Detection of softswitch attacks

摘要

A security system ( 150 ) in a network includes a softswitch ( 440 ) and a detection unit ( 420 ). The detection unit ( 420 ) detects activity directed to the softswitch ( 440 ) and records the detected activity. In another implementation, a method for configuring a security device ( 150 ) for use in a network includes installing a detection unit ( 420 ) to monitor and record traffic directed to the security device ( 150 ), installing a deceptive operating system ( 430 ), installing a softswitch ( 440 ), and configuring the deceptive operating system ( 430 ) and softswitch ( 440 ) to mirror settings used in an active softswitch ( 140 ) in the network.