论文部分内容阅读
随着中国移动网络IP化、终端智能化以及数据业务的逐步开展,移动业务通过IP承载方式实现了降本增效,提高了业务灵活性,同时,全IP网络也面临着越来越多的业务层面的安全威胁。其中,不法SP利用MISC业务订购流程漏洞通过WAP网关反向用户订购的攻击,不仅给中国移动的用户带来了较大的经济损失,同时严重损害了中国移动的品牌。针对中国移动现网上出现的恶意订购的投诉,需要设计专用的恶意订购检测系统进行恶意订购流量的监测,并及时发现针对WAP系统的攻击,从而定位攻击的来源,发现攻击路径。
With the gradual development of China Mobile IP, terminal intelligence and data services, the mobile service realizes cost reduction and efficiency enhancement through IP bearer and improves service flexibility. Meanwhile, all-IP networks are also facing more and more Business-level security threats. Among them, the unscrupulous SP to use MISC business ordering process loopholes through the WAP gateway reverse user subscription attacks, not only to China Mobile users have greater economic losses, while seriously damaging China Mobile’s brand. For the malicious order appearing on China Mobile’s online market, it is necessary to design a dedicated malicious order detection system to monitor maliciously ordered traffic and timely detect attacks on the WAP system so as to locate the source of the attack and discover the attack path.