Abnormal IP Packets on 3G Mobile Data Networks

Authors: Joo-Hyung Oh, Dongwan Kang, JunHyung Cho, Chaetae Im

Abstract:

As the mobile Internet has become widespread in recent years, communication based on mobile networks is increasing. As a result, security threats have been posed with regard to the abnormal traffic of mobile networks, but mobile security has been handled with focus on threats posed by mobile malicious codes, and researches on security threats to the mobile network itself have not attracted much attention. In mobile networks, the IP address of the data packet is a very important factor for billing purposes. If one mobile terminal use an incorrect IP address that either does not exist or could be assigned to another mobile terminal, billing policy will cause problems. We monitor and analyze 3G mobile data networks traffics for a period of time and finds some abnormal IP packets. In this paper, we analyze the reason for abnormal IP packets on 3G Mobile Data Networks. And we also propose an algorithm based on IP address table that contains addresses currently in use within the mobile data network to detect abnormal IP packets.

Keywords: WCDMA, 3G, Abnormal IP address, Mobile Data Network Attack

Digital Object Identifier (DOI): doi.org/10.5281/zenodo.1335566

References:

[1] CISCO, Global Mobile Data Traffic Forecast 2011-2016, Cisco Visual Networking Index (VNI), 2012.
[2] F. Ricciato, P. Svoboda, E. Hasenleithner, W. Fleischer, On the impact of unwanted traffic onto a 3G network, Proceedings of the Security, Privacy and Trust in Pervasive and Ubiquitous Computing, 2006, pp. 49-56.
[3] 3GPP, GPRS Tunnelling Protocol (GTP) across the Gn and Gp interface (Release 10), TS 29.060 V10.2.0, 2011.
[4] H. Holma, A. Toskala, WCDMA for UMTS - Radio Access for Third Generation Mobile Communications (Willey, 2004).
[5] DARWIN Project, http://www.ftw.at/ftw/research/projects/
[6] F. Ricciato, Traffic monitoring and analysis for the optimization of a 3G network, Journal of Wireless Communication, Vol. 13, 2006, pp. 42-49.
[7] ASMONIA Project, http://www.asmonia.de/