METHOD FOR DETECTING ABNORMAL PACKETS BY IP SPOOFING IN MOBILE COMMUNICATION NETWORK

摘要

The present invention relates to a method of detecting an abnormal packet due to an IP spoofing in a mobile communications network. A method of detecting an abnormal packet due to an IP spoofing in a mobile communications network according to the present invention includes the following steps of receiving a GTP (GPRS Tunneling Protocol) packet; confirming whether the GTP packet is a user data packet introduced from an external network into the mobile communications network; extracting information on a transmitting location from the user data packet when the GTP packet is a user data packet; confirming whether the information on the transmitting location information transmitted through the user data packet exists in an attack location management table by using the information on the transmitting location information; and detecting the GTP packet as an abnormal packet when the information on the transmitting location exists in the attack location management table.