complexity random packet detection.The basic architecture of the PCC system of the 3rd Generation Partnership Project(3GPP)evolved packet core is given.On this basis,the construction method of an analytical model of the random packet detection scheme is proposed.This model is used to evaluate the detection performance from the aspect of intrusion detection rate.At the same time,a random packet detection scheme is designed in order to optimize the cost of Deep Packet Inspection(DPI)implementation.Experimental results show that the model provides an effective means to set the detection rate and achieves a balance among the detection rate,the detection cost and the detection delay.

关 键 词：随机分组 入侵检测 长期演进 核心网 蜂窝数据 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]