3G核心网论文：面向GTP_IPS系统的用户面流量监控模块设计与实现.docVIP

3G核心网论文：面向GTP_IPS系统的用户面流量监控模块设计与实现 【中文摘要】随着第三代移动通信(3G)网络应用的普及和发展,其自身的安全问题也日益受到人们的广泛关注。GTP协议作为3G核心网中最为重要的一种IP承载和隧道封装协议,其自身没有采用任何安全机制,因此,存在明显的安全漏洞,容易被攻击者所利用,从而使3G核心网面临巨大的安全威胁。针对该问题,开展了GTP协议的安全过滤及防护技术研究,设计并开发了具有GTP控制面和用户面安全防护功能的GTP_IPS系统。本文主要涉及GTP_IPS系统中GTP用户面流量监控模块的设计与实现。首先分析了3G核心网中GTP用户面面临的众多安全威胁,概述了国内外各大安全厂商开发的GTP防护产品对用户面流量的防护功能。在此基础上,结合GTP协议的特性,设计并实现了GTP用户面流量监控模块,主要支持以下功能：支持对GTP用户面的TEID和序列号进行信息维护与检测；支持包括IPv4、TCP、UDP、HTTP等协议在内的GTP用户面数据的分层解析；支持对HTTP业务 【英文摘要】With the development of the 3rd generation mobile communication (3G) networks and applications, security issues in such networks have become an increasing concern. GTP is one of the most important IP bearing and tunnels wrapper protocols in 3G core networks. However, the GTP protocol itself does not employ any security mechanism, and therefore it has obvious security vulnerabilities which can be easily exploited by attackers, so that the 3G core networks are facing huge security threats. To address this issue, research on security filtering and protective technologies for GTP is carried out, and a GTP IPS system, with GTP-C and GTP-U security features, has been designed and implemented.This thesis mainly focuses on the design and implementation of GTP-U traffic monitoring module for GTPIPS. First, the security threats faced by GTP-U are analyzed and protective functions for user plane traffic in the GTP protection products of the major security vendors at home and abroad are summarized. On this basis, combined with the GTP characteristics, a GTP-U traffic monitoring module has been designed and implemented. It mainly supports the following functions:information maintenance and detection of TEID and Sequence Number in the GTP-U, stratified protocol analysis of the GTP-U data, which include IPv4, TCP, UDP, HTTP protocol, HTTP service data restore and content audit, and GTP-U attack detection, such as GTP-in-GTP attack detection. In order to test the effectiveness of the module, a laboratory test environment is set u