SYSTEM FOR DETECTING INFECTED TERMINAL BASED ON URL CONNECTION AND METHOD THEREOF

摘要

Disclosed are a system and method for detecting a terminal infected with a malicious application based on a URL access detection technology. The system for detecting a terminal infected with a malicious application comprises: a traffic detection unit for monitoring, in a section within a mobile network through which a data packet is transmitted, a data packet being transmitted, to detect a malicious URL which a user terminal is accessing according to the monitoring results; and a terminal identification unit for searching for a user terminal accessing the URL from a predetermined session table based on a tunnel endpoint identifier (TEID) of GTP-U which is the data packet transmitted through the section, to identify whether the user terminal is infected by a malicious application based on the search result.