METHOD FOR BLOCKING ABNORMAL TRAFFIC IN 4G MOBILE NETWORK

摘要

Provided is a method for blocking abnormal traffic. The method for blocking abnormal traffic includes receiving first packet information; determining whether an SIP message is included in the first packet information; determining whether the SIP message is an SIP invite message when the SIP message is included in the first packet information; extracting a GTD-U TEID from the first packet information when the SIP message is the SIP invite message; inquiring first user terminal identification information from a first storage unit based on the GTD-U TEID; extracting second user terminal identification from a From field of the SIP message when the first user terminal identification information is stored in the first storage unit; and comparing the second user terminal identification information with the first user terminal identification information. [Reference numerals] (AA) Start; (BB) End; (S101) Input first packet information; (S102) Is an SIP message included?; (S103) SIP INVITE message?; (S104) Extract TEID (UL-DATA); (S105) Inquire MSISDN information based on the TEID; (S106) Is MSISDN information included?; (S107) Extract the MSISDN information from From; (S108) MSISND same?; (S109) Generate/transfer detection information; (S110) Injury information detected/blocked?; (S111) Generate/add abnormal SIP injury information and detection information