| 摘要 |
The present invention relates to a method for performing a mobile security operation by using information about a mobile network log and a harmful traffic by installing a mobile traffic monitoring system at an access point between a mobile network and a wire network to monitor whether mobile terminals accessing to the mobile network do harmful behavior. Although conventional security operation equipment performs a security operation by using an event and a log generated from information protecting equipment such as traffic monitoring equipment, firewall equipment or IDS/IPS at a position of a gateway of external and internal networks, since it is possible to directly access to a network by using a mobile access point installed in the internal network due to the property of a mobile device, the conventional security operation equipment may cause a security threat that it is difficult for a security manager to recognize. The present invention provides a mobile network security operation technique which is capable of sensing an abnormal sign of mobile data through a security event processing apparatus at a mobile network access point. |
