移动通信网络中基于移动性进行入侵异常检测的系统和方法技术方案

本发明专利技术涉及一种移动通信网络中基于移动性进行入侵异常检测的系统和方法，系统包括归属位置寄存器中的移动性数据库和与归属位置寄存器相连接的入侵异常检测模块，方法包括对获得移动用户的历史路径信息并进行特征提取、对用户特征进行数据压缩生成移动性树、对移动性树进行动态更新得到移动用户正常归档资料、计算当前移动用户的距离值并归一化处理、判断距离值与系统报警阈值间的关系、如果距离值低于系统报警阈值则是异常行为并进行后续报警处理。采用该种移动通信网络中基于移动性进行入侵异常检测的方法，能快速准确检测出异常活动，确保通信服务质量，提高资源管理性能，工作性能稳定，适用范围广，为移动通信技术的普及应用奠定了坚实基础。

System and method for Intrusion Detection Based on mobility in mobile communication network

The present invention relates to a system and method for anomaly detection based on mobility in a mobile communication network, the anomaly detection module of the system including mobile database in a home location register and connected with the home location register to obtain intrusion methods including mobile user history path information and feature extraction, feature of user data compression to generate a mobility tree, dynamically updating the mobility tree to obtain normal archived data of the mobile user, the mobile user computing distance value and normalized distance value judgment, and the relationship between the system alarm threshold, if the distance value is lower than the threshold alarm system is abnormal behavior and subsequent alarm processing. Using the method of anomaly detection based on the mobility of the mobile communication network, can quickly and accurately detect abnormal activities, to ensure the quality of communication services, improve management performance, stable performance, wide application range, set a solid foundation for the popularization and application of mobile communication technology.

【技术实现步骤摘要】

【技术保护点】
一种移动通信网络中基于移动性进行入侵异常检测的系统，包括归属位置寄存器，其特征在于，所述的系统中还包括移动性数据库和入侵异常检测模块，所述的移动性数据库位于所述的归属位置寄存器中，所述的入侵异常检测模块与所述的归属位置寄存器相连接。

【技术特征摘要】

【专利技术属性】
技术研发人员：于非，吴天明，鞠亮，车兆辉，宁涛，
申请(专利权)人：上海摩波彼克半导体有限公司，
类型：发明
国别省市：31[中国|上海]